[this announcement is available online at https://s.apache.org/jt1B ]
We've had a booming week! Here's what the Apache community has been up to: Support Apache –your contributions through the ASF Sponsorship program and individual donations help sustain 300+ freely-available Open Source projects. Every dollar counts. http://apache.org/foundation/contributing.html ASF Board –management and oversight of the business and affairs of the corporation in accordance with the Foundation's bylaws. - Next Board Meeting: 19 July 2017. Board calendar and minutes http://apache.org/foundation/board/calendar.html - ASF Annual Report for 2017 Fiscal Year https://s.apache.org/IDn5 ASF Infrastructure –our distributed team on four continents keeps the ASF's infrastructure running around the clock. - 7M+ weekly checks yield great performance at 97.03% uptime http://status.apache.org/ Apache Jackrabbit™ –a fully conforming implementation of the Content Repository for Java Technology API (JCR). - Apache Jackrabbit 2.14.2 released https://jackrabbit.apache.org/ Apache HAWQ (incubating) –an advanced enterprise SQL-on-Hadoop analytic engine. - Apache HAWQ 2.2.0.0-incubating released http://hawq.apache.org Apache HTTP Server™ –the world's most popular Web server. - Apache HTTP Server 2.2.34 and 2.4.27 2.2.34 released http://httpd.apache.org/ - CVE-2017-9789: Apache httpd 2.4 Read after free in mod_http2 http://mail-archives.apache.org/mod_mbox/www-announce/201707.mbox/%3CCACsi2528RzhCmN78sbpUYNYhLvsMkJmaB1hGV%2BzxaU64fjBL2g%40mail.gmail.com%3E - CVE-2017-9788: Uninitialized memory reflection in mod_auth_digest http://mail-archives.apache.org/mod_mbox/www-announce/201707.mbox/%3CCACsi252%3DWGN3zy9qsErsuvy5p-%2BL9p%2BDMUoZkFvyg4zH25N%2BkA%40mail.gmail.com%3E Apache Impala (Incubating) –a high-performance C++ and Java SQL query engine for data stored in Apache Hadoop-based clusters. - CVE-2017-5652 Apache Impala (incubating) Information Disclosure http://mail-archives.apache.org/mod_mbox/www-announce/201707.mbox/%3CCA%2BLM4Mt5Nk_qJom7YhKaZrLQArqWWY%3DofUDK7h%2BMM7mmOVhp_w%40mail.gmail.com%3E - CVE-2017-5640 Apache Impala (incubating) Information Disclosure http://mail-archives.apache.org/mod_mbox/www-announce/201707.mbox/%3CCA%2BLM4Mur2%2Bmdv_YukGG0s5OWrj6xdZyLZbPRaB0g6Mm_WH%2BN9g%40mail.gmail.com%3E Apache Lucene™ Solr –an Open Source enterprise search server based on the Lucene Java search library. - CVE-2017-7660: Security Vulnerability in secure inter-node communication in Apache Solr http://mail-archives.apache.org/mod_mbox/www-announce/201707.mbox/%3CCAOOKt53EgrybaD%2BiSn-nBbvFdse-szhg%3DhMoDZuvUvyMme-Z%3Dg%40mail.gmail.com%3E Apache ODE™ –a WS-BPEL 1.1/2.0 compliant Web services orchestration engine. - Apache ODE 1.3.7 released http://ode.apache.org/ Apache Olingo™ –a Java library that enables developers to implement OData producers and OData consumers. - Apache Olingo 2.0.9 released http://olingo.apache.org/ Apache OpenMeetings™ –provides video conferencing, instant messaging, white board, collaborative document editing and other groupware tools. - Apache OpenMeetings 3.3.0 released http://openmeetings.apache.org Apache OpenNLP™ –a machine learning based toolkit for the processing of natural language text. - Apache OpenNLP 1.8.1 released http://opennlp.apache.org/ Apache OpenWebBeans™ –a CDI container (Contexts and Dependency Injection for Java) and targets the CDI-1.2 specification (JavaEE 7). - Apache OpenWebBeans-1.7.4 released http://openwebbeans.apache.org Apache Phoenix™ –enables SQL-based OLTP and operational analytics for Apache Hadoop. - Apache Phoenix 4.11 released http://phoenix.apache.org/ Apache Struts™ –a comprehensive and modular tooling stack for creating Web-based Java applications. - Apache Struts 2: possible RCE in the Struts Showcase app in the Struts 1 plugin example in the Struts 2.3.x series http://mail-archives.apache.org/mod_mbox/www-announce/201707.mbox/%3CCAMopvkPHCrVRX7TuyyzdHp2wv6Pc8-f4%3DsqmSxPiE04md7SMug%40mail.gmail.com%3E - Apache Struts 2.5.12 GA with Security Fixes released http://struts.apache.org/ Apache Subversion™ –an Open Source, centralized version control system. - Apache Subversion 1.8.18 released http://subversion.apache.org/ Apache Tika™ –a toolkit for detecting and extracting metadata and structured text content from various documents using existing parser libraries. - Apache Tika 1.16 released http://tika.apache.org/ Apache Wicket™ –an Open Source Java component oriented Web application framework. - Apache Wicket 7.8.0 released http://wicket.apache.org/ Apache Yetus™ –a collection of libraries and tools that enable contribution and release processes for software projects. - Apache Yetus 0.5.0 released https://yetus.apache.org/ Did You Know? - Did you know that if your employer has a matching gift program, your contribution to the ASF can be generously increased and will help even more to support its mission? http://apache.org/foundation/contributing.html - Did you know that the Apache Incubator site had a redesign/facelift? http://incubator.apache.org/ - Did you know that the value to users from Apache OpenOffice's 200+M downloads (over the past year) exceeds $25M per day? https://openoffice.apache.org/ Apache Community Notices: - "Success at Apache" focuses on the processes behind why the ASF "just works". 1) Project Independence https://s.apache.org/CE0V 2) All Carrot and No Stick https://s.apache.org/ykoG 3) Asynchronous Decision Making https://s.apache.org/PMvk 4) Rule of the Makers https://s.apache.org/yFgQ 5) JFDI --the unconditional love of contributors https://s.apache.org/4pjM 6) Meritocracy and Me https://s.apache.org/tQQh 7) Learning to Build a Stronger Community https://s.apache.org/x9Be - Presentations from ApacheCon https://s.apache.org/Hli7 and Apache: Big Data https://s.apache.org/tefE are available; as well as videos https://s.apache.org/AE3m and audio recordings https://feathercast.apache.org/ - Check out the Apache Community Development blog https://blogs.apache.org/comdev/ - Do friend and follow us on the Apache Community Facebook page https://www.facebook.com/ApacheSoftwareFoundation/ and Twitter account https://twitter.com/ApacheCommunity - Apache ActiveMQ Call For Logo https://blogs.apache.org/activemq/entry/apache-activemq-call-for-logo - The list of Apache project-related MeetUps can be found at http://apache.org/events/meetups.html - The CloudStack European User Group will be held 17 August in London https://www.eventbrite.co.uk/e/cloudstack-european-user-group-tickets-35565783215 - Catch the Apache Ignite and Spark communities at the In-Memory Computing Summit 24-25 October in San Francisco https://imcsummit.org/ - ASF Annual Report https://s.apache.org/FY2017AnnualReport - Find out how you can participate with Apache community/projects/activities --opportunities open with Apache HTTP Server, Avro, ComDev (community development), Directory, Incubator, OODT, POI, Polygene, Syncope, Tika, Trafodion, and more! https://helpwanted.apache.org/ - Are your software solutions Powered by Apache? Download & use our "Powered By" logos http://www.apache.org/foundation/press/kit/#poweredby = = = For real-time updates, sign up for Apache-related news by sending mail to announce-subscr...@apache.org and follow @TheASF on Twitter. For a broader spectrum from the Apache community, https://twitter.com/PlanetApache provides an aggregate of Project activities as well as the personal blogs and tweets of select ASF Committers. # # #
