The Apache News Round-up: week ending 20 May 2022

Happy Friday, everyone --here's what the Apache community has been up to over the past week:

ApacheCon™ – the ASF's official global conference series, bringing Tomorrow's Technology Today since 1998.
 - CFP open: ApacheCon Asia - 29-31 July (online) https://apachecon.com/acasia2022/cfp.html
 - CFP open: ApacheCon North America - 3-6 October (New Orleans) https://cfp.apachecon.com/
 - Travel Assistance applications open: for ApacheCon North America. Apply today https://apache.org/travel/

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 15 June 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 99.91%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 301 Apache Committers and 836 contributors changed 4,481,686 lines of code over 3,397 commits. Top 5 contributors, in order, are: Jiajing Lu, Mark Thomas, Clebert Suconic, Liang Zhang, and Andi Huber.

Apache Project Announcements – the latest updates by category.

APIs --
 - Apache ShenYu (incubating) https://s.apache.org/x1a1q: Regular expression denial of service

Big Data and Machine Learning --
 - The Apache Software Foundation Announces Apache® YuniKorn™ as a Top-Level Project 

Content --
 - Apache Jackrabbit Oak 1.6.x deprecated 
 - Apache Tika CVE-2022-25169: BPGParser Memory Usage DoS
   -- CVE-2022-30126: Regular Expression Denial of Service in Standards Extractor 

Cloud Computing --
 - Apache Kafka 3.1.1 and 3.2.0 released 

Data Management Platform --
 - New Apache Ignite Extensions released

Integration --
 - Apache Camel 3.17.0 released

Libraries --
 - Apache ServiceComb Pack version 0.7.0 released 
 - Apache Commons Imaging 1.0-alpha3 released

Observability --
 - Apache SkyWalking Eyes 0.3.0 released 

Servers --
 - Apache Tomcat 9.0.63, 10.0.21, 10.1.0-M15 (alpha) released

Web Conferencing --
  - Apache OpenMeetings 6.3.0 released 

Workflow -
 - New Apache Airflow Providers released https://airflow.apache.org/

Did You Know?

- Did you know that the ASF Security team has opened a paid position for Security Response Program Manager? https://blogs.apache.org/security/entry/position-available-security-response-program

- Did you know that Zhongshang Huimin's eCommerce platform uses Apache ShardingSphere for order transaction processing and fulfillment for over 1 million supermarkets? 

- Did you know that the Airflow Summit local meetup in Tokyo will be held on 24 May?

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) "Apache Innovation" [40 min] 

 - ASF Annual Report: FY2021 (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 02:06PM May 23, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache News Round-up: week ending 13 May 2022

Hello, everyone --let's review the Apache community's activities from over the past week:

ApacheCon™ – the ASF's official global conference series, bringing Tomorrow's Technology Today since 1998.
 - CFP open: ApacheCon Asia - 29-31 July (online) https://apachecon.com/acasia2022/cfp.html
 - CFP open: ApacheCon North America - 3-6 October (New Orleans) https://cfp.apachecon.com/
 - Travel Assistance applications open: for ApacheCon North America. Apply today https://apache.org/travel/

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 18 May 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 352 Apache Committers and 867 contributors changed 5,014,702 lines of code over 3,393 commits. Top 5 contributors, in order, are: Mark Thomas, Liang Zhang, Claus Ibsen, Jarek Potiuk, and Andi Huber.       

Apache Project Announcements – the latest updates by category.

Big Data --
 - Apache Arrow 8.0.0 released 
 - Apache Calcite 1.21.0 released 
 - Apache BookKeeper 4.15.0 released 
 - Apache Flink Table Store 0.1.0 released

Content --
 - Apache UIMA Java SDK 3.3.0 released 
 - Apache OpenOffice 4.1.12 released

Embedded OS --
 - Apache Mynewt 1.10.0 and Apache NimBLE 1.5.0 released

FinTech --
 - Apache Fineract 1.7.0 released

Libraries --
 - Apache Commons Daemon 1.3.1 released

Search --
 - Apache Solr 9.0.0 released

Servers -
 - Apache Tomcat Native 1.2.33 released 
    -- CVE-2022-29885: EncryptInterceptor DoS 
    -- CVE-2022-25762: Request Mix-up

Did You Know?

- Did you know that China Unicom uses Apache DolphinScheduler for cross-cluster calls in automated billing procedures, including auditing, revenue sharing, and other operations to serve 40 billion voice orders per day? https://dolphinscheduler.apache.org/

- Did you know that Beam Summit (18-20 July/Hybrid) has announced hands-on Workshops?

- Did you know that the Apache Cassandra project is requesting community members to share their experiences of ApacheCon? https://t.co/XumUaVCuTB

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) "Apache Innovation" [40 min] 

 - ASF Annual Report: FY2021 (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 02:32PM May 16, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache News Round-up: week ending 6 May 2022

Welcome, May --we're opening the month with another great week. Here's what the Apache community has been up to:

ApacheCon™ – the ASF's official global conference series, bringing Tomorrow's Technology Today since 1998.
 - CFP open: ApacheCon Asia - 29-31 July (online) https://apachecon.com/acasia2022/cfp.html
 - CFP open: ApacheCon North America - 3-6 October (New Orleans) https://cfp.apachecon.com/
 - Travel Assistance applications open: for ApacheCon North America. Apply today https://apache.org/travel/

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 18 May 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 298 Apache Committers and 714 contributors changed 2,668,743 lines of code over 3,291 commits. Top 5 contributors, in order, are: Jean-Baptiste Onofré, Gary Gregory, Liang Zhang, Jiajing Lu, and Benoit Tellier. 

Apache Project Announcements – the latest updates by category.

Big Data --
 - Apache NiFi 1.16.1 released
   -- CVE-2022-29265: Improper Restriction of XML External Entity References in Multiple Components 
 - Apache Flink 1.15.0 released 

Content --
 - Apache Tika 1.28.2 and 2.4.0 released 
 - Apache PDFBox 3.0.0-alpha3 released 

Integration --
 - Apache Camel 3.11.7 (LTS) and 3.14.3 (LTS) released

Libraries --
 - Apache Jena CVE-2022-28890: Processing external DTDs

Messaging --
 - Apache ActiveMQ 5.16.5 and 5.17.1 released

Workflow --
 - Apache Airflow 2.3.0 released

Web Frameworks -
 - Apache Wicket 9.10.0 released

Did You Know?

- Did you know that the following Apache projects are celebrating anniversaries this month? Congratulations to Apache Geronimo (18 years); Tomcat (17 years); OpenJPA, POI, TomEE, Turbine (15 years); Libcloud (11 years); Giraph, ManifoldCF (10 years); Phoenix (8 years); Whimsy (7 years); Bahir, TinkerPop, Zeppelin (6 years); SystemDS (5 years); Traffic Control (4 years); Dubbo (3 years); Hudi, Iceberg (2 years). https://projects.apache.org/committees.html?date

- Did you know that the ASF Security team has opened a paid position for Security Response Program Manager? https://blogs.apache.org/security/entry/position-available-security-response-program

- Did you know that Japan's Nara Women's University's Researchers Database webapp is powered by Apache Wicket? https://wicket.apache.org/

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) "Apache Innovation" [40 min] 

 - ASF Annual Report: FY2021 (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 02:04PM May 09, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache News Round-up: week ending 29 April 2022

Farewell, April --we're wrapping up the month with another great week. Here are the latest updates on the Apache community's activities:

ApacheCon™ – the ASF's official global conference series, bringing Tomorrow's Technology Today since 1998.
 - CFP open: ApacheCon Asia - 29-31 July (online) https://apachecon.com/acasia2022/cfp.html
 - CFP open: ApacheCon North America - 3-6 October (New Orleans) https://cfp.apachecon.com/
 - Travel Assistance applications open: for ApacheCon North America. Apply today https://apache.org/travel/

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 18 May 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 330 Apache Committers and 838 contributors changed 3,654,519 lines of code over 3,500 commits. Top 5 contributors, in order, are: Andi Huber, Liang Zhang, Jean-Baptiste Onofré, Tamas Cservenak, and Tim Allison.    

Apache Project Announcements – the latest updates by category.

Application Servers/Middleware --
 - Apache Karaf 4.3.7 and Karaf runtime 4.4.0 released

Big Data --
 - Apache CouchDB CVE-2022-24706: Remote Code Execution Vulnerability in Packaging 

Libraries --
 - Apache Log4cxx 0.13.0 released

Messaging --
 - Apache Qpid JMS 2.0.0 released 

Observability --
 - Apache SkyWalking Kubernetes Event Exporter 1.0.0 released

Programming Languages --
 - Apache Groovy 4.0.2 released 

Workflow -
 - New Apache Airflow Providers released 

Did You Know?

- Did you know that enterprises seeking to meet their growing demand for rapid analytics with terabytes of real-time analytical data use Apache Ignite? 

- Did you know that the CFP for Pulsar Summit (18 August/San Francisco) closes on 21 May?

- Did you know that Airflow Summit will be held 23-27 May online and free of charge? 

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) "Apache Innovation" [40 min] 

 - ASF Annual Report: FY2021 (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 02:12PM May 02, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache News Round-up: week ending 22 April 2022

Hello, everyone --let's review the Apache community's activities from over the past week:

ApacheCon™ – the ASF's official global conference series, bringing Tomorrow's Technology Today since 1998.
 - CFP open: ApacheCon Asia - 29-31 July (online) https://apachecon.com/acasia2022/cfp.html
 - CFP open: ApacheCon North America - 3-6 October (New Orleans) https://cfp.apachecon.com/
 - Travel Assistance applications open: for ApacheCon North America. Apply today https://apache.org/travel/

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 18 May 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 99.99%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 306 Apache Committers and 772 contributors changed 17,057,661 lines of code over 3,534 commits. Top 5 contributors, in order, are: Michael Osipov, Benoit Tellier, Olivier Lamy, Gary Gregory, and Henrik Krohns.

Apache Project Announcements – the latest updates by category.

APIs --
 - Apache APISIX 2.13.1 released
    -- CVE-2022-29266: apisix/jwt-auth may leak secrets in the error response 
 - Apache ShenYu (Incubating) 2.4.3 released

Big Data --
 - Apache CouchDB 3.2.2 released 
 - Apache Beam 2.38.0 released 
 - Apache Kyuubi (Incubating) 1.5.1-incubating released 

Confidential Computing --
 - Apache Teaclave (incubating) 0.4.0 and Teaclave TrustZone SDK 0.2.0 released 

Content --
 - Apache PDFBox 2.0.26 released 

Messaging --
 - Apache Pulsar 2.9.2 and 2.10.0 released 

Middleware --
 - Apache Linkis 1.1.0 (incubating) released

Workflow --
 - Apache DolphinScheduler 3.0.0-alpha released 

Servers -
 - Apache TomEE 8.0.11 released 

Did You Know?

- Did you know that recent projects undergoing development in the Apache Incubator include HugeGraph (graph database), Linkis (computational middleware), and SeaTunnel (Big Data integration)? https://incubator.apache.org/projects/

- Did you know that the ASF is the top-ranked Open Source not-for-profit organization with the most stars on GitHub? Also ranked #4 of all organizations https://gitstar-ranking.com/

- Did you know that the CFP for Ignite Summit (14 June - online) is now open? https://ignite-summit.org/

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) "Apache Innovation" [40 min] 

 - ASF Annual Report: FY2021 (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 01:59PM Apr 25, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache News Round-up: week ending 15 April 2022

Happy Friday, everyone --here's what the Apache community has been up to over the past week:

ApacheCon™ – the ASF's official global conference series, bringing Tomorrow's Technology Today since 1998.
 - CFP for ApacheCon North America 2022 (taking place 3-6 October in New Orleans) is now open https://blogs.apache.org/conferences/entry/call-for-presentations-apachecon-north
 - Travel Assistance applications for ApacheCon are open until 1 July https://apache.org/travel/

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 20 April 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 99.99%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 402 Apache Committers and 1,048 contributors changed 17,760,803 lines of code over 5,646 commits. Top 5 contributors, in order, are: Otavio Rodolfo Piske, Andi Huber, Jinrui.Zhang, Liang Zhang, and Dillon Walls.   

Apache Project Announcements – the latest updates by category.

Incubator --where new Apache projects (aka "podlings") are mentored in the Apache Way of community-led development.
 - Apache brpc (incubating) 1.1.0 released

Attic --provides process and solutions when an Apache project has reached its end of life.
 - Apache River is now retired

Big Data --
 - Apache Bigtop 3.0.1 released
 - Apache ShardingSphere 5.1.1 released

Business Intelligence/Data Visualization --
 - Apache Superset CVE-2022-27479: SQL injection vulnerability in chart data API

Messaging --
 - Apache Qpid ProtonJ2 1.0.0-M5 released

Observability --
 - Apache SkyWalking 9.0.0, Client JS version 0.8.0, and Java Agent 8.10.0 released

Web Frameworks --
- Apache Struts 2.5.30 released
- Apache Struts CVE-2021-31805: Forced OGNL evaluation ...
- Apache Wicket 9.9.1 released

Workflow --
- New Apache Airflow Providers released 

Did You Know?

- Did you know that Apache APISIX Summit Asia will be held online 20-21 May? https://s.apache.org/rhzue 

- Did you know that the next Apache Airflow Community Meetup is taking place on 20 April 2022? https://www.crowdcast.io/e/airflow-meetup-april/register

- Did you know that demand for Apache Syncope identity management artifacts were downloaded 22.5K times over the last month? https://syncope.apache.org/

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) "Apache Innovation" [40 min] 

 - ASF Annual Report: FY2021 (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 02:27PM Apr 18, 2022 by Sally Khudairi in Newsletter  |   | 

The Apache Weekly News Round-up: week ending 8 April 2022

Hello, everyone --let's review the Apache community's activities from over the past week:

The Apache Software Foundation – the all-volunteer developers, stewards, and incubators of more than 350 Open Source projects and initiatives.
 - The Apache Software Foundation Welcomes 52 New Members https://s.apache.org/2022NewMembers

ApacheCon™ – the ASF's official global conference series, bringing Tomorrow's Technology Today since 1998.
 - CFP for ApacheCon North America 2022 (taking place 3-6 October in New Orleans) is now open https://blogs.apache.org/conferences/entry/call-for-presentations-apachecon-north

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 20 April 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 355 Apache Committers changed 17,006,169 lines of code over 3,843 commits. Top 5 contributors, in order, are: Andi Huber, Claus Ibsen, Gary Gregory, Andrea Cosentino, and Chesnay Schepler.   

Apache Project Announcements – the latest updates by category.

Big Data --
 - Apache Flink Kubernetes Operator 0.1.0 released 
 - Apache NiFi 1.16.0 released 
   -- CVE-2022-26850: Insufficiently protected credentials 
 - Apache Pinot 0.10.0 released 
   -- CVE-2022-23974: Pinot segment push endpoint has a vulnerability in unprotected environments 

Databases --
 - Apache Impala 3.4.1 released

Libraries --
 - Apache Daffodil VS Code 1.0.0

Observability --
 - Apache SkyWalking CLI 0.10.0 released 

Workflow --

Did You Know?

- Did you know that those interested in attending ApacheCon NA 2022 (3-6 October/New Orleans) but are unable to do so for financial reasons are invited to apply for Travel Assistance support? Applications open until 1 July https://apache.org/travel/

- Did you know that the ASF Infrastructure team launched a new GitBox platform with upgraded features and services? 

- Did you know that Beam Summit will be held both online and in-person in Austin, Texas, 18-20 July? https://2022.beamsummit.org/

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) “Apache Innovation” [40 min] 

 - ASF Annual Report: FY2021 -- Press release and Report (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 01:05PM Apr 11, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache Weekly News Round-up: week ending 1 April 2022

Welcome, April --we're opening the month with another great week. Here's what the Apache community has been up to:

ApacheCon™ – the ASF's official global conference series, bringing Tomorrow's Technology Today since 1998.
 - CFP for ApacheCon North America 2022 (taking place 3-6 October in New Orleans) is now open https://blogs.apache.org/conferences/entry/call-for-presentations-apachecon-north

Sponsor Success at Apache – the blog series that focuses on the people and processes behind why the ASF "just works".
 - "My experience with the Apache Way —a perfect society?" by Etienne Chauchot https://s.apache.org/oree2

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 20 April 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 352 Apache Committers changed 26,605,053 lines of code over 3,949 commits. Top 5 contributors, in order, are: Jean-Baptiste Onofré, Brent Bovenzi, Jarek Potiuk, Gary Gregory, and Andrea Cosentino.  

Apache Project Announcements – the latest updates by category.

APIs --
 - Apache APISIX 2.13.0 released
   -- CVE-2022-25757: body_schema check in request-validation plugin can be bypassed

Big Data --
 - Apache Calcite Avatica Go 5.1.0 released 

Cloud --
 - Apache jclouds 2.5.0 released 

Eventing --
 - Apache EventMesh (incubating) 1.4.0 released

Integration --
 - Apache Camel 3.16.0 released

Messaging --
 - Apache Qpid JMS 1.6.0 released

Servers --
 - Apache Tomcat 8.5.78, 9.0.62, 9.0.62, and 10.1.0-M14 (alpha) released 

Security Framework --

Web Frameworks --

Did You Know?

- Did you know that the following Apache projects are celebrating anniversaries in April? Congratulations to Apache CXF (14 years); Avro, HBase, Mahout, Nutch, Tika, and Traffic Server (12 years); Creadur and Jena (10 years); DeltaSpike (9 years); ORC and Parquet (7 years); AsterixDB and Johnzon (6 years); CarbonData and Fineract (5 years); NetBeans, PLC4X, and SkyWalking (3 years); and ShardingSphere (2 years) https://projects.apache.org/committees.html?date

- Did you know that you can anonymously take the 2022 Apache Pulsar Website Survey and help improve the new Pulsar Website? https://lists.apache.org/thread/08hchngnrhz79jhc1d96g3rh8ox2x2db

- Did you know that the ASF has been accepted as a Google Summer of Code mentoring organization for the 17th consecutive year? Apache Project mentors welcome! https://lists.apache.org/thread/cbplf0mszmxx2dv6oor0v227h8kfrk2m

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) “Apache Innovation” [40 min] 

 - ASF Annual Report: FY2021 -- Press release and Report (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 01:56PM Apr 04, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache Weekly News Round-up: week ending 25 March 2022

We're wrapping up another great week with the following activities from the Apache community:

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 20 April 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 333 Apache Committers changed 4,901,028 lines of code over 3,786 commits. Top 5 contributors, in order, are: Jean-Louis Monteiro, Jianyun Cheng, Sebastian Bazley, Benoit Tellier, and James Netherton.

Apache Project Announcements – the latest updates by category.

APIs --
 - Apache APISIX 2.13.0 released 

Big Data --
 - Apache Calcite Avatica 1.30.0 released
 - Apache SeaTunnel (Incubating) 2.1.0 released 
 - Apache Kyuubi (Incubating) 1.5.0-incubating released

Blockchain --
 - Apache Tuweni (Incubating) 2.2.0 released 

Content --
 - Apache POI 5.2.2 released 
 - Apache Syncope 2.1.11 released 
 - Apache Sling 12 released

IoT --
 - Apache IoTDB 0.13.0 released 
 - Apache StreamPipes (Incubating) 0.69.0 released

Libraries --
 - Apache OpenJPA 3.2.2 released 
 - Apache Daffodil 3.3.0 released

Messaging --
 - Apache Qpid Proton 0.37.0 and Qpid Dispatch 1.19.0 released 
 - Apache Pulsar 2.8.3 released

Search --
 - Apache Solr Operator v0.5.1 released 
 - Apache Lucene 9.1.0 released

Servers --

Did You Know?

- Did you know that improvements to Apache Drill 1.20 include backward compatibility with Apache Hadoop 2; connectors for Apache Phoenix; writing to JDBC data sources; support for new data file formats (including Apache Iceberg and SAS files); and API query improvements?

- Did you know that Apache Calcite 1.30 includes Babel support for <=> operator; SQL hints for temporal table join; fixtures so that dependent projects can write parser, validator, and rules tests; and upgrade jsonpath to fix CVE-2021-27568?

- Did you know that the CloudStack European User Group will be held virtually on 7 April? 

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) “Apache Innovation” [40 min] 

 - ASF Annual Report: FY2021 -- Press release and Report (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 11:30AM Mar 28, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache Weekly News Round-up: week ending 18 March 2022

Happy Friday! Let's take a look at what the Apache community has been up to over the past week:

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 20 April 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 328 Apache Committers changed 10,109,144 lines of code over 3,415 commits. Top 5 contributors, in order, are: Mark Thomas, Chesnay Schepler, Gary Gregory, Jean-Baptiste Onofré, and Claus Ibsen.     

Apache Project Announcements – the latest updates by category.

Big Data --
 - Apache Beam 2.37.0 released

Content --
 - Apache Jackrabbit Oak 1.6.23 released 

Cloud Computing --
 - Apache Kafka 3.0.1 released 
 - Apache Libcloud 3.5.0 released 
 - CVE-2022-26779: Apache Cloudstack: insecure random number generation affects project email invitation 

Database --
 - Apache Geode 1.13.8 released 

Integration --
 - Apache Camel 3.11.6 (LTS) released 

Libraries --
 - Apache Commons Daemon 1.3.0 released 

Messaging --
 - Apache ActiveMQ 5.17.0 released
 - Apache Curator 5.2.1 released

Observability --
 - Apache SkyWalking NodeJS 0.4.0 released 

Programming Languages --
 - Apache Groovy 4.0.1 released 

Servers --
 - Apache HTTP Server 2.4.53 released
   -- CVE-2022-23943: mod_sed: Read/write beyond bounds 
   -- CVE-2022-22721: Possible buffer overflow with very large or unlimited LimitXMLRequestBody
   -- CVE-2022-22720: HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier
   -- CVE-2022-22719: mod_lua Use of uninitialized value of in r:parsebody
 - Apache Tomcat 8.5.77, 9.0.60, 10.0.18, 10.1.0-M12 (alpha) released
 - Apache Traffic Server 9.1.2 released
 - Apache HttpComponents Core 5.2-beta1 released

Did You Know?

- Did you know that the Apache Druid community will be holding a hybrid meetup on 29 March? 

- Did you know that the Bangor Australia's Bangor Brumbies Football Club site uses Apache Wicket? 

- Did you know that you can support the ASF through one-time and recurring tax-deductible donations online using Apple Pay, Google Pay, and Microsoft Pay using your mobile phone? https://donate.apache.org/

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) “Apache Innovation” [40 min] 

 - ASF Annual Report: FY2021 -- Press release and Report (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 03:20PM Mar 21, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache Weekly News Round-up: week ending 11 March 2022

Hello, everyone --let's review the Apache community's activities from over the past week:

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 16 March 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 336 Apache Committers changed 4,769,139 lines of code over 3,697 commits. Top 5 contributors, in order, are: Jean-Baptiste Onofré, Otavio R. Piske, Gary Gregory, Andrea Cosentino, and Andi Huber.   

Apache Project Announcements – the latest updates by category.

Big Data --
 - CVE-2021-38296: Apache Spark: Key Negotiation Vulnerability

Content --
 - Apache Any23 2.7 released
   -- CVE-2022-25312: An XML external entity (XXE) injection vulnerability exists in the RDFa XSLTStylesheet extractor
 - Apache Jackrabbit 2.20.5 released 

Cloud Computing --
  - Apache CloudStack 4.16.1.0 LTS released 

Database --
 - Apache ZooKeeper 3.8.0 released
 - Apache Geode 1.12.9 released

IDE --
 - Apache NetBeans 13 released

IoT --
 - Apache IoTDB 0.12.5 released

Libraries --
 - Apache Olingo 4.9.0 released

Mail --
 - Apache James 3.7.0 released

Orchestration --
 - Apache Hop 1.2.0 released

Did You Know?

- Did you know that the next Apache Druid MeetUp will be held both online and in-person in Tel Aviv on 29 March? 

- Did you know that Apache ShardingSphere SQL Parse Format Function allows you to easily understand and automatically format complicated SQL statements?

- Did you know that the next Apache Airflow Community Meetup will be held on 16 March? Sign up to learn about Data Migration Pipeline with Apache Airflow http://bit.ly/3sES9fL

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) “Apache Innovation” [40 min] 

 - ASF Annual Report: FY2021 -- Press release and Report (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 12:47PM Mar 14, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache Weekly News Round-up: week ending 4 March 2022

We're opening March with a cracking week. Here's what the Apache community has been up to:

Sponsor Apache – a number of tax-deductible sponsorships help offset the ASF's day-to-day operating expenses that include infrastructure support, bandwidth, connectivity, servers, hardware, development environments, legal counsel, accounting services, trademark protection, marketing and publicity, educational events, and more.
 - The Apache Software Foundation Welcomes VMware as its Newest Platinum Sponsor

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Announcing New ASF Board of Directors, elected during this week's Members' Meeting.
 - Next Board Meeting: 16 March 2022. Running Board calendar and minutes are available.

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 332 Apache Committers changed 880,561 lines of code over 3,128 commits. Top 5 contributors, in order, are: Olivier Lamy, Andrea Cosentino, Claus Ibsen, Sebastian Rühl, and Eric Milles. 

Apache Project Announcements – the latest updates by category.

Application Servers/Middleware --
 - Apache Karaf Decanter 2.9.0 released

Content --
 - Apache Jackrabbit Oak 1.22.11 released
 - Apache POI 5.2.1 released
 - CVE-2022-26336: poi-scratchpad: A carefully crafted TNEF file can cause an out of memory exception 

FinTech --
 - Apache Fineract 1.6.0 released

Libraries --
 - Apache PDFBox JBIG2 ImageIO plugin 3.0.4 released

Logging Services --
 - Apache Log4j 2.17.2 released

Network Application Framework --
 - Apache MINA FtpServer 1.1.3 released

Servers --
 - Apache Tomcat 9.0.59, 10.0.17 and 10.1.0-M11 (alpha) released 

Workflow --
 - CVE-2021-45229: Apache Airflow: Reflected XSS via Origin Query Argument in URL

Did You Know?

- Did you know that the Apache Ignite community's CFP for IgniteSummit (taking place online 14 June) closes on 29 April?

- Did you know that HugeGraph (incubating), a large-scale and easy-to-use graph database that stores and queries billions of vertices and edges, is the newest podling undergoing development in the Apache Incubator?

- Did you know that the ASF manages 2,180 mailing lists, 486 of which are private? Over the past year, 19,053 authors sent 1,946,990 emails on 869,461 topics! 

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - The Apache Month in Review: January 2022 and video highlights

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) “Apache Innovation” [40 min] 

 - ASF Annual Report: FY2021 -- Press release and Report (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 02:37PM Mar 07, 2022 by Sally Khudairi in Newsletter  |   | 

The Apache Weekly News Round-up: week ending 25 February 2022

Farewell, February --we're wrapping up the month with another great week. Here are the latest updates on the Apache community's activities:

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 16 March 2022. Board calendar and minutes https://apache.org/foundation/board/calendar.html

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 323 Apache Committers changed 1,586,514 lines of code over 3,215 commits. Top 5 contributors, in order, are: Claus Ibsen, Jean-Louis Monteiro, Andrea Cosentino, Gary Gregory, and Eric Milles. 

Apache Project Announcements – the latest updates by category.

Application Servers/Middleware --
 - Apache Karaf Decanter 2.9.0 released

Content --
 - Apache Jackrabbit Oak 1.22.11 released
 - Apache JSPWiki CVE-2022-24947: CSRF Account Takeover
   -- CVE-2022-24948: Cross-site scripting vulnerability on User Preferences screen

FinTech --
 - Apache Fineract 1.6.0 released

Network Client --
 - Apache MINA 2.0.23, 2.1.6 released

Workflow --
 - Apache Airflow CVE-2022-24288: RCE in example DAGs

Did You Know?

 - Did you know that Apache Beam helps Palo Alto Networks meet streaming needs by providing a highly-performant, reliable, and resilient data processing framework for 10 million security events per second across 3 petabytes per day?

 - Did you know that the Australian Department of Transport's Vehicle Inspection System webapp is powered by Apache Wicket?

 - Did you know that Apache Ignite is a distributed cache, a distributed database, an in-memory database, and an in-memory data grid? 

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - The Apache Month in Review: January 2022 and video highlights

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) “Apache Innovation” [40 min] 

 - ASF Annual Report: FY2021 -- Press release and Report (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 02:49PM Feb 28, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache Weekly News Round-up: week ending 18 February 2022

We're wrapping up another great week with the following activities from the Apache community:

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 16 March 2022. Board calendar and minutes https://apache.org/foundation/board/calendar.html

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 99.99%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 350 Apache Committers changed 12,933,273 lines of code over 3,260 commits. Top 5 contributors, in order, are: Claus Ibsen, Udo Schnurpfeil, Andrea Cosentino, Mark Thomas, and Paul King.

Apache Project Announcements – the latest updates by category.

Big Data --
 - Apache Accumulo 1.10.2 released

Content --
 - Apache Tika 1.28.1 released

Libraries --
 - Apache Commons JCS 3.1 released 

Messaging --
 - Apache ActiveMQ 5.16.4 released 

Did You Know?

 - Did you know that select Apache Projects and mentors are preparing for the upcoming GSoC 2022 (mentoring organizations will be announced on 7 March)? Those interested in participating can learn how to get involved at https://community.apache.org/gsoc.html

 - Did you know that the next CloudStack European User Group will be held online on 7 April? 

 - Did you know that the CFP for Ignite Summit (taking place online on 14 June) closes on 29 April? 

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - The Apache Month in Review: January 2022 and video highlights

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) “Apache Innovation” [40 min] 

 - ASF Annual Report: FY2021 -- Press release and Report (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 03:55PM Feb 21, 2022 by Swapnil M Mane in Newsletter  |   | 

The Apache Weekly News Round-up: week ending 11 February 2022

Hello, everyone --let's review the Apache community's activities from over the past week:

Apache Software Foundation Statement at 8 February 2022 Senate Committee hearing on Homeland Security and Government Affairs https://s.apache.org/485lz

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.
 - Next Board Meeting: 16 February 2022. Board calendar and minutes https://apache.org/foundation/board/calendar.html

ASF Infrastructure – our distributed team on three continents keeps the ASF's infrastructure running around the clock.
 - 7M+ weekly checks yield uptime at 100.00%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world. View the ASF's Infrastructure Uptime site to see the most recent averages.

Apache Code Snapshot – Over the past week, 308 Apache Committers changed 5,335,315 lines of code over 2,989 commits. Top 5 contributors, in order, are: Gary Gregory, Emmanuel Lecharny, Mark Thomas, Liang Zhang, and Tilmann Zäschke. 

Apache Project Announcements – the latest updates by category.

APIs --
 - Apache APISIX 2.10.2 released
   -- CVE-2022-24112: apisix/batch-requests plugin allows overwriting the X-REAL-IP header 

Big Data --
 - Apache Beam 2.36.0 released

Content --
 - Apache Traffic Control 6.1.0 released
   -- CVE-2022-23206: Server-Side Request Forgery in Traffic Ops endpoint POST /user/login/oauth
 - Apache Tika 2.3.0 released
   -- Apache Tika 1.x End-Of-Life (EOL) announcement https://s.apache.org/lkqid
 - Apache Jackrabbit 2.21.10 released

Database --
 - Apache JDO 3.2 released
 - Apache Cassandra CVE-2021-44521: Remote code execution for scripted UDFs

Mail --
 - Apache James 3.6.2 released
   -- CVE-2022-22931: Path traversal in Apache James  

Web Frameworks --
 - Apache Wicket 9.8.0 released 

Did You Know?

 - Did you know that you can scale Apache SkyWalking in Kubernetes natively? https://skywalking.apache.org/blog/2022-01-24-scaling-with-apache-skywalking/

 - Did you know that the next Apache Ignite Community Gathering MeetUp will take place online on 16 February? 

 - Did you know that the ASF's seven-member Infrastructure team performs 7M+ weekly checks to ensure services are available around the clock to all Apache Projects and their communities? Average uptime in January 2022 was 100%!

Apache Community Notices

 - Apache in 2021 - By The Digits + Video highlights 

 - The Apache Month in Review: January 2022 and video highlights

 - Watch "Trillions and Trillions Served", the documentary on the ASF 1) full feature [49 min] 2) "Apache Everywhere" [6 min] 3) "Why Apache" [2.5 min] 4) “Apache Innovation” [40 min] 

 - ASF Annual Report: FY2021 -- Press release and Report (PDF)

 - The Apache Way to Sustainable Open Source Success 

 - Foundation Reports and Statements

 - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the ASF YouTube channel.

 - "Success at Apache" focuses on the people and processes behind why the ASF "just works." 

Posted at 02:35PM Feb 14, 2022 by Swapnil M Mane in Newsletter  |   |