[ANNOUNCE] Apache Kudu 1.12.0 Released

2020-05-19 Thread Hao Hao
The Apache Kudu team is happy to announce the release of Kudu 1.12.0!

Kudu is an open source storage engine for structured data which
supports low-latency random access together with efficient analytical
access patterns. It is designed within the context of the Apache Hadoop
ecosystem and supports many integrations with other data analytics
projects both inside and outside of the Apache Software Foundation.

Apache Kudu 1.12.0 is a minor release that offers several new features,
improvements, optimizations, and bug fixes. Please see the release notes
for details:
  https://kudu.apache.org/releases/1.12.0/docs/release_notes.html

The Apache Kudu project only publishes source code releases. To build
Kudu 1.12.0, follow these steps:
  - Download the Kudu 1.12.0 source release:
  https://kudu.apache.org/releases/1.12.0
  - Follow the instructions in the documentation to build Kudu 1.12.0
from source:

https://kudu.apache.org/releases/1.12.0/docs/installation.html#build_from_source

For your convenience, binary JAR files for the Kudu Java client library,
Spark DataSource, Flume sink, and other Java integrations are published
to the ASF Maven repository and are now available:
https://search.maven.org/search?q=g:org.apache.kudu%20AND%20v:1.12.0

The Python client source is also available on PyPI:
  https://pypi.org/project/kudu-python/

Additionally, experimental Docker images are published to Docker Hub:
  https://hub.docker.com/r/apache/kudu

Regards,
The Apache Kudu team


[Announce] Apache Kylin 3.0.2 released

2020-05-19 Thread George Ni
The Apache Kylin team is pleased to announce the immediate availability of
the 3.0.2 release.

This is a bugfix release after 3.0.1, with 25 bug fixes and enhancements.
All of the changes in this release can be found in:
https://kylin.apache.org/docs/release_notes.html

You can download the source release and binary packages from Apache Kylin's
download page: https://kylin.apache.org/download/

Apache Kylin is an open-source Distributed Analytical Data Warehouse for
Big Data; it was designed to provide OLAP (Online Analytical Processing)
capability in the big data era. By renovating the multi-dimensional cube
and precalculation technology on Hadoop and Spark, Kylin is able to achieve
near-constant query speed regardless of the ever-growing data volume.
Reducing query latency from minutes to sub-second, Kylin brings online
analytics back to big data.

Apache Kylin lets you query billions of rows at sub-second latency in 3
steps:
1. Identify a Star/Snowflake Schema on Hadoop.
2. Build Cube from the identified tables.
3. Query using ANSI-SQL and get results in sub-second, via ODBC, JDBC or
RESTful API.

Thanks to everyone who has contributed to this release.

We welcome your help and feedback. For more information on how to report
problems, and to get involved, visit the project website at
https://kylin.apache.org/

-- 

-

Best regards,



Ni Chunen / George


[Announce] Apache Kylin 2.6.6 released

2020-05-19 Thread George Ni
The Apache Kylin team is pleased to announce the immediate availability of
the 2.6.6 release.

This is a bugfix release after 2.6.5, with 20 bug fixes and enhancements.
All of the changes in this release can be found in:
https://kylin.apache.org/docs/release_notes.html

You can download the source release and binary packages from Apache Kylin's
download page: https://kylin.apache.org/download/

Apache Kylin is an open-source Distributed Analytics Engine designed to
provide SQL interface and multi-dimensional analysis (OLAP) on Apache
Hadoop, supporting extremely large datasets.

Apache Kylin lets you query massive dataset at sub-second latency in 3
steps:
1. Identify a star schema or snowflake schema data set on Hadoop.
2. Build Cube on Hadoop.
3. Query data with ANSI-SQL and get results in sub-second, via ODBC, JDBC
or RESTful API.

Thanks to everyone who has contributed to this release.

We welcome your help and feedback. For more information on how to report
problems, and to get involved, visit the project website at
https://kylin.apache.org/

-- 

-

Best regards,



Ni Chunen / George


[CVE-2020-1955] Apache CouchDB Remote Privilege Escalation

2020-05-19 Thread Jan Lehnardt
Description
===

CouchDB version 3.0.0 shipped with a new configuration setting that
governs access control to the entire database server called
`require_valid_user_except_for_up`. It was meant as an extension to the
long-standing setting `require_valid_user`, which in turn requires that
any and all requests to CouchDB will have to be made with valid
credentials, effectively forbidding any anonymous requests.

The new `require_valid_user_except_for_up` is an off-by-default setting
that was meant to allow requiring valid credentials for all endpoints
except for the `/_up` endpoint.

However, the implementation of this made an error that lead to not
enforcing credentials on any endpoint, when enabled.

CouchDB versions 3.0.1[1] and 3.1.0[2] fix this issue.

Mitigation
==

Users who have not enabled `require_valid_user_except_for_up` are not
affected.

Users who have it enabled can either disable it again, or upgrade to
CouchDB versions 3.0.1[1] and 3.1.0[2].

[1]: https://docs.couchdb.org/en/stable/whatsnew/3.0.html#version-3-0-1
[2]: https://docs.couchdb.org/en/stable/whatsnew/3.1.html#version-3-1-0

On behalf of the CouchDB Security Team,
Jan Lehnardt
—