Airflow Providers (Amazon 2.3.0) released on Mon 11 Oct 17:18:55 CEST 2021 are ready

2021-10-11 Thread Jarek Potiuk
Dear Airflow community, I'm happy to announce that new versions of Airflow Providers packages were just released. The source release, as well as the binary releases for all Providers are available here: https://airflow.apache.org/docs/apache-airflow-providers/installing-from-sources The Amazon

[ANNOUNCE] Release Apache Traffic Control 6.0.0

2021-10-11 Thread Zach Hoffman
The Apache Traffic Control team is proud to announce the release of Apache Traffic Control 6.0.0, which contains various new features and bug fixes. Apache Traffic Control allows you to build a large scale content delivery network using open source. Built around Apache Traffic Server as the cach

CVE-2021-42009: Apache Traffic Control Arbitrary Email Content Insertion in /deliveryservices/request

2021-10-11 Thread Eric Friedrich
Description: An authenticated Traffic Ops user with Portal-level privileges can send a request with a specially-crafted email subject to the /deliveryservices/request Traffic Ops endpoint to send an email, from the Traffic Ops server, with an arbitrary body to an arbitrary email address.

[ANNOUNCE] Apache Calcite Avatica 1.19.0 released

2021-10-11 Thread Julian Hyde
The Apache Calcite team is pleased to announce the release of Apache Calcite Avatica 1.19.0. Avatica is a framework for building database drivers. Avatica defines a wire API and serialization mechanism for clients to communicate with a server as a proxy to a database. The reference Avatica client

[ANNOUNCE] Apache Storm 2.2.1 Released

2021-10-11 Thread Ethan Li
The Apache Storm community is pleased to announce the release of Apache Storm version 2.2.1. Apache Storm is a distributed, fault-tolerant, and high-performance realtime computation system that provides strong guarantees on the processing of data. You can read more about Apache Storm on the projec

[ANNOUNCE] Apache Hop (Incubating) 1.0 released

2021-10-11 Thread Bart Maertens
After more than two years of work, the Apache Hop PPMC and community are pleased to announce the general availability of Apache Hop (Incubating) 1.0. This 1.0 release is the result of a massive amount of work by the Apache Hop community. The Hop Orchestration Platform, or Apache Hop (Incubating

Fwd: [ANNOUNCE] Apache Jackrabbit Oak 1.22.9 released

2021-10-11 Thread Nitin Gupta
The Apache Jackrabbit community is pleased to announce the release of Apache Jackrabbit Oak 1.22.9. The release is available for download at: http://jackrabbit.apache.org/downloads.html See the full release notes below for details about this release: Release Notes -- Apache Jackrabbit Oak

[ANN] Apache Syncope 2.1.10

2021-10-11 Thread Francesco Chicchiriccò
The Apache Syncope team is pleased to announce the release of Syncope 2.1.10 Apache Syncope is an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology . The release will be available within 24h from: https://syncope.apache.org/download

CVE-2021-41832: Apache OpenOffice: Content Manipulation with Certificate Validation Attack

2021-10-11 Thread Dave Fisher
Severity: moderate Description: It is possible for an attacker to manipulate documents to appear to be signed by a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25635 for the LibreOffice advisory. Cre

CVE-2021-41831: Apache OpenOffice: Timestamp Manipulation with Signature Wrapping

2021-10-11 Thread Dave Fisher
Severity: moderate Description: It is possible for an attacker to manipulate the timestamp of signed documents. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25634 for the LibreOffice advisory. Credit: Apache OpenOff

CVE-2021-41830: Apache OpenOffice: Double Certificate Attack

2021-10-11 Thread Dave Fisher
Severity: high Description: It is possible for an attacker to manipulate signed documents and macros to appear to come from a trusted source. All versions of Apache OpenOffice up to 4.1.10 are affected. Users are advised to update to version 4.1.11. See CVE-2021-25633 for the LibreOffice advi