The Apache News Round-up: week ending 26 March 2021

Farewell, March –we’re wrapping up the month with another great week. Here are the latest updates on the Apache
community’s activities:

It’s our anniversary! The Apache® Software Foundation Celebrates 22 Years of Open Source Leadership – world’s largest Open Source foundation advances community-led innovation “The Apache Way”

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation’s bylaws.
 – The Apache Software Foundation Operations Summary: Q3 FY2021 (November 2020 – January 2021) + Video highlights
 – Next Board Meeting: 21 April 2021. Board calendar and minutes

ApacheCon™ – the ASF’s official global conference series, bringing Tomorrow’s Technology Today since 1998.
 – CFPs open for ApacheCon@Home AND ApacheCon Asia 
 – Event Sponsorship available for both ApacheCon@Home and ApacheCon Asia

ASF Infrastructure – our distributed team on three continents keeps the ASF’s infrastructure running around the clock.
 – 7M+ weekly checks yield uptime at 99.85%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world.

Apache Code Snapshot – Over the past week, 380 Apache Committers changed 2,537,583 lines of
code over 3,380 commits. Top 5 contributors, in order, are: Mark Thomas, Alexander Pucher, Tilman Hausherr, Claus Ibsen, and Andrea Cosentino.       

Apache Project Announcements – the latest updates by category.

Application Servers/Middleware —
 – Apache Karaf 4.2.11 released

Big Data —
 – Apache Qpid JMS 0.57.0 released
 – Apache Parquet 1.12.0 released

Content —
 – Apache PDFBox 2.0.23 released
 – Apache PDFBox CVE-2021-27807: A carefully crafted PDF file can trigger an infinite loop while loading the file
   and CVE-2021-27906: A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file

Enterprise Processes Automation / ERP —
 – Apache OFBiz 17.12.06 released
 – Apache OFBiz CVE-2021-26295: RCE vulnerability due to Java serialization using RMI

Mail —
 – Apache SpamAssassin 3.4.5 released
 – Apache SpamAssassin CVE-2020-1946: Malicious rule configuration (.cf) files can be configured to run system commands

Did You Know?

– Did you know that you can help improve the Apache Flink community experience by completing their Community Survey before 30 March?

– Did you know that the Ignite Summit will take place online on 25 May?

– Did you know that Apache Hop (incubating) will be presenting “The Road to Hop 1.0” at their Hot Hop Hangout session on 1 April?

Apache Community Notices

– The Apache Month in Review: February 2021 + Video highlights

– Apache in 2020 – By The Digits + Video highlights

– ASF Security Report 2020 + Video highlights

– ASF FY2020 Annual Report

– “Trillions and Trillions Served” documentary on the ASF: 1) full feature 2) “Apache Everywhere” 3) “Why Apache” 4) “Apache Innovation” 

 – The Apache Way to Sustainable Open Source Success

 – Foundation Reports and Statements

 – All presentations from ApacheCon@Home are available at 

 – “Success at Apache” focuses on the people and processes behind why the ASF “just works”.

 – Inside Infra: the new interview series with members of the ASF infrastructure team –meet 
    Chris Thistlethwaite
    Drew Foulks
    Greg Stein Part I
      …Part II and Part III
    Daniel Gruno Part I and Part II
    Gavin McDonald Part I and Part II
    Andrew Wetmore Part I and Part II
    Chris Lambertus Part I  and Part II

 – ASF Targeted Sponsor Manning Publications is offering special deals on the latest books on Apache Airflow, Pulsar, Spark, and Thrift, among other titles and eBooks

 – Follow the ASF on social media: @TheASF on Twitter ( and on LinkedIn at

 – Friend and follow the Apache Community on Facebook and Twitter account

 – Are your software solutions Powered by Apache? Download & use our “Powered By” logos

= = =

For real-time updates, sign up for Apache-related news by sending mail to and follow @TheASF on Twitter. For a broader spectrum from the Apache community, provides an aggregate of Project activities as well as the personal blogs and tweets of select ASF Committers.