You are viewing the static version of this archive.
For the interactive version, please visit: This page
The Apache Syncope team is pleased to announce the release of Syncope 2.1.4 Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology . The release will be available within 24h from: http://syncope.apache.org/downloads.ht...
The Apache Syncope team is pleased to announce the release of Syncope 2.0.13 Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology . The release will be available within 24h from: http://syncope.apache.org/downloads.h...
[this announcement is available online at https://s.apache.org/ABqy ] Open Source universal protocol adapter powers Industry 4.0 by connecting and integrating Industrial hardware and IoT edge gateways once blocked by closed-source, proprietary legacy systems, incompatible protocols, and vendor lock...
The Apache Qpid (http://qpid.apache.org) community is pleased to announce the immediate availability of Apache Qpid Proton 0.27.1. Apache Qpid Proton is a messaging library for the Advanced Message Queuing Protocol 1.0 (AMQP 1.0, ISO/IEC 19464, http://www.amqp.org). It can be used in a wide range o...
CVE-2019-0223: Apache Qpid Proton TLS Man in the Middle Vulnerability Severity: Important Vendor: The Apache Software Foundation Versions Affected: Qpid Proton 0.9 - 0.27.0. Description: The TLS support in Apache Qpid Proton 0.9 - 0.27.0 can under some circumstances connect as a client to a TLS ...
[this announcement is available online at https://s.apache.org/6ji5 ] Open Source Application Performance Monitor (APM) tool in use at Alibaba, China Eastern Airlines, Huawei, and WeBank, among others. Wakefield, MA —24 April 2019— The Apache Software Foundation (ASF), the all-volunteer develo...
[this announcement is available online at https://s.apache.org/OfIm ] Popular, award-winning Open Source development environment, tooling platform, and application framework enables Java programmers to easily build desktop, mobile, and Web applications Wakefield, MA —24 April 2019— The Apache ...
I'm happy to announce the release of Apache Subversion 1.12.0. Please choose the mirror closest to you by visiting: https://subversion.apache.org/download.cgi#supported-releases This is a stable feature release of the Apache Subversion open source version control system. SHA-512 checksums ar...
The input fields of the Apache Pluto "Chat Room" demo portlet are vulnerable to Cross-Site Scripting (XSS) attacks. Versions Affected: 3.0.0, 3.0.1 Mitigation: * Uninstall the ChatRoomDemo war file - or - * migrate to version 3.1.0 of the chat-room-demo war file For more information about Apache ...
The Apache Geode community is pleased to announce the availability of Apache Geode 1.9.0. Apache Geode is a data management platform that provides a database-like consistency model, reliable transaction processing and a shared-nothing architecture to maintain very low latency performance with high ...
The Apache Beam team is pleased to announce the release of version 2.12.0! Apache Beam is an open source unified programming model to define and execute data processing pipelines, including ETL, batch and stream (continuous) processing. See https://beam.apache.org You can download the release here...
The Apache Portals team is pleased to announce the General Availability of Apache Pluto version 3.1.0. The release contains the new "MVCBean Portlet" feature, which is an implementation of a large subset of the MVC 1.0 Specification. New demos are available that show the features and benefits of MV...
Hi all, We are pleased to announce that SINGA (incubating) 2.0.0 is released. SINGA is a general distributed deep learning platform for training big deep learning models over large datasets. The release is available at: http://singa.apache.org/en/downloads.html The main features of this release ...
[this announcement is available online at https://s.apache.org/YAbc ] Our final Round-Up of the month brings us the following activities from the Apache community: ASF Board –management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws. - Next B...
The Apache UIMA team is pleased to announce the release of Apache UIMA-DUCC version 3.0.0 You can download it from here: http://uima.apache.org/downloads.cgi DUCC stands for Distributed UIMA Cluster Computing. DUCC is a cluster management system providing tooling, management, and scheduling faci...
[this announcement is available online at https://s.apache.org/7lio ] Provides source code tooling services for 200M+ lines of code across 350+ Apache Projects Wakefield, MA —29 April 2019— The Apache® Software Foundation (ASF), the all-volunteer developers, stewards, and incubators of more t...
CVE-2018-8035: Apache UIMA DUCC webserver cross-site scripting (XSS) vulnerability due to unintended execution of user supplied javascript code. Severity: Important Vendor: The Apache Software Foundation Versions Affected: - Apache UIMA DUCC releases including and prior to 2.2.2 Description...
The Apache MINA project is pleased to announce MINA 2.1.2 ! Apache MINA (http://mina.apache.org) is a network application framework which helps users develop high performance and high scalability network applications easily by providing an abstract, event-driven, asynchronous API over various tran...
CVE-2018-8035: Apache UIMA DUCC webserver cross-site scripting (XSS) vulnerability due to unintended execution of user supplied javascript code. Severity: Important Vendor: The Apache Software Foundation Versions Affected: - Apache UIMA DUCC releases including and prior to 2.2.2 Description...
he Apache Directory Team is proud to announce the availability of version 1.0.3 of the Apache Directory LDAP API. The Apache Directory LDAP API is an ongoing effort to provide an enhanced LDAP API, as a replacement for JNDI and the existing LDAP API (jLdap and Mozilla LDAP API). This is a schema a...
The Apache Calcite team is pleased to announce the release of Apache Calcite Avatica 1.14.0. Avatica is a framework for building database drivers. Avatica defines a wire API and serialization mechanism for clients to communicate with a server as a proxy to a database. The reference Avatica client a...
[this post is available online at https://s.apache.org/Wkyw ] With the news of the Apache Software Foundation teaming up more closely with GitHub, we feel it natural to elaborate a bit on what has been going on and what this means for you as a committer and/or user of Apache software. A little bit...
Hi All, The Fineract team is pleased to announce the release of 'Apache Fineract 1.3.0'. The release is available for download at http://fineract.apache.org/#downloads. Apache Fineract is an open source system for core banking as a platform. Fineract provides a reliable, robust, and affordable solu...
CVE-2019-0213: Apache Archiva Stored XSS Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Archiva 2.0.0 - 2.2.3 The unsupported versions 1.x are also affected. It may be possible to store malicious XSS code into central configuration entries, i.e. the logo...
CVE-2019-0214: Apache Archiva arbitrary file write and delete on the server Severity: Medium Vendor: The Apache Software Foundation Versions Affected: Apache Archiva 2.0.0 - 2.2.3 The unsupported versions 1.x are also affected. It is possible to write files to the archiva server at arb...
The Apache Archiva team is pleased to announce the release of Archiva 2.2.4. You can download the new packages from the following URL: http://archiva.apache.org/download.cgi Archiva is an application for managing one or more remote repositories, including administration, artifact handling, b...
On behalf of the Apache Drill community, I am happy to announce the release of Apache Drill 1.16.0. Drill is an Apache open-source SQL query engine for Big Data exploration. Drill is designed from the ground up to support high-performance analysis on the semi-structured and rapidly evolving data co...
Severity: Medium Vendor: The Apache Software Foundation Versions Affected: Apache Sanselan 0.97-incubator Description: Certain input files could make the code hang when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note that Apache Sanselan (incubatin...
Severity: Medium Vendor: The Apache Software Foundation Versions Affected: Apache Sanselan 0.97-incubator Description: Certain input files could make the code to enter into an infinite loop when Apache Sanselan 0.97-incubator was used to parse them, which could be used in a DoS attack. Note tha...
[this newsletter is available online at https://s.apache.org/26Ik ] Happy May! Let's take a look at the activities from the Apache community over the past week: ASF Board –management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws. - Next Boar...
[this announcement is available online at https://s.apache.org/Fwf6 ] The Apache Software Foundation (ASF) welcomes the following new Members who were elected during the annual ASF Members' Meeting on 26-28 March 2019: Arpit Agarwall, Thomas Andraschko, Raymond Augé, Michael Bouschen, Liang Chen,...
Hello, we proudly announce that Apache Olingo 4.6.0 has been released. This is a maintenance release of Olingo for OData Version 4 (see specification [1] and new features [2]). This release is available for download: https://olingo.apache.org/doc/odata4/download.html Tutorials and documentation a...
The Apache Jackrabbit community is pleased to announce the release of Apache Jackrabbit 2.16.4. The release is available for download at: http://jackrabbit.apache.org/downloads.html See the full release notes below for details about this release: Release Notes -- Apache Jackrabbit -- Vers...
The Apache Qpid (http://qpid.apache.org) community is pleased to announce the immediate availability of Apache Qpid Proton-J 0.33.0. Apache Qpid Proton-J is a messaging library for the Advanced Message Queuing Protocol 1.0 (AMQP 1.0, ISO/IEC 19464, http://www.amqp.org). It can be used in a wide ran...
The Apache Ant Team is pleased to announce the release of Apache Ant 1.10.6. Apache Ant is a Java library and command-line tool that helps building software. The Apache Ant team currently maintains two lines of development. The 1.9.x releases require Java5 at runtime and 1.10.x requires Java8 at ...
The Apache Jackrabbit community is pleased to announce the release of Apache Jackrabbit 2.19.3. The release is available for download at: http://jackrabbit.apache.org/downloads.html See the full release notes below for details about this release: Release Notes -- Apache Jackrabbit -- Vers...
Dear community, The Apache Groovy team is pleased to announce version 2.4.17 of Apache Groovy. Apache Groovy is a multi-faceted programming language for the JVM. Further details can be found at the https://groovy.apache.org website. This release is a maintenance release of the GROOVY_2_4_X branch....
Dear community, The Apache Groovy team is pleased to announce version 2.5.7 of Apache Groovy. Apache Groovy is a multi-faceted programming language for the JVM. Further details can be found at the https://groovy.apache.org website. This release is a maintenance release of the GROOVY_2_5_X branch. ...
Dear community, The Apache Groovy team is pleased to announce version 3.0.0-beta-1 of Apache Groovy. Apache Groovy is a multi-faceted programming language for the JVM. Further details can be found at the https://groovy.apache.org website. This is a pre-release of a new version of Groovy. We greatl...
[this announcement is available online at https://s.apache.org/jL9E ] Hello, Friday. It's time to review the collective Apache community's activities from the past week: The Apache Software Foundation –the all-volunteer developers, stewards, and incubators of more than 350 Open Source projects a...
The Apache Qpid (http://qpid.apache.org) community is pleased to announce the immediate availability of Apache Qpid Proton 0.28.0. Apache Qpid Proton is a messaging library for the Advanced Message Queuing Protocol 1.0 (AMQP 1.0, ISO/IEC 19464, http://www.amqp.org). It can be used in a wide range o...
The Apache Qpid (http://qpid.apache.org) community is pleased to announce the immediate availability of Apache Qpid JMS 0.42.0. This is the latest release of our newer JMS client supporting the Advanced Message Queuing Protocol 1.0 (AMQP 1.0, ISO/IEC 19464, http://www.amqp.org), based around the Ap...
The Apache Jackrabbit community is pleased to announce the release of Apache Jackrabbit Oak. The release is available for download at: http://jackrabbit.apache.org/downloads.html See the full release notes below for details about this release: Release Notes -- Apache Jackrabbit Oak -- Version...
Announcing Apache Druid 0.14.1-incubating, a small patch release that includes a handful of bug and documentation fixes. This is our 3rd release as an Apache Incubating project. Apache Druid (incubating) is a high performance analytics data store for event-driven data. Source and binary distributi...
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.20. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.20 is a bugfix and featu...
The Apache Tomcat team announces the immediate availability of Apache Tomcat 8.5.41. Apache Tomcat 8 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and Java Authentication Service Provider Interface for Containers te...
The Apache Qpid (http://qpid.apache.org) community is pleased to announce the immediate availability of Apache Qpid Broker-J 7.1.3. This is the latest release of pure java implementation of messaging broker supporting the Advanced Message Queuing Protocol 1.0 (AMQP 1.0, ISO/IEC 19464, http://www.am...
[this announcement is available online at https://s.apache.org/rEAx ] The Apache Software Foundation today announced that it has appointed Danny Angus and Ted Dunning as members to the Board of Directors. Angus will be serving as a first-time Board Member, and Dunning will be returning as a Board M...
CVE-2019-0221 Apache Tomcat XSS in SSI printenv Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.17 Apache Tomcat 8.5.0 to 8.5.39 Apache Tomcat 7.0.0 to 7.0.93 Description: The SSI printenv command echoes user provided data without escaping an...
[this announcement is available online at https://s.apache.org/s76h ] Happy-happy Friday --let's take a look back at what the collective Apache community has been working on over the past week: The Apache Software Foundation –the all-volunteer developers, stewards, and incubators of more than 35...
The Apache JSPWiki team is pleased to announce the release of JSPWiki 2.11.0.M4. This is the fourth release towards the 2.11 series of Apache JSPWiki, a feature-rich and extensible WikiWiki engine built around the standard JEE components. M# releases are as production-ready as any other JSPWiki rel...
Severity Medium Vendor The Apache Software Foundation Versions Affected Apache JSPWiki up to 2.11.0.M3 Description A carefully crafted malicious attachment could trigger an XSS vulnerability on Apache JSPWiki, which could lead to session hijacking. Mitigation Apache JSPWiki users should upgrade ...
Severity Medium Vendor The Apache Software Foundation Versions Affected Apache JSPWiki up to 2.11.0.M3 Description A carefully crafted InterWiki link could trigger an XSS vulnerability on Apache JSPWiki, which could lead to session hijacking. Mitigation Apache JSPWiki users should upgrade to 2.1...
Severity Medium Vendor The Apache Software Foundation Versions Affected Apache JSPWiki up to 2.11.0.M3 Description A carefully crafted plugin link invocation could trigger an XSS vulnerability on Apache JSPWiki, which could lead to session hijacking. Initial reporting indicated ReferredPagesPlug...
The Apache Kylin team is pleased to announce the immediate availability of the 2.6.2 release. This is a bugfix release after 2.6.1, with 9 enhancements and 27 bug fixes. All of the changes in this release can be found in: https://kylin.apache.org/docs/release_notes.html You can download the source...
The Apache Tika project is pleased to announce the release of Apache Tika 1.21. The release contents have been pushed out to the main Apache release site and to the Maven Central sync, so the releases should be available as soon as the mirrors get the syncs. Apache Tika is a toolkit for detecting a...
The Apache Qpid (http://qpid.apache.org) community is pleased to announce the immediate availability of version 6.3.4 of Apache Qpid JMS for AMQP 0-x. This is the latest release of our legacy JMS client supporting AMQP 0-8, 0-9, 0-9-1 and 0-10. The release is available now from our website: ht...
[this post is available online at https://s.apache.org/9Qbv ] by York Shen, member of the Apache Weex Project Management Committee I am a Project Management Committee (PMC) member of Apache Weex (Incubating), a cross-platform mobile development framework, widely used in many mobile apps, among to...
[this announcement is available online at https://s.apache.org/jjzT ] Popular Open Source Remote Procedure Call framework in use at dozens of companies, including Alibaba Group, China Life, China Telecom, Dangdang, Didi Chuxing, Haier, and Industrial and Commercial Bank of China, among others. Wak...
[this statement is available online at https://s.apache.org/zvEj ] Restrictions on exports and reexports to parties named on Entity List specifically apply to activities and transactions subject to the Export Administration Regulation (EAR). [1] Open Source publicly available encryption software so...