You are viewing the static version of this archive.
For the interactive version, please visit: This page
The Apache HttpComponents project is pleased to announce 5.0-beta5 release of HttpComponents Client. This BETA release picks up the latest fixes and performance improvements from HttpCore and addresses a number of issues found since the previous BETA release. IMPORTANT: This release is expected t...
The Apache Unomi team is proud to announce the release of Apache Unomi 1.4.0. Apache Unomi is a Java Open Source customer data platform, a Java server designed to manage customers, leads and visitors data and help personalize customer experiences while also offering features to respect visitor priv...
The Apache Ignite Community is pleased to announce the release of Apache Ignite 2.7.5. Apache Ignite [1] is a memory-centric distributed database, caching, and processing platform for transactional, analytical, and streaming workloads delivering in-memory speeds at petabyte scale. This release int...
The Apache NetBeans team is pleased to announce the release of Apache NetBeans 11.1. Apache NetBeans is a full IDE for Java SE, Java EE, PHP and JavaScript development with some Groovy language support. Apache NetBeans 11.1 is the first Apache NetBeans release outside the Apache Incubator and the ...
Happy to announce a new Pulsar community event in Beijing on August 17th. We will have speakers from Yahoo! Japan, Tencent, Zhaopin.com, EMQ, and StreamNative talk about everything of Pulsar, from production use cases, technical deep dive to community collaboration. Also we continue the collaborati...
The Apache Arrow community is pleased to announce the 0.14.1 release. This is a patch release including 46 resolved issues ([1]) since the 0.14.0 release. The release is available now from our website, [2] and [3]: http://arrow.apache.org/install/ Release notes are available at: https://ar...
[CVEID]:CVE-2019-0202[PRODUCT]:Apache Storm[VERSION]:Apache Storm 0.9.1-incubating to 1.2.2[PROBLEMTYPE]:CWE-200: Information Exposure[DESCRIPTION]:The Apache Storm Logviewer daemon exposes HTTP-accessible endpoints to read/search log files on hosts running Storm. In Apache Storm versi...
[CVEID]:CVE-2018-1320[PRODUCT]:Apache Storm[VERSION]:Apache Storm 0.9.1-incubating to 1.2.2[PROBLEMTYPE]:CWE-20: Input Validation[DESCRIPTION]:Apache Storm versions 0.9.1-incubating to 1.2.2 use Thrift library versions vulnerable to CVE-2018-1320. Mitigation: Upgrade to Apache Storm 1...
[CVEID]:CVE-2018-11779[PRODUCT]:Apache Storm[VERSION]:Apache Storm 1.1.0 to 1.2.2[PROBLEMTYPE]:CWE-502: Deserialization of Untrusted Data[DESCRIPTION]:In Apache Storm versions 1.1.0 to 1.2.2, when the user is using the storm-kafka-client or storm-kafka modules, it is poss...
The Apache Commons project is proud to announce Apache Apache Commons Codec 1.13. The Apache Commons Codec package contains simple encoder and decoders for various formats such as Base64 and Hexadecimal. In addition to these widely used encoders and decoders, the codec package also maintains a col...
I'm happy to announce the release of Apache Subversion 1.10.6. Please choose the mirror closest to you by visiting: https://subversion.apache.org/download.cgi#supported-releases This is a stable bugfix release of the Apache Subversion open source version control system. SHA-512 checksums are...
I'm happy to announce the release of Apache Subversion 1.9.12. Please choose the mirror closest to you by visiting: https://subversion.apache.org/download.cgi#supported-releases This is a stable bugfix release of the Apache Subversion open source version control system. SHA-512 checksums are...
I'm happy to announce the release of Apache Subversion 1.12.2. Please choose the mirror closest to you by visiting: https://subversion.apache.org/download.cgi#recommended-release This is a stable bugfix release of the Apache Subversion open source version control system. SHA-512 checksums are...
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ## 26 July 2019, Apache Lucene™ 8.2.0 available The Lucene PMC is pleased to announce the release of Apache Lucene 8.2.0. Apache Lucene is a high-performance, full-featured text search engine library written entirely in Java. It is a technology su...
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ## 26 July 2019, Apache Solr™ 8.2.0 available The Lucene PMC is pleased to announce the release of Apache Solr 8.2.0. Solr is the popular, blazing fast, open source NoSQL search platform from the Apache Lucene project. Its major features include p...
[this newsletter is available online at https://s.apache.org/f0r96] Farewell, July --we're wrapping up the month with another great week. Here are updates on Apache community's activities: ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foun...
The Apache Jackrabbit community is pleased to announce the release of Apache Jackrabbit Oak 1.16.0. The release is available for download at: http://jackrabbit.apache.org/downloads.html See the full release notes below for details about this release: Release Notes -- Apache Jackrabbit Oak...
The Apache Commons Pool team is pleased to announce the release of Apache Commons Pool 2.7.0. Apache Commons Pool provides an object-pooling API and a number of object pool implementations. Version 2 contains a completely re-written pooling implementation compared to the 1.x series. In addition to ...
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 CVE-2018-11772: Apache VCL SQL injection attack in privilege management Severity: Medium Versions Affected: 2.1 through 2.5 Description: Apache VCL versions 2.1 through 2.5 do not properly validate cookie input when determining what node (if an...
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 CVE-2018-11773: Apache VCL improper form validation in block allocation management Severity: Medium Versions Affected: 2.1 through 2.5 Description: Apache VCL versions 2.1 through 2.5 do not properly validate form input when processing a submitte...
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 CVE-2018-11774: Apache VCL SQL injection attack in VM management Severity: Medium Versions Affected: 2.1 through 2.5 Description: Apache VCL versions 2.1 through 2.5 do not properly validate form input when adding and removing VMs to and from h...
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 The Apache VCL project is pleased to announce the release of version 2.5.1. This is primarily a bug fix release. However, there are a few items worth highlighting: * PHP code updated to work with PHP 7.x. * Rudimentary NFS file share mounting extend...
The recent releases of Apache Subversion 1.12.2, 1.10.6, 1.9.12, contain fixes for two security issues, CVE-2018-11782 and CVE-2019-0203. These issues affect Subversion 'svnserve' servers. We encourage server operators to upgrade to the latest appropriate version as soon as reasonable. Please see th...
The Apache Tomcat team announces the immediate availability of Apache Tomcat 7.0.96. Apache Tomcat is an open source software implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies. This release contains a number of bug fixes and improvements...
The Apache Tika project is pleased to announce the release of Apache Tika 1.22. The release contents have been pushed out to the main Apache release site and to the Maven Central sync, so the releases should be available as soon as the mirrors get the syncs. Apache Tika is a toolkit for detecting a...
Title: [CVE-2019-10088] OOM from a crafted Zip File in Apache Tika's RecursiveParserWrapper Severity: Medium Vendor: The Apache Software Foundation Versions Affected: Apache Tika 1.7 to 1.21 Description: A carefully crafted or corrupt zip file can cause an OOM in Apache Tika's RecursiveParserWr...
Title: [CVE-2019-10093] Denial of Service in Apache Tika's 2003ml and 2006ml Parsers Severity: Medium Vendor: The Apache Software Foundation Versions Affected: Apache Tika 1.19 to 1.21 Description: A carefully crafted 2003ml or 2006ml file could consume all available SAXParsers in the pool and ...
Title: [CVE-2019-10094] StackOverflow from Crafted Package/Compressed Files in Apache Tika's RecursiveParserWrapper Severity: Medium Vendor: The Apache Software Foundation Versions Affected: Apache Tika 1.7 to 1.21 Description: A carefully crafted package/compressed file that, when unzipped/unc...
[this newsletter is available online at https://s.apache.org/y4t3c] Welcome August!! --let's take a look back at what the collective Apache community has been working on over the past week: ASF Board – management and oversight of the business affairs of the corporation in accordance with the Fou...
Hello all, The Apache Mynewt team is pleased to announce the release of Apache Mynewt 1.7.0 and Apache NimBLE 1.2.0. Apache Mynewt is a community-driven module OS for constrained, embedded applications. Mynewt provides a real-time operating system, flash file system, network stacks, and support u...
There's a lot of magic happening in the IoT sector at the moment. A lot of new projects are appearing and older projects are growing and extending their functionality. We have noticed that it's currently quite difficult to keep track who the players in this field are and what they're up to. So we ...
[this post is available online at https://s.apache.org/xqvbo ] by Isabel Drost-Fromm "A decade ago" - according to common wisdom for software engineering that's the equivalent of the stone age: The only constant is change - and rapid change at that. This blog post is going to tell an entirely dif...
The Apache Accumulo project is pleased to announce the release of Apache Accumulo 2.0.0! Apache Accumulo 2.0.0 contains many new features, bug fixes, performance improvements and redesigned components. Hadoop 3 and Java 8 are required for this version. New users are encouraged to start using 2.0....
The Apache Commons DBCP team is pleased to announce the release of Apache Apache Commons DBCP 2.7.0. Apache Commons DBCP software implements Database Connection Pooling. This is a minor release, including bug fixes and enhancements. Changes in this version include: New features: o DBCP-539: Man...
Dear community, The Apache Groovy team is pleased to announce version 3.0.0-beta-3 of Apache Groovy. Apache Groovy is a multi-faceted programming language for the JVM. Further details can be found at the https://groovy.apache.org website. This is a pre-release of a new version of Groovy. We...
Dear community, The Apache Groovy team is pleased to announce version 2.5.8 of Apache Groovy. Apache Groovy is a multi-faceted programming language for the JVM. Further details can be found at the https://groovy.apache.org website. This release is a maintenance release of the GROOVY_2_5_X br...
The Apache Ranger project is pleased to announce the release of Apache Ranger 2.0.0. Apache Ranger is a framework to enable, monitor and manage comprehensive data security across the Hadoop platform. Apache Ranger 2.0.0 contains a number of new features, improvements and bug fixes. Details can b...
[this newsletter is available online at https://s.apache.org/34wd0] Happy Friday! Let's take a look back on our activities over the past week: Success at Apache – the monthly blog series that focuses on the people and processes behind why the ASF "just works". - "The Path To Berlin" by Isabel D...
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 The Apache UIMA team is pleased to announce the release of Apache UIMA Java SDK, version 2.10.4. You can download it from here: http://uima.apache.org/downloads.cgi Apache UIMA <http://uima.apache.org> is a component architecture and framewo...
The Apache Log4j 2 team is pleased to announce the Log4j 2.12.1 release! Apache Log4j is a well known framework for logging application behavior. Log4j 2 is an upgrade to Log4j that provides significant improvements over its predecessor, Log4j 1.x, and provides many other modern features such as...
[this announcement is available online at https://s.apache.org/w7bw1 ] World's largest Open Source foundation’s 300+ freely-available, enterprise-grade Apache projects power some of the most visible and widely used applications in computing today. Wakefield, MA —13 August 2019— The Apache®...
Apache Traffic Server 8.0.4 and 7.1.7 Released The Apache Software Foundation and the Apache Traffic Server (ATS) project are pleased to announce the release of Apache Traffic Server 8.0.4 and 7.1.7! ATS is a high performance, scalable HTTP Intermediary and proxy cache. It is used by several large ...
The Apache Qpid (http://qpid.apache.org) community is pleased to announce the immediate availability of Apache Qpid Proton-J 0.33.2. Apache Qpid Proton-J is a messaging library for the Advanced Message Queuing Protocol 1.0 (AMQP 1.0, ISO/IEC 19464, http://www.amqp.org). It can be used in a wide ran...
Apache HTTP Server 2.4.41 Released August 14, 2019 The Apache Software Foundation and the Apache HTTP Server Project are pleased to announce the release of version 2.4.41 of the Apache HTTP Server ("Apache"). This version of Apache is our latest GA release of the ne...
The Apache Commons Team is pleased to announce the release of Apache Commons BeanUtils 1.9.4. The Apache Commons BeanUtils open source software library provides easy-to-use wrappers around the Java reflection and introspection APIs. Source and binary distributions are available for download from ...
CVE-2019-10086. Apache Commons Beanutils does not suppresses the class property in PropertyUtilsBean by default. Severity: Medium Vendor: The Apache Software Foundation Versions Affected: commons-beanutils-1.9.3 and earlier Description: A special BeanIntrospector class was added in version 1.9.2...
The Apache Struts Security Team would like to announce that a number of historic Struts Security Bulletins [1] and related CVE database entries contained incorrect affected release version ranges. The issue was reported by Christopher Fearon and the Black Duck Research Team within the Synopsys Cybe...
The Apache Commons VFS Project team is pleased to announce the release of Apache Commons VFS Project 2.4.1-SNAPSHOT. Apache Commons VFS is a Virtual File System library. New features and bug fix release. Changes in this version include: Fixed Bugs: o VFS-725: [Local] org.apache.commons.vfs2.Fil...
Announcing Apache Druid 0.15.1-incubating, a small but important release that includes a collection of bug and documentation fixes. Apache Druid (incubating) is a high performance analytics data store for event-driven data. Source and binary distributions can be downloaded from: https://druid.apac...
The Apache Jackrabbit community is pleased to announce the release of Apache Jackrabbit Oak 1.10.4. The release is available for download at: http://jackrabbit.apache.org/downloads.html See the full release notes below for details about this release: Release Notes -- Apache Jackrabbit Oak ...
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 The Apache UIMA team is pleased to announce the release of Apache UIMA Java SDK, version 3.1.0. You can download it from here: http://uima.apache.org/downloads.cgi Apache UIMA <http://uima.apache.org> is a component architecture and framewor...
[this newsletter is available online at https://s.apache.org/41abn] Happy Friday! We've had a great week. Let's review what we've been up to: ASF Annual Report – The Apache® Software Foundation announces Annual Report for 2019 Fiscal Year - Press release https://s.apache.org/w7bw1 - Full repo...
Hello folks, The ASF has successfully been accepted as a participating FOSS community in the Outreachy Program [1] to work with Outreachy organizers to offer remote internships to applicants around the world. With this program, we are looking forward to improving inclusion in our communities by un...
The Apache FreeMarker community is pleased to announce the release of Apache FreeMarker 2.3.29. Change log: https://freemarker.apache.org/docs/versions_2_3_29.html Download: https://freemarker.apache.org/freemarkerdownload.html Apache FreeMarker™ is a template engine: a Java library to generate ...
The Apache Tomcat team announces the immediate availability of Apache Tomcat 9.0.24. Apache Tomcat 9 is an open source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and JASPIC technologies. Apache Tomcat 9.0.24 is a bugfix and featu...