You are viewing the static version of this archive.
For the interactive version, please visit: This page
Good Morning, On behalf of the Apache SpamAssassin Project Management Committee, I am very pleased to announce the release of Apache SpamAssassin v3.4.2. This release contains security bug fixes. A security announcement will follow within the next 24 hours. Apache SpamAssassin can be downloade...
[this announcement is available online at https://s.apache.org/qiKn ] FOUNDATION OPERATIONS SUMMARY First Quarter, Fiscal Year 2019 (May - July 2018) "The most popular open source software is Apache..." — DZone “What Open Source Software Do You Use?” [February 2018] > Conferences and Event...
The Apache Wicket PMC is proud to announce Apache Wicket 8.1.0! Apache Wicket is an open source Java component oriented web application framework that powers thousands of web applications and web sites for governments, stores, universities, cities, banks, email providers, and more. You can find mor...
The Apache Jackrabbit community is pleased to announce the release of Apache Jackrabbit Oak. The release is available for download at: http://jackrabbit.apache.org/downloads.html See the full release notes below for details about this release: Release Notes -- Apache Jackrabbit Oak -- Version...
The Apache Tika project is pleased to announce the release of Apache Tika 1.19. The release contents have been pushed out to the main Apache release site and to the Maven Central sync, so the releases should be available as soon as the mirrors get the syncs. Apache Tika is a toolkit for detecting a...
The Apache Kylin team is pleased to announce the immediate availability of the 2.5.0 release. This is a major release after 2.4, with more than 100 enhancements and bug fixes. All of the changes in this release can be found in: https://kylin.apache.org/docs/release_notes.html You can download the ...
The Apache JMeter team is pleased to announce the availability of Apache JMeter 5.0 (r1840935). This release brings a lot of new features and improvements, and also fixes bugs. You can read the New and Noteworthy section with some screenshots to illustrate improvements and full list of changes a...
Hi All, The Apache Atlas team is happy to announce the release of Apache Atlas - version 1.1.0. Atlas is a scalable and extensible set of core foundational governance services – enabling enterprises to effectively and efficiently meet their compliance requirements within Hadoop and allows in...
CVE-2018-11761: Apache Tika Denial of Service via XML Entity Expansion Vulnerability Severity: Medium Vendor: The Apache Software Foundation Versions Affected: Apache Tika 0.1 to 1.18 Description: Apache Tika's XML parsers were not configured to limit entity expansion. They were therefore vulner...
CVE-2018-11762: Zip Slip Vulnerability in Apache Tika's tika-app Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Tika 0.9 to 1.18 Description: In a rare edge case where a user does not specify an extract directory on the commandline (--extract-dir=) and the input f...
CVE-2018-8017: Apache Tika Denial of Service Vulnerability -- Potential Infinite Loop in IptcAnpaParser Severity: Medium Vendor: The Apache Software Foundation Versions Affected: Apache Tika 1.2 to 1.18 Description: A carefully crafted file can trigger an infinite loop in Apache Tika's IptcAnpaP...
The Apache Pulsar team is proud to announce Apache Pulsar version 2.1.1-incubating. This is a patch release for Apache pulsar 2.1 Pulsar is a highly scalable, low latency messaging platform running on commodity hardware. It provides simple pub-sub semantics over topics, guaranteed at-least-once de...
The Apache Calcite team is pleased to announce the release of Apache Calcite Avatica Go 3.2.0. Avatica is a framework for building database drivers. Avatica defines a wire API and serialization mechanism for clients to communicate with a server as a proxy to a database. The reference Avatica clien...
The Apache Flink community is very happy to announce the release of Apache Flink 1.5.4, which is the fourth bug fix release for the Apache Flink 1.5 series. Apache Flink® is an open-source stream processing framework for distributed, high-performing, always-available, and accurate data streaming a...
The Apache Flink community is very happy to announce the release of Apache Flink 1.6.1, which is the first bug fix release for the Apache Flink 1.6 series. Apache Flink® is an open-source stream processing framework for distributed, high-performing, always-available, and accurate data streaming ap...
[this announcement is available online at https://s.apache.org/KzEz ] Joins ASF Platinum Sponsors Cloudera, Comcast, Facebook, Google, LeaseWeb, Microsoft, Oath, and Pineapple Fund in supporting the ASF's Mission of Providing Software For the Public Good Wakefield, MA —20 September 2018— The A...
The Apache Tomcat team announces the immediate availability of Apache Tomcat 7.0.91. Apache Tomcat is an open source software implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies. This release contains a number of bug fixes and improvements...
[this announcement is available online at https://s.apache.org/jrns ] As another week draws to a close, let's take a look at the Apache community's activities from the past week: ASF Board –management and oversight of the business affairs of the corporation in accordance with the Foundation's by...
We are please to announce the release of Apache Parquet C++ 1.5.0! Parquet is a general-purpose columnar file format supporting nested data. It uses space-efficient encodings and a compressed and splittable structure for processing frameworks like Hadoop. The CHANGELOG for the release is available...
The Apache Commons community is happy to announce the availability of Apache Commons Lang 3.8.1. Apache Commons Lang provides helper utilities for the java.lang API, notably String manipulation methods, basic numerical methods, object reflection, concurrency, creation and serialization and System p...
Hello, We received an additional information about possible affected versions of Struts. Please read the bulletin [1] to find more details about the vulnerability and upgrade to the latest version of Struts if you are running one of those versions: - Struts 2.0.4 - Struts 2.3.34 - Struts 2.5.0 - St...
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 24 September 2018, Apache Lucene™ 7.5.0 available The Lucene PMC is pleased to announce the release of Apache Lucene 7.5.0. Apache Lucene is a high-performance, full-featured text search engine library written entirely in Java. It is a technology ...
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 24 September 2018, Apache Solr™ 7.5.0 available The Lucene PMC is pleased to announce the release of Apache Solr 7.5.0 Solr is the popular, blazing fast, open source NoSQL search platform from the Apache Lucene project. Its major features include ...
The Lucene PMC is pleased to announce that the Solr Reference Guide for Solr 7.5 is now available. This 1,389 page PDF is the definitive guide to Apache Solr, the search server built on Apache Lucene. The PDF can be downloaded from: https://www.apache.org/dyn/closer.cgi/lucene/solr/ref-guide/apach...
Apache HAWQ Project Team is proud to announce Apache HAWQ 2.4.0.0 has been released. Apache HAWQ combines exceptional MPP-based analytics performance, robust ANSI SQL compliance, Hadoop ecosystem integration and manageability, and flexible data-store format support, all natively in Hadoop, no conne...
[this announcement is available online at https://s.apache.org/DLL1 ] Open Source distributed publish-and-subscribe messaging system in use at MercadoLibre, Oath, One Click Retail, STICorp, TaxiStartup, Yahoo Japan Corporation, and Zhaopin.com, and more. Wakefield, MA —25 September 2018— The A...
The Apache Allura team is pleased to announce the release of Apache Allura 1.9.0 Allura is an open source implementation of a software forge, a web site that manages source code repositories, bug reports, discussions, wiki pages, blogs, and more for any number of individual projects. Apache Allura...
Hello all, The Apache Juneau team is proud to announce the release of Juneau 7.2.0. Apache Juneau is... - A toolkit for marshalling POJOs to a variety of content types using a common framework. - A REST server API for creating Swagger-based self-documenting REST interfaces using POJOs...
The Apache PDFBox community is pleased to announce the release of Apache PDFBox JBIG2 ImageIO plugin version 3.0.2. The release is available for download at: http://pdfbox.apache.org/download.cgi See the full release notes below for details about this release. Release Notes -- Apache JBIG2 ImageI...
The HBase team is happy to announce the immediate availability of Apache HBase 1.2.7. Apache HBase is an open-source, distributed, versioned, non-relational database. Apache HBase gives you low latency random access to billions of rows with millions of columns atop non-specialized hardware. To lear...
Apache Traffic Server v8.0.0 Released The Apache Software Foundation and the Apache Traffic Server (ATS) project are pleased to announce the release of Apache Traffic Server v8.0.0! ATS is a high performance, scalable HTTP Intermediary and proxy cache. It is used by several large internet services,...
The Apache Jackrabbit community is pleased to announce the release of Apache Jackrabbit Oak. The release is available for download at: http://jackrabbit.apache.org/downloads.html See the full release notes below for details about this release: Release Notes -- Apache Jackrabbit Oak -- Versio...
The Apache BookKeeper team is proud to announce Apache BookKeeper version 4.8.0. Apache BookKeeper is a scalable, fault-tolerant, and low-latency storage service optimized for real-time workloads. It has been used for a fundamental service to build reliable services. It is also the log segment stor...
[this announcement is available online at https://s.apache.org/he0a ] We're wrapping up September bursting with Apache goodness. Here's what happened this week: Support Apache –help offset the ASF's day-to-day operating expenses and keep Apache software for everyone. - Buy Apache-branded swag a...
Apache HTTP Server 2.4.35 Released September 25, 2018 The Apache Software Foundation and the Apache HTTP Server Project are pleased to announce the release of version 2.4.35 of the Apache HTTP Server ("Apache"). This version of Apache is our lat...
The Apache OpenWebBeans team is proud to announce the release of Apache Meecrowave 1.2.4 Apache Meecrowave is a small java enterprise application server framework fully based on Apache Tomcat9 and other JavaEE 8 technologies. Apache Tomcat-9.0.12 (Servlets-4.0) Apache OpenWebBeans-2.0.7 (CDI...
The Apache Jackrabbit community is pleased to announce the release of Apache Jackrabbit Oak. The release is available for download at: http://jackrabbit.apache.org/downloads.html See the full release notes below for details about this release: Release Notes -- Apache Jackrabbit Oak -- Version...
[this announcement is available online at https://s.apache.org/kXez ] by Mikael Ståldal Back in 2013, I worked as software developer and architect at a small IT company. We needed a logging framework for the Java based server platform we were developing. Initially, we tried to use the java.util.l...
I'm happy to announce the release of Apache Subversion 1.11.0-rc2. Please choose the mirror closest to you by visiting: https://subversion.apache.org/download.cgi#pre-releases SHA-512 checksums are available at: https://www.apache.org/dist/subversion/subversion-1.11.0-rc2.tar.bz2.sha512 ...
The Apache Qpid (http://qpid.apache.org) community is pleased to announce the immediate availability of Apache Qpid JMS 0.37.0. This is the latest release of our newer JMS client supporting the Advanced Message Queuing Protocol 1.0 (AMQP 1.0, ISO/IEC 19464, http://www.amqp.org), based around the Ap...
CVE-2018-11784 Apache Tomcat - Open Redirect Severity: Moderate Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0.M1 to 9.0.11 Apache Tomcat 8.5.0 to 8.5.33 Apache Tomcat 7.0.23 to 7.0.90 The unsupported 8.0.x release line has not been analysed but is likely to be affe...
The Apache Jackrabbit community is pleased to announce the release of Apache Jackrabbit 2.17.6. The release is available for download at: http://jackrabbit.apache.org/downloads.html See the full release notes below for details about this release: Release Notes -- Apache Jackrabbit -- Vers...
The Apache Geode community is pleased to announce the availability of Apache Geode 1.7.0. Apache Geode is a data management platform that provides a database-like consistency model, reliable transaction processing and a shared-nothing architecture to maintain very low latency performance with high ...
The Apache PDFBox community is pleased to announce the release of Apache PDFBox version 2.0.12. The release is available for download at: http://pdfbox.apache.org/download.cgi See the full release notes below for details about this release. Release Notes -- Apache PDFBox -- Version 2.0.12 Introd...
The Apache PDFBox community is pleased to announce the release of Apache PDFBox version 1.8.16. The release is available for download at: http://pdfbox.apache.org/download.cgi See the full release notes below for details about this release. Release Notes -- Apache PDFBox -- Version 1.8.16 Introd...
The Apache OFBiz community is pleased to announce the new release "Apache OFBiz 16.11.05". Apache OFBiz® is an open source product for the automation of enterprise processes that includes framework components and business applications. http://ofbiz.apache.org/ "Apache OFBiz 16.11.05" is the late...
The Apache PLC4X (Incubating) team is pleased to announce the release of Apache PLC4X (incubating) 0.1.0 This is the first official release of PLC4X. PLC4X is a set of libraries for communicating with industrial programmable logic controllers (PLCs) using a variety of protocols but with a share...
[CVE-2018-11797] DoS vulnerability in Apache PDFBox parser Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache PDFBox <= 1.8.15 Apache PDFBox <= 2.0.11 Earlier, unsupported Apache PDFBox versions may be affected as well Description: A carefully crafted PDF file c...
[this announcement is available online at https://s.apache.org/BRVj ] Happy October! Let's jump into a review of Apache business from the past week: Success at Apache –a monthly blog series that focuses on the processes behind why the ASF "just works". - Carrying forward the benefits. by Mikael...
[CVE-2018-11797] DoS vulnerability in Apache PDFBox parser Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache PDFBox <= 1.8.15 Apache PDFBox <= 2.0.11 Earlier, unsupported Apache PDFBox versions may be affected as well Description: A carefully crafted PDF file c...
The Apache Commons Team is pleased to announce the release of Apache Commons Text 1.5. The Apache Commons Text open source software library provides a host of algorithms focused on working with strings and blocks of text. Source and binary distributions are available for download from the Apache C...
The Apache Qpid (http://qpid.apache.org) community is pleased to announce the immediate availability of Apache Qpid Proton 0.26.0. Apache Qpid Proton is a messaging library for the Advanced Message Queuing Protocol 1.0 (AMQP 1.0, ISO/IEC 19464, http://www.amqp.org). It can be used in a wide range o...
The Apache Arrow community is pleased to announce the 0.11.0 release. It includes 288 resolved issues ([1]) since the 0.10.0 release. The release is available now from our website and [2]: https://arrow.apache.org/install/ Read about what's new in the release https://arrow.apache.org/blog/2018...
The Apache Tika project is pleased to announce the release of Apache Tika 1.19.1. The release contents have been pushed out to the main Apache release site and to the Maven Central sync, so the releases should be available as soon as the mirrors get the syncs. Apache Tika is a toolkit for detecting...
CVE-2018-11796: Apache Tika Denial of Service via XML Entity Expansion Vulnerability Severity: Medium Vendor: The Apache Software Foundation Versions Affected: Apache Tika 0.1 to 1.19 Description: In Apache Tika 1.19 (CVE-2018-11761), we added an entity expansion limit for XML parsing. However,...
I'm happy to announce the release of Apache Subversion 1.10.3. Please choose the mirror closest to you by visiting: https://subversion.apache.org/download.cgi#supported-releases This is a stable bugfix release of the Apache Subversion open source version control system. SHA-512 checksums are ...
The Apache Jackrabbit community is pleased to announce the release of Apache Jackrabbit Oak 1.9.9. The release is available for download at: http://jackrabbit.apache.org/downloads.html See the full release notes below for details about this release: Release Notes -- Apache Jackrabbit Oak ...
[this announcement is available online at https://s.apache.org/PBG3 ] Friday greetings from the Apache Community! Join us for a look back at what's happened over the last week: ASF Board –management and oversight of the business affairs of the corporation in accordance with the Foundation's byla...
The Apache Velocity team is pleased to announce the release of Velocity Tools 3.0 GA. Velocity Tools is a library of template tools and helpers to ease the use of the Apache Velocity template engine in standalone applications and in webapps. Velocity Tools 3.0 brings a few new context tools (Co...
Dear community, The Apache Groovy team is pleased to announce version 2.5.3 of Apache Groovy. Apache Groovy is a multi-facet programming language for the JVM. Further details can be found at the http://groovy.apache.org website. This release is a maintenance release of the GROOVY_2_5_X branch. It ...
The Apache Struts group is pleased to announce that Struts 2.5.18 is available as a “General Availability” release. The GA designation is our highest quality grade. Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. The framework is designed...
The Apache Struts group is pleased to announce that Struts 2.3.36 is available as a "General Availability" release. The GA designation is our highest quality grade. Apache Struts 2 is an elegant, extensible framework for creating enterprise-ready Java web applications. The framework is designed to ...
The Apache Tomcat Project is proud to announce the release of version 1.2.46 of the Apache Tomcat Connectors. This version fixes a number of bugs found in previous releases. Full details of these changes and new features, are available in the Apache Tomcat Connectors changelog: https://tomcat.apach...
The Apache OpenMeetings project is pleased to announce the release of Apache OpenMeetings 4.0.6. The release is available for download from http://openmeetings.apache.org/downloads.html Apache OpenMeetings provides video conferencing, instant messaging, white board, collaborative document editing a...