The Apache News Round-up: week ending 5 August 2022

Welcome, August --we’re opening the month with another great week. Here’s what the Apache community has been up to:

ApacheCon™ – the ASF’s official global conference series, bringing Tomorrow’s Technology Today since 1998.

• Registrations are open for ApacheCon North America, 2022 https://www.apachecon.com/acna2022/register.html

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation’s bylaws.

• Next Board Meeting: 17 August 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF’s infrastructure running around the clock.

• 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF’s Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 244 Apache Committers and 725 contributors changed 7,148,073 lines of code over 2,945 commits. Top five contributors, in order, are: Claus Ibsen, Dan Haywood, Jinrui Zhang, Andi Huber, and Mark Thomas.

Apache Project Announcements – the latest updates by category.

Big Data –

• Apache NiFi 1.17.0 released
• Apache Arrow 8.0.0 and 9.0.0 released

Cloud Computing –

• Apache Kafka 3.2.1 released

Content –

• Apache JSPWiki 2.11.3 released
  • CVE-2022-27166: XSS vulnerability on XHRHtml2Markup.jsp in JSPWiki 2.11.2
  • CVE-2022-28730: Cross-site scripting vulnerability on AJAXPreview.jsp
  • CVE-2022-28731: CSRF in UserPreferences.jsp
  • CVE-2022-28732: Cross-site scripting vulnerability on WeblogPlugin
  • CVE-2022-34158: User Group Privilege Escalation

Databases –

• Apache Kvrocks (Incubating) 2.1.0 released

Middleware –

• Apache Linkis 1.1.3 (Incubating) released

Apache Community Notices

• Apache in 2021 - By The Digits + Video highlights

• The Apache Way to Sustainable Open Source Success

• Foundation Reports and Statements

• Presentations from 2021’s ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

• “Success at Apache” focuses on the people and processes behind why the ASF “just works.”

• Follow the ASF on social media: @TheASF on Twitter and The ASF page LinkedIn.

• Follow the Apache Community on Facebook and Twitter.

• Are your software solutions Powered by Apache? Download & use our “Powered By” logos.

Stay updated about The ASF

For real-time updates, sign up for Apache-related news by sending mail to announce-subscribe@apache.org and follow @TheASF on Twitter. For a broader spectrum from the Apache community, Planet Apache provides an aggregate of Project activities as well as the personal blogs and tweets of select ASF Committers.

Have an item? Contact us!

We try to catch all the major announcements and goings on at The ASF, but we’re not all-knowing. Have an item you want to see in the weekly round-up? Send it to press@apache.org.

Posted at 08:30PM Aug 05, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache News Round-up: week ending 29 July 2022

Farewell, July --we’re wrapping up the month with another great week. Here are the latest updates on the Apache community’s activities:

ApacheCon™ – the ASF’s official global conference series, bringing Tomorrow’s Technology Today since 1998.

• Registrations are open for ApacheCon North America, 2022 https://www.apachecon.com/acna2022/register.html

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation’s bylaws.

• Next Board Meeting: 17 August 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF’s infrastructure running around the clock.

• 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF’s Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 274 Apache Committers and 819 contributors changed 2,862,825 lines of code over 3,389 commits. Top five contributors, in order, are: Jean-Baptiste Onofré, Gary Gregory, Claus Ibsen, Robbie Gemmell, and Dan Haywood.

Apache Project Announcements – the latest updates by category.

Attic – provides process and solutions when an Apache project has reached its end of life.

• Apache Clerezza is now retired

APIs–

• The Apache Software Foundation Announces Apache® ShenYu™ as a Top-Level Project
• Apache APISIX 2.15.0 released

Big Data–

• Apache Calcite Avatica 1.22.0 released
  • CVE-2022-36364: Avatica JDBC driver httpclient_impl connection property can be used as an RCE vector

Content –

• Apache OpenOffice 4.1.13 released

Identity Management –

• Apache Fortress 2.0.8 released

Libraries–

• Apache MXNet CVE-2022-24294: ReDoS in RTC Module

Network Client –

• Apache MINA 2.2.1 released

Programming Languages –

• Apache Groovy 2.5.18, 3.0.12, and 4.0.4 released

RPC –

• Apache bRPC 1.2.0 released

Search –

• Apache Lucene 9.3.0 released

Servers–

• Apache Tomcat 10.0.23 released

Apache Community Notices

• Apache in 2021 - By The Digits + Video highlights

• The Apache Way to Sustainable Open Source Success

• Foundation Reports and Statements

• Presentations from 2021’s ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

• “Success at Apache” focuses on the people and processes behind why the ASF “just works.”

• Follow the ASF on social media: @TheASF on Twitter and The ASF page LinkedIn.

• Follow the Apache Community on Facebook and Twitter.

• Are your software solutions Powered by Apache? Download & use our “Powered By” logos.

Stay updated about The ASF

For real-time updates, sign up for Apache-related news by sending mail to announce-subscribe@apache.org and follow @TheASF on Twitter. For a broader spectrum from the Apache community, Planet Apache provides an aggregate of Project activities as well as the personal blogs and tweets of select ASF Committers.

Have an item? Contact us!

We try to catch all the major announcements and goings on at The ASF, but we’re not all-knowing. Have an item you want to see in the weekly round-up? Send it to press@apache.org.

Posted at 05:57PM Jul 29, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache News Round-up: week ending 22 July 2022

We’re wrapping up another great week with the following activities from the Apache community. Check out the latest announcements, project releases, and more.[Read More]

Posted at 02:59PM Jul 22, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache News Round-up: week ending 15 July 2022

Happy Monday, everyone! Let's review the Apache community's activities from the past week, including major announcements and status snapshots. Have an item to add? Feel free to email the press team! [Read More]

Posted at 02:31PM Jul 18, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache News Round-up: week ending 8 July 2022

Happy Friday, everyone --let's review the Apache community's activities from over the past week:

ApacheCon™ – the ASF's official global conference series, bringing Tomorrow's Technology Today since 1998.
 - Registrations are open for ApacheCon North America, 2022 https://www.apachecon.com/acna2022/register.html

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 20 July 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 271 Apache Committers and 752 contributors changed 1,776,706 lines of code over 3,430 commits. Top five contributors, in order, are: Jean-Baptiste Onofré, Gary Gregory, Liang Zhang, Jarek Potiuk, and Minghui Liu.    

Apache Project Announcements – the latest updates by category.

Attic – provides process and solutions when an Apache project has reached its end of life.
 - Apache Chemistry is now retired https://s.apache.org/hqruj 

Big Data --
 - Apache Flink 1.15.1 released 
 - Apache Druid CVE-2022-28889: Clickjacking in the web console 

 - Apache EventMesh (incubating) 1.5.0 released

IoT --
 - Apache IoTDB 0.14.0 released 

Library --
 - Apache Commons CVE-2022-33980: Configuration insecure interpolation defaults 

Logging Services --
 - Apache Log4j 2.18.0 released

Machine Learning --
 - Apache SystemDS 3.0.0 released 

Messaging --
 - Apache Qpid ProtonJ2 1.0.0-M7 released
 - Apache Curator 5.3.0 released 
 - Apache Pulsar 2.10.1  released 

Middleware --
 - Apache Linkis 1.1.2-RC2 (incubating) released

Release Auditing --
 - Apache Creadur RAT 0.14 released on June 13 

Web Frameworks --
 - Apache Portals CVE-2022-32533: XSS, CSRF, SSRF, and XXE issues 

Workflow --
 - Apache DolphinScheduler 3.0.0-beta-2 released 

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) "Apache Innovation" [40 min] 

 - ASF Annual Report: FY2021 (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

---

Have an item? Contact us!

We try to catch all the major announcements and goings on at The ASF, but we're not all-knowing. Have an item you want to see in the weekly round-up? Send it to press@apache.org.

Posted at 10:23AM Jul 12, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache News Round-up: week ending 24 June 2022

Happy Friday, everyone --let's review the Apache community's activities from over the past week:

ApacheCon™ – the ASF's official global conference series, bringing Tomorrow's Technology Today since 1998.
 - FINAL CALL: Travel Assistance available for ApacheCon North America. Application deadline 1 July

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 20 July 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 306 Apache Committers and 829 contributors changed 2,186,931 lines of code over 3,155 commits. Top five contributors, in order, are: Sebastian Rühl, Mark Thomas, Ivan Zhakov, Gary Gregory, and Andriy Redko.

Apache Project Announcements – the latest updates by category.

Big Data --
 - Apache Druid 0.23.0 released
 - Apache Kyuubi (Incubating) 1.5.2-incubating released
 - Apache ShardingSphere 5.1.2 released

Databases --
 - Apache Geode 1.15.0 released

Middleware --
 - Apache Karaf runtime 4.2.16 released

Observability --
  - Apache SkyWalking Java Agent 8.11.0 released

Search --
 - Apache Lucene 8.11.2 released
 - Apache Solr 8.11.2 released

Servers --
 - Apache Tomcat CVE-2022-34305 - XSS in examples web application

Web Frameworks --
 - Apache Portals Jetspeed-2, Bridges and Applications are now retired as dormant

Workflow -
 - New Apache Airflow Providers released

Did You Know?

- Did you know that Lyft uses Apache Beam to enable real-time ML streaming feature generation and model execution, optimize  Marketplace ML predictions, and process ~4 million events/minute?   

- Did you know that eCommerce platform Fordeal's Big Data platform scheduler is powered by Apache DolphinScheduler? 

- Did you know that Apache Druid's extremely efficient data representation as rollup makes it the database of choice for AdTech data?

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) "Apache Innovation" [40 min] 

 - ASF Annual Report: FY2021 (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 11:46AM Jun 27, 2022 by Sally Khudairi in Newsletter  |   | 

The Apache News Round-up: week ending 17 June 2022

Happy Friday, everyone --here's what the Apache community has been up to over the past week:

ApacheCon™ – the ASF's official global conference series, bringing Tomorrow's Technology Today since 1998.
 - Sponsorships available for ApacheCon Asia - 29-31 July (online) and ApacheCon North America - 3-6 October (New Orleans) https://www.apachecon.com/
 - Travel Assistance available for ApacheCon North America. Application deadline 1 July https://apache.org/travel/

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 20 July 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 304 Apache Committers and 847 contributors changed 1,476,355 lines of code over 3,324 commits. Top 5 contributors, in order, are: Mark Thomas, Otavio R. Piske, Clebert Suconic, Harikrishna Patnala, and Robbie Gemmell.    

Apache Project Announcements – the latest updates by category.

Big Data --
 - The Apache Software Foundation Announces Apache® Doris™ as a Top-Level Project
 - Apache Flume 1.10.0 released 
   -- CVE-2022-25167: JMSSource does not protect from malicious JNDI URLs
 - Apache XMLBeans 5.1.0 released  
 - Apache SeaTunnel (Incubating) 2.1.2 released 
 - Apache Hadoop
   -- CVE-2021-37404: Heap buffer overflow in libhdfs native library
   -- CVE-2021-33036: Privilege escalation vulnerability

Build Management --
 - Apache Maven Enforcer Plugin 3.1.0 released 

Content --
  - Apache Jackrabbit Oak 2.21.11 released

IDE --
  - Apache NetBeans 14 released

Observability --
  - Apache SkyWalking Rover 0.2.0 released

Servers --
 - Apache Tomcat 8.5.81, 10.0.22 and Tomcat Native 1.2.34 released

Testing --
 - Apache JMeter 5.5 released 

Workflow -
 - New Apache Airflow Providers released

Did You Know?

- Did you know that Apache CloudStack 4.17 features include IPv6 with static routing and zero downtime upgrades? 

- Did you know that Apache SkyWalking has released 18 versions of various sub-projects in 2022 thus far? 

- Did you know that Apache Camel 3.x features the ability to run standalone without the need for a runtime such as Apache Karaf? 

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) "Apache Innovation" [40 min] 

 - ASF Annual Report: FY2021 (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 08:21PM Jun 20, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache News Round-up: week ending 10 June 2022

We're wrapping up another great week with the following activities from the Apache community:

ApacheCon™ – the ASF's official global conference series, bringing Tomorrow's Technology Today since 1998.
 - Sponsorships available for ApacheCon Asia - 29-31 July (online) and ApacheCon North America - 3-6 October (New Orleans) https://www.apachecon.com/
 - Travel Assistance available for ApacheCon North America. Application deadline 1 July https://apache.org/travel/

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 15 June 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 99.99%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 307 Apache Committers and 809 contributors changed 7,940,603 lines of code over 3,256 commits. Top 5 contributors, in order, are: Gary Gregory, Jean-Baptiste Onofré, Mark Thomas, Sebastian Rühl, and Claus Ibsen.

Apache Project Announcements – the latest updates by category.

Big Data --
 - Apache Flink Kubernetes Operator 1.0.0 released

Build Management --
 - Apache Maven Surefire 3.0.0-M7 released

Content --
  - Apache UIMA uimaFIT v3.3.0 released

Cloud Computing --
  - Apache CloudStack 4.17.0.0 released 

Database --
 - The Apache Software Foundation Announces Apache® AGE™ as a Top-Level Project https://s.apache.org/nycu1
 - Apache Impala 4.1.0 released

Messaging --
 - Apache Qpid proton-dotnet 1.0.0-M1 released 

Machine Learning --
 - Apache OpenNLP 2.0.0 released

Observability --
 - Apache SkyWalking 9.1.0 and BanyanDB 0.1.0 released

Programming Languages --
 - Apache Groovy 4.0.3 released 

Servers --
 - Apache HTTP Server 2.4.54 released
    -- CVE-2022-26377: mod_proxy_ajp: Possible request smuggling
    -- CVE-2022-28330: read beyond bounds in mod_isapi
    -- CVE-2022-28614: read beyond bounds via ap_rwrite()
    -- CVE-2022-29404: Denial of service in mod_lua r:parsebody
    -- CVE-2022-30522: mod_sed denial of service
    -- CVE-2022-30556: Information Disclosure in mod_lua with websockets 
    -- CVE-2022-31813: mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism
 - Apache HttpComponents Client 5.2-beta1 released
 - Apache Tomcat 9.0.64 and 10.1.0-M16 (beta) released

Web Frameworks --
 - Apache MyFaces Core 2.3.10, 2.3-next-M7, 3.0.2 released 
 - Apache Struts 2 ver. 6.0.0 released

Workflow -
 - Apache Airflow 2.3.2 released

Did You Know?

- Did you know that today is the last day you can apply for ASF Security team's paid Security Response Program Manager? Details at https://blogs.apache.org/security/entry/position-available-security-response-program

- Did you know that the latest projects undergoing development in the Apache Incubator include DevLake (Big Data), HugeGraph (graph database), Kvrocks (database), and Uniffle (unified Remote Shuffle Service)? https://incubator.apache.org/projects/#current

- Did you know that the logos of (nearly) all Apache projects are available at http://www.apache.org/logos/ ? Brand and logo usage guidelines are at https://apache.org/foundation/marks/ 

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) "Apache Innovation" [40 min] 

 - ASF Annual Report: FY2021 (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 05:28PM Jun 13, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache News Round-up: week ending 3 June 2022

Welcome, June --we're opening the month with another great week. Here's what the Apache community has been up to:

ApacheCon™ – the ASF's official global conference series, bringing Tomorrow's Technology Today since 1998.
 - Sponsorships available for ApacheCon Asia - 29-31 July (online) and ApacheCon North America - 3-6 October (New Orleans) https://www.apachecon.com/
 - Travel Assistance available for ApacheCon North America. Application deadline 1 July https://apache.org/travel/

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 15 June 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 296 Apache Committers and 769 contributors changed 1,747,550 lines of code over 3,685 commits. Top 5 contributors, in order, are: Jean-Baptiste Onofré, Igor Ostapenko, Jarek Potiuk, Mark Thomas, and Gary Gregory.

Apache Project Announcements – the latest updates by category.

APIs --
 - Apache APISIX 2.14.1 released

Big Data --
 - Apache NiFi MiNiFi C++ 0.12.0 released

Build Management --
 - Apache Maven Invoker Plugin 3.3.0 released 
 - Apache Archiva 2.2.8 released

Content --
  - Apache Tika 1.28.3 released 
    -- CVE-2022-30973: Missing fix for CVE-2022-30126 in 1.28.2

Database --
 - Apache JDO 3.2.1 released

Messaging --
 - Apache Qpid ProtonJ2 1.0.0-M6 released 

Libraries --
  - Apache MXNet (Incubating) 1.9.1 released

Orchestration --
  - Apache Hop 2.0.0 released

Programming Languages --
 - Apache Groovy 2.5.17 and 3.0.11 released

Servers --
 - Apache HttpComponents Core 5.2-beta2 released

Workflow -
 - Apache DolphinScheduler 3.0.0-beta-1 released

Did You Know?

- Did you know that the following Apache projects and their communities are celebrating anniversaries this month? Many happy returns to SpamAssassin (18 years); Santuario (16 years); Commons and Wicket (15 years); Sling (13 years); Karaf (12 years); Flume and VCL (10 years); Mesos (9 years); Atlas and Mynewt (5 years). Congratulations!  https://projects.apache.org/committees.html?date

- Did you know that the second Apache Hop Meetup will be taking place online on 9 June?

- Did you know that Ignite Summit (14 June/Online) will start with full-day trainings on 13 June? 

- Did you know that Beam Summit (18-20 July/Austin and Online - hybrid) will be holding workshops on 20 July? 

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) "Apache Innovation" [40 min] 

 - ASF Annual Report: FY2021 (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 03:27PM Jun 07, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache News Round-up: week ending 27 May 2022

Farewell, May --we're wrapping up the month with another great week. Here are the latest updates on the Apache community's activities:

ApacheCon™ – the ASF's official global conference series, bringing Tomorrow's Technology Today since 1998.
 - CFP open: ApacheCon Asia - 29-31 July (online) https://apachecon.com/acasia2022/cfp.html
 - Travel Assistance applications open: for ApacheCon North America. Apply today https://apache.org/travel/

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 15 June 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 291 Apache Committers and 798 contributors changed 3,065,234 lines of code over 3,676 commits. Top 5 contributors, in order, are: Clebert Suconic, Gary Gregory, Robbie Gemmell, Jarek Potiuk, and Mark Thomas.   

Apache Project Announcements – the latest updates by category.

Big Data --
 - Apache Bigtop 3.1.0 released 
 - Apache BookKeeper 4.14.5 released 
 - Apache NiFi 1.16.2 released 
 - Apache Beam 2.39.0 released 
 - Apache Libcloud 3.6.0 released 

Build Management --
 - Apache Maven CVE-2022-29599: Commandline class shell injection vulnerabilities

Geospatial --
 - Apache SIS 1.2 released

Messaging --
 - Apache Pulsar Manager 0.3.0 released

Middleware --
 - Apache Linkis 1.1.1 (incubating) released

Observability --
 - Apache SkyWalking Rover 0.1.0, Satellite 1.0.0, and BanyanDB Java Client 0.1.0 released

Search --
 - Apache Lucene 9.2.0 released

Servers --
 - Apache Tomcat 8.5.79 released

Workflow -
 - Apache Airflow 2.3.1 and Helm Chart 1.6.0 released

Did You Know?

- Did you know that the ASF Security team has opened a paid position for Security Response Program Manager?

- Did you know that the upcoming Apache Cassandra 4.1 will feature a new client-side hash password tool?

- Did you know that you can support the ASF through one-time and recurring tax-deductible donations online using Apple Pay, Google Pay, and Microsoft Pay using your mobile phone? https://donate.apache.org/

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) "Apache Innovation" [40 min] 

 - ASF Annual Report: FY2021 (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 02:09PM May 30, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache News Round-up: week ending 20 May 2022

Happy Friday, everyone --here's what the Apache community has been up to over the past week:

ApacheCon™ – the ASF's official global conference series, bringing Tomorrow's Technology Today since 1998.
 - CFP open: ApacheCon Asia - 29-31 July (online) https://apachecon.com/acasia2022/cfp.html
 - CFP open: ApacheCon North America - 3-6 October (New Orleans) https://cfp.apachecon.com/
 - Travel Assistance applications open: for ApacheCon North America. Apply today https://apache.org/travel/

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 15 June 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 99.91%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 301 Apache Committers and 836 contributors changed 4,481,686 lines of code over 3,397 commits. Top 5 contributors, in order, are: Jiajing Lu, Mark Thomas, Clebert Suconic, Liang Zhang, and Andi Huber.

Apache Project Announcements – the latest updates by category.

APIs --
 - Apache ShenYu (incubating) https://s.apache.org/x1a1q: Regular expression denial of service

Big Data and Machine Learning --
 - The Apache Software Foundation Announces Apache® YuniKorn™ as a Top-Level Project 

Content --
 - Apache Jackrabbit Oak 1.6.x deprecated 
 - Apache Tika CVE-2022-25169: BPGParser Memory Usage DoS
   -- CVE-2022-30126: Regular Expression Denial of Service in Standards Extractor 

Cloud Computing --
 - Apache Kafka 3.1.1 and 3.2.0 released 

Data Management Platform --
 - New Apache Ignite Extensions released

Integration --
 - Apache Camel 3.17.0 released

Libraries --
 - Apache ServiceComb Pack version 0.7.0 released 
 - Apache Commons Imaging 1.0-alpha3 released

Observability --
 - Apache SkyWalking Eyes 0.3.0 released 

Servers --
 - Apache Tomcat 9.0.63, 10.0.21, 10.1.0-M15 (alpha) released

Web Conferencing --
  - Apache OpenMeetings 6.3.0 released 

Workflow -
 - New Apache Airflow Providers released https://airflow.apache.org/

Did You Know?

- Did you know that the ASF Security team has opened a paid position for Security Response Program Manager? https://blogs.apache.org/security/entry/position-available-security-response-program

- Did you know that Zhongshang Huimin's eCommerce platform uses Apache ShardingSphere for order transaction processing and fulfillment for over 1 million supermarkets? 

- Did you know that the Airflow Summit local meetup in Tokyo will be held on 24 May?

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) "Apache Innovation" [40 min] 

 - ASF Annual Report: FY2021 (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 02:06PM May 23, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache News Round-up: week ending 13 May 2022

Hello, everyone --let's review the Apache community's activities from over the past week:

ApacheCon™ – the ASF's official global conference series, bringing Tomorrow's Technology Today since 1998.
 - CFP open: ApacheCon Asia - 29-31 July (online) https://apachecon.com/acasia2022/cfp.html
 - CFP open: ApacheCon North America - 3-6 October (New Orleans) https://cfp.apachecon.com/
 - Travel Assistance applications open: for ApacheCon North America. Apply today https://apache.org/travel/

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 18 May 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 352 Apache Committers and 867 contributors changed 5,014,702 lines of code over 3,393 commits. Top 5 contributors, in order, are: Mark Thomas, Liang Zhang, Claus Ibsen, Jarek Potiuk, and Andi Huber.       

Apache Project Announcements – the latest updates by category.

Big Data --
 - Apache Arrow 8.0.0 released 
 - Apache Calcite 1.21.0 released 
 - Apache BookKeeper 4.15.0 released 
 - Apache Flink Table Store 0.1.0 released

Content --
 - Apache UIMA Java SDK 3.3.0 released 
 - Apache OpenOffice 4.1.12 released

Embedded OS --
 - Apache Mynewt 1.10.0 and Apache NimBLE 1.5.0 released

FinTech --
 - Apache Fineract 1.7.0 released

Libraries --
 - Apache Commons Daemon 1.3.1 released

Search --
 - Apache Solr 9.0.0 released

Servers -
 - Apache Tomcat Native 1.2.33 released 
    -- CVE-2022-29885: EncryptInterceptor DoS 
    -- CVE-2022-25762: Request Mix-up

Did You Know?

- Did you know that China Unicom uses Apache DolphinScheduler for cross-cluster calls in automated billing procedures, including auditing, revenue sharing, and other operations to serve 40 billion voice orders per day? https://dolphinscheduler.apache.org/

- Did you know that Beam Summit (18-20 July/Hybrid) has announced hands-on Workshops?

- Did you know that the Apache Cassandra project is requesting community members to share their experiences of ApacheCon? https://t.co/XumUaVCuTB

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) "Apache Innovation" [40 min] 

 - ASF Annual Report: FY2021 (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 02:32PM May 16, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache News Round-up: week ending 6 May 2022

Welcome, May --we're opening the month with another great week. Here's what the Apache community has been up to:

ApacheCon™ – the ASF's official global conference series, bringing Tomorrow's Technology Today since 1998.
 - CFP open: ApacheCon Asia - 29-31 July (online) https://apachecon.com/acasia2022/cfp.html
 - CFP open: ApacheCon North America - 3-6 October (New Orleans) https://cfp.apachecon.com/
 - Travel Assistance applications open: for ApacheCon North America. Apply today https://apache.org/travel/

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 18 May 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 298 Apache Committers and 714 contributors changed 2,668,743 lines of code over 3,291 commits. Top 5 contributors, in order, are: Jean-Baptiste Onofré, Gary Gregory, Liang Zhang, Jiajing Lu, and Benoit Tellier. 

Apache Project Announcements – the latest updates by category.

Big Data --
 - Apache NiFi 1.16.1 released
   -- CVE-2022-29265: Improper Restriction of XML External Entity References in Multiple Components 
 - Apache Flink 1.15.0 released 

Content --
 - Apache Tika 1.28.2 and 2.4.0 released 
 - Apache PDFBox 3.0.0-alpha3 released 

Integration --
 - Apache Camel 3.11.7 (LTS) and 3.14.3 (LTS) released

Libraries --
 - Apache Jena CVE-2022-28890: Processing external DTDs

Messaging --
 - Apache ActiveMQ 5.16.5 and 5.17.1 released

Workflow --
 - Apache Airflow 2.3.0 released

Web Frameworks -
 - Apache Wicket 9.10.0 released

Did You Know?

- Did you know that the following Apache projects are celebrating anniversaries this month? Congratulations to Apache Geronimo (18 years); Tomcat (17 years); OpenJPA, POI, TomEE, Turbine (15 years); Libcloud (11 years); Giraph, ManifoldCF (10 years); Phoenix (8 years); Whimsy (7 years); Bahir, TinkerPop, Zeppelin (6 years); SystemDS (5 years); Traffic Control (4 years); Dubbo (3 years); Hudi, Iceberg (2 years). https://projects.apache.org/committees.html?date

- Did you know that the ASF Security team has opened a paid position for Security Response Program Manager? https://blogs.apache.org/security/entry/position-available-security-response-program

- Did you know that Japan's Nara Women's University's Researchers Database webapp is powered by Apache Wicket? https://wicket.apache.org/

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) "Apache Innovation" [40 min] 

 - ASF Annual Report: FY2021 (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 02:04PM May 09, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache News Round-up: week ending 29 April 2022

Farewell, April --we're wrapping up the month with another great week. Here are the latest updates on the Apache community's activities:

ApacheCon™ – the ASF's official global conference series, bringing Tomorrow's Technology Today since 1998.
 - CFP open: ApacheCon Asia - 29-31 July (online) https://apachecon.com/acasia2022/cfp.html
 - CFP open: ApacheCon North America - 3-6 October (New Orleans) https://cfp.apachecon.com/
 - Travel Assistance applications open: for ApacheCon North America. Apply today https://apache.org/travel/

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 18 May 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 330 Apache Committers and 838 contributors changed 3,654,519 lines of code over 3,500 commits. Top 5 contributors, in order, are: Andi Huber, Liang Zhang, Jean-Baptiste Onofré, Tamas Cservenak, and Tim Allison.    

Apache Project Announcements – the latest updates by category.

Application Servers/Middleware --
 - Apache Karaf 4.3.7 and Karaf runtime 4.4.0 released

Big Data --
 - Apache CouchDB CVE-2022-24706: Remote Code Execution Vulnerability in Packaging 

Libraries --
 - Apache Log4cxx 0.13.0 released

Messaging --
 - Apache Qpid JMS 2.0.0 released 

Observability --
 - Apache SkyWalking Kubernetes Event Exporter 1.0.0 released

Programming Languages --
 - Apache Groovy 4.0.2 released 

Workflow -
 - New Apache Airflow Providers released 

Did You Know?

- Did you know that enterprises seeking to meet their growing demand for rapid analytics with terabytes of real-time analytical data use Apache Ignite? 

- Did you know that the CFP for Pulsar Summit (18 August/San Francisco) closes on 21 May?

- Did you know that Airflow Summit will be held 23-27 May online and free of charge? 

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) "Apache Innovation" [40 min] 

 - ASF Annual Report: FY2021 (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 02:12PM May 02, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache News Round-up: week ending 22 April 2022

Hello, everyone --let's review the Apache community's activities from over the past week:

ApacheCon™ – the ASF's official global conference series, bringing Tomorrow's Technology Today since 1998.
 - CFP open: ApacheCon Asia - 29-31 July (online) https://apachecon.com/acasia2022/cfp.html
 - CFP open: ApacheCon North America - 3-6 October (New Orleans) https://cfp.apachecon.com/
 - Travel Assistance applications open: for ApacheCon North America. Apply today https://apache.org/travel/

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 18 May 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 99.99%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 306 Apache Committers and 772 contributors changed 17,057,661 lines of code over 3,534 commits. Top 5 contributors, in order, are: Michael Osipov, Benoit Tellier, Olivier Lamy, Gary Gregory, and Henrik Krohns.

Apache Project Announcements – the latest updates by category.

APIs --
 - Apache APISIX 2.13.1 released
    -- CVE-2022-29266: apisix/jwt-auth may leak secrets in the error response 
 - Apache ShenYu (Incubating) 2.4.3 released

Big Data --
 - Apache CouchDB 3.2.2 released 
 - Apache Beam 2.38.0 released 
 - Apache Kyuubi (Incubating) 1.5.1-incubating released 

Confidential Computing --
 - Apache Teaclave (incubating) 0.4.0 and Teaclave TrustZone SDK 0.2.0 released 

Content --
 - Apache PDFBox 2.0.26 released 

Messaging --
 - Apache Pulsar 2.9.2 and 2.10.0 released 

Middleware --
 - Apache Linkis 1.1.0 (incubating) released

Workflow --
 - Apache DolphinScheduler 3.0.0-alpha released 

Servers -
 - Apache TomEE 8.0.11 released 

Did You Know?

- Did you know that recent projects undergoing development in the Apache Incubator include HugeGraph (graph database), Linkis (computational middleware), and SeaTunnel (Big Data integration)? https://incubator.apache.org/projects/

- Did you know that the ASF is the top-ranked Open Source not-for-profit organization with the most stars on GitHub? Also ranked #4 of all organizations https://gitstar-ranking.com/

- Did you know that the CFP for Ignite Summit (14 June - online) is now open? https://ignite-summit.org/

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) "Apache Innovation" [40 min] 

 - ASF Annual Report: FY2021 (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 01:59PM Apr 25, 2022 by Swapnil M Mane in Newsletter  |   |