[ANNOUNCE] Apache Tika 2.2.1 released

[Tim Allison]

The Apache Tika project is pleased to announce the release of Apache
Tika 2.2.1. The release contents have been pushed out to the main
Apache release site and to the Maven Central sync.

Apache Tika is a toolkit for detecting and extracting metadata and
structured text content from various documents using existing parser
libraries.

Apache Tika 2.2.1 contains an upgrade to log4j2 2.17.0, a
critical fix to an OOXML parser regression that was introduced
in 2.2.0, and upgrades to other dependencies.  Details can be found
in the changes file:
https://www.apache.org/dist/tika/2.2.1/CHANGES-2.2.1.txt

Apache Tika is available on the download page:
https://tika.apache.org/download.html

Apache Tika is also available in binary form or for use using Maven 2
from the Central Repository:
https://repo1.maven.org/maven2/org/apache/tika/

When downloading, please remember to verify the downloads using
signatures found: https://www.apache.org/dist/tika/KEYS

For more information on Apache Tika, visit the project home page:
https://tika.apache.org/

-- Tim Allison, on behalf of the Apache Tika community

[ANNOUNCE] Apache Tika 1.28 released

[Tim Allison]

The Apache Tika project is pleased to announce the release of Apache
Tika 1.28. The release contents have been pushed out to the main
Apache release site and to the Maven Central sync.

Apache Tika is a toolkit for detecting and extracting metadata and
structured text content from various documents using existing parser
libraries.

Apache Tika 1.28 contains a migration to log4j2 (2.17.0) from log4j
as well as several other dependency upgrades. Details can be found in
the changes file:
https://www.apache.org/dist/tika/1.28/CHANGES-1.28.txt

Apache Tika is available on the download page:
https://tika.apache.org/download.html

Apache Tika is also available in binary form or for use using Maven 2
from the Central Repository:
https://repo1.maven.org/maven2/org/apache/tika/

When downloading, please remember to verify the downloads using
signatures found: https://www.apache.org/dist/tika/KEYS

For more information on Apache Tika, visit the project home page:
https://tika.apache.org/

-- Tim Allison, on behalf of the Apache Tika community

[ANNOUNCE] Apache Qpid JMS 1.5.0 released

[Robbie Gemmell]

The Apache Qpid (https://qpid.apache.org) community is pleased to
announce the immediate availability of Apache Qpid JMS 1.5.0.

This is the latest release of our newer JMS client supporting the
Advanced Message Queuing Protocol 1.0 (AMQP 1.0, ISO/IEC 19464,
https://www.amqp.org), based around the Apache Qpid Proton protocol
engine and implementing the AMQP JMS Mapping as it evolves at OASIS.

The release is available now from our website:
https://qpid.apache.org/download.html

Binaries are also available via Maven Central:
https://qpid.apache.org/maven.html

Release notes can be found at:
https://qpid.apache.org/releases/qpid-jms-1.5.0/release-notes.html

Thanks to all involved,
Robbie

[ANNOUNCE] Apache Qpid JMS 0.61.0 released

[Robbie Gemmell]

The Apache Qpid (https://qpid.apache.org) community is pleased to
announce the immediate availability of Apache Qpid JMS 0.61.0.

This is the latest release of our newer JMS client supporting the
Advanced Message Queuing Protocol 1.0 (AMQP 1.0, ISO/IEC 19464,
https://www.amqp.org), based around the Apache Qpid Proton protocol
engine and implementing the AMQP JMS Mapping as it evolves at OASIS.

The release is available now from our website:
https://qpid.apache.org/download.html

Binaries are also available via Maven Central:
https://qpid.apache.org/maven.html

Release notes can be found at:
https://qpid.apache.org/releases/qpid-jms-0.61.0/release-notes.html

Thanks to all involved,
Robbie

[ANNOUNCE] Apache Daffodil 3.2.1 Released

[Mike Beckerle]

The Apache Daffodil community is pleased to announce the release of
version 3.2.1

This is an important patch release which supersedes the recent 3.2.0 release.

All users should upgrade from 3.2.0 to 3.2.1 immediately, as it
contains two important things:

* Log4J dependency updated to 2.17.0 to fix two security CVEs
* Fix to unparser checksum/crc calculation, an important experimental
feature of 3.2.0

Detailed release notes and downloads are available at:

https://daffodil.apache.org/releases/3.2.1/

Apache Daffodil is an open-source implementation of the DFDL
specification that uses DFDL data descriptions to parse fixed format
data into an infoset. This infoset is commonly converted into XML or
JSON to enable the use of well-established XML or JSON technologies
and libraries to consume, inspect, and manipulate fixed format data in
existing solutions. Daffodil is also capable of serializing or
"unparsing" data back to the original data format. The DFDL infoset
can also be converted directly to/from the  data structures carried by
data processing frameworks so as to bypass any XML/JSON overheads.

For more information about Daffodil visit:

https://daffodil.apache.org/

Regards,
The Apache Daffodil Team

[ANNOUNCE] Apache NiFi 1.15.2 release

[Joe Witt]

Hello

The Apache NiFi team would like to announce the release of Apache NiFi 1.15.2.

This is a bug fix and security focused release. The primary intent is
upgrading to the
latest log4j 2.x libraries 2.17, eliminating usage of log4j 2.x core,
and updating to the latest logback.

Apache NiFi is an easy to use, powerful, and reliable system to
process and distribute
data.  Apache NiFi was made for dataflow.  It supports highly
configurable directed graphs
of data routing, transformation, and system mediation logic.

More details on Apache NiFi can be found here:
https://nifi.apache.org/

The release artifacts can be downloaded from here:
https://nifi.apache.org/download.html

Maven artifacts have been made available and mirrored as per normal
ASF artifact processes.

Issues closed/resolved for this list can be found here:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12316020=12351132

Release note highlights can be found here:
https://cwiki.apache.org/confluence/display/NIFI/Release+Notes#ReleaseNotes-Version1.15.2

Thank you
The Apache NiFi team

[ANN] Apache Struts 2.5.28.2

[Lukasz Lenart]

The Apache Struts group is pleased to announce that Struts 2.5.28.2 is
available as a “General Availability” release. The GA designation is
our highest quality grade.
https://struts.apache.org/announce-2021.html#a20211223

This release addresses the Log4j vulnerability CVE-2021-45105 by using
the latest Log4j ver. 2.12.3 (Java 1.7 compatible).
https://logging.apache.org/log4j/2.x/security.html#CVE-2021-45105

Please note, that the Apache Struts itself depends on the log4j-api
package only, it's users' responsibility to use a proper version of
the log4j-core package!

Apache Struts 2 is an elegant, extensible framework for creating
enterprise-ready Java web applications. The framework is designed to
streamline the full development cycle, from building, to deploying, to
maintaining applications over time.

All developers are strongly advised to perform this upgrade.

The 2.5.x series of the Apache Struts framework has a minimum
requirement of the following specification versions: Servlet API 2.4,
JSP API 2.0, and Java 7.

Should any issues arise with your use of any version of the Struts
framework, please post your comments to the user list, and, if
appropriate, file a tracking ticket.

You can download this version from our download page
https://struts.apache.org/download.cgi#struts-ga


Kind regards
--
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/

[ANNOUNCEMENT] HttpComponents Core 5.1.3 GA released

[Oleg Kalnichevski]

The Apache HttpComponents project is pleased to announce 5.1.3 GA
release of HttpComponents Core. 

This is a maintenance release that corrects a number of defects
discovered since release 5.1.2 including a regression in treating
HTTP/1.0 connections as persistent by default.

Please note that HttpCore 5.1 is likely to be the last release series
compatible with Java 1.7. As of release 5.2 HttpCore will require Java
1.8. 

Download - 
Release notes - <
http://www.apache.org/dist/httpcomponents/httpcore/RELEASE_NOTES-5.1.x.txt
HttpComponents site - 

About HttpComponents Core

HttpCore is a set of HTTP/1.1 and HTTP/2 transport components that can
be used to build custom client and server side HTTP services with a
minimal footprint