UPDATE --Trillions and Trillions Served: the documentary on The Apache Software Foundation (ASF)

2020-01-15 Thread Sally Khudairi
[this announcement is available online at https://s.apache.org/ASF-Trillions ]

Why Apache?

"Trillions" is in post-production!

We are proud to preview the first teaser 
https://www.youtube.com/watch?v=YM5dLvNatRs from our filming with Wyona 
Pictures during ApacheCon North America and Europe 2019.

Members of the greater Apache Community and friends of the ASF share their 
perspectives on "Why Apache?" and provide a peek of what's to come as the 
documentary takes shape. Watch this space as our work progresses, and thank you 
in advance for supporting this project.

We'd love to hear what do you think of this new teaser! Tell us in the YouTube 
comments section, on Twitter and LinkedIn.

- Teaser: Why Apache? https://www.youtube.com/watch?v=YM5dLvNatRs
- Trailer: Trillions and Trilions Served 
https://www.youtube.com/watch?v=UvuyBz1qMCE
- The ASF's YouTube channel https://s.apache.org/ASF-YouTube
- The ASF's Twitter feed https://twitter.com/TheASF
- The ASF on LinkedIn 
https://www.linkedin.com/company/the-apache-software-foundation

# # # 

NOTE: you are receiving this message because you are subscribed to the 
announce@apache.org distribution list. To unsubscribe, send email from the 
recipient account to announce-unsubscr...@apache.org with the word 
"Unsubscribe" in the subject line.


[ANNOUNCE] Apache Qpid Broker-J 7.1.7 released

2020-01-15 Thread Alex Rudyy
The Apache Qpid (http://qpid.apache.org) community is pleased to
announce the immediate availability of Apache Qpid Broker-J 7.1.7.

This is the latest release of pure java implementation of messaging broker
supporting the Advanced Message Queuing Protocol 1.0 (AMQP 1.0, ISO/IEC
19464,
http://www.amqp.org) and legacy AMQP protocols 0-10, 0-91, 0-9 and 0-8.

Please visit Qpid project site for more details:
http://qpid.apache.org/components/broker-j/index.html

The release is available now from our website:
http://qpid.apache.org/download.html

The release brings a number of improvements and bug fixes. The release
notes can be found at:
http://qpid.apache.org/releases/qpid-broker-j-7.1.7/release-notes.html

Thanks to all involved,
Alex

-
To unsubscribe, e-mail: dev-unsubscr...@qpid.apache.org
For additional commands, e-mail: dev-h...@qpid.apache.org


[CVE-2020-1929] Apache Beam MongoDB IO connector disables certificate trust verification

2020-01-15 Thread Ismaël Mejía
CVE-2020-1929 Apache Beam MongoDB IO connector disables certificate trust
verification

Severity: Major
Vendor: The Apache Software Foundation

Versions Affected:
Apache Beam 2.10.0 to 2.16.0

Description:
The Apache Beam MongoDB connector in versions 2.10.0 to 2.16.0 has an
option to
disable SSL trust verification. However this configuration is not respected
and
the certificate verification disables trust verification in every case. This
exclusion also gets registered globally which disables trust checking for
any
code running in the same JVM.

Mitigation:
Users of the affected versions should apply one of the following
mitigations:
- Upgrade to Apache Beam 2.17.0 or later

Acknowledgements:
This issue was reported (and fixed) by Colm Ó hÉigeartaigh.


[ANNOUNCE] Apache Groovy 3.0.0-rc-3 released

2020-01-15 Thread Paul King
Dear community,

The Apache Groovy team is pleased to announce version 3.0.0-rc-3 of
Apache Groovy.
This is our final planned pre-release of a new version of Groovy.
We greatly appreciate any feedback you can give us when using this version.
Pending feedback the final release is expected in 1-2 weeks!

Apache Groovy is a multi-faceted programming language for the JVM.
Further details can be found at the https://groovy.apache.org website.

This release includes 26 bug fixes/improvements as outlined in the changelog:
https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12318123=12346592

Sources, convenience binaries, downloadable documentation and an SDK
bundle can be found at: https://groovy.apache.org/download.html
We recommend you verify your installation using the information on that page.

Jars are also available within the major binary repositories.

We welcome your help and feedback and in particular want
to thank everyone who contributed to this release.

For more information on how to report problems, and to get involved,
visit the project website at https://groovy.apache.org/

Best regards,

The Apache Groovy team.