[ANNOUNCE] Apache Geode 1.12.9

2022-03-10 Thread Dick Cavender
The Apache Geode community is pleased to announce the availability of Apache Geode 1.12.9. Geode is a data management platform that provides a database-like consistency model, reliable transaction processing and a shared-nothing architecture to maintain very low latency performance with high

[ANNOUNCE] Apache Olingo 4.9.0 has been released

2022-03-10 Thread mibo
Hello, we proudly announce that Apache Olingo 4.9.0 has been released. This is a minor maintenance release with important fixes for Olingo OData Version 4 (see OData specification [1] and new features [2]). This release is available for download:

CVE-2021-38296: Apache Spark Key Negotiation Vulnerability

2022-03-10 Thread Sean R. Owen
Severity: moderate Description: Apache Spark supports end-to-end encryption of RPC connections via "spark.authenticate" and "spark.network.crypto.enabled". In versions 3.1.2 and earlier, it uses a bespoke mutual authentication protocol that allows for full encryption key recovery. After an