[ANNOUNCE] Apache POI 5.1.0 released

2021-11-03 Thread PJ Fanning
The Apache POI project is pleased to announce the release of POI 5.1.0. Featured are a handful of new areas of functionality, and numerous bug fixes. See the downloads page for binary and source distributions: https://poi.apache.org/download.html Release Notes Changes The most

[ANNOUNCEMENT] HttpComponents Client 5.2-alpha1 Released

2021-11-03 Thread Oleg Kalnichevski
The Apache HttpComponents project is pleased to announce 5.2-alpha1 release of HttpComponents HttpClient. This is the first ALPHA release in the 5.2 release series that upgrades minimal JRE level to version 1.8 (8u251 is required) and includes several protocol level and API improvements. It also i

[ANNOUNCE] Apache SystemDS 2.2.0 released

2021-11-03 Thread Janardhan
The Apache SystemDS team is pleased to announce the release of Apache SystemDS version 2.2.0. This is the second minor release after 2.0.0. Apache SystemDS is an open source ML system for the end-to-end data science lifecycle from data integration, cleaning, and feature engineering, over efficient

CVE-2021-27644: Apache DolphinScheduler: DolphinScheduler mysql jdbc connector parameters deserialize remote code execution

2021-11-03 Thread Calvin Kirs
Severity: low Description: In Apache DolphinScheduler before 1.3.6 versions, authorized users can use SQL injection in the data source center. (Only applicable to MySQL data source with internal login account password) Credit: This issue was discovered by Jinchen Sheng of Ant FG Security Lab

[ANNOUNCE] Apache Wicket 9.6.0 released

2021-11-03 Thread Andrea Del Bene
The Apache Wicket PMC is proud to announce Apache Wicket 9.6.0! Apache Wicket is an open source Java component oriented web application framework that powers thousands of web applications and web sites for governments, stores, universities, cities, banks, email providers, and more. You can find m