The Apache News Round-up: week ending 18 June 2021

The week has zipped by –it’s Friday already– and it’s time to take a look at what the Apache community has been up to over the past week:

ASF Board – management and oversight of the business affairs of the corporation in accordance with the Foundation’s bylaws.
 – Next Board Meeting: 21 July 2021. Board calendar and minutes

ApacheCon™ – the ASF’s official global conference series, bringing Tomorrow’s Technology Today since 1998. Two events are being held in 2021:
 – ApacheCon@Home (21-23 September) – NEW: program is live; registration is open
 – ApacheCon Asia (6-8 August) – program, registration, keynotes, and sponsors announced
 – Sponsorship opportunities available for both events

ASF Infrastructure – our distributed team on three continents keeps the ASF’s infrastructure running around the clock.
 – 7M+ weekly checks yield uptime at 99.98%. Performance checks across 50 different service components spread over more than 250 machines in data centers around the world.

Apache Code Snapshot – Over the past week, 328 Apache Committers changed 7,971,444 lines of
code over 2,795 commits. Top 5 contributors, in order, are: Andi Huber, Mark Thomas, Andrea Cosentino, Tellier Benoit, and Hugh Miles.    

Apache Project Announcements – the latest updates by category.

Big Data —
 – Apache Druid 0.21.1 released
 – Apache Drill 1.19.0 released

Content —
 – Apache PDFBox 2.0.24 released
 – Apache PDFBox CVE-2021-31811: A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny file
   and CVE-2021-31812: A carefully crafted PDF file can trigger an infinite loop while loading the file
 – Apache Jackrabbit 2.20.3 released
Libraries —
 – Apache Chainsaw 2.1.0 released
 – Apache Chainsaw CVE-2020-9493: Java deserialization in Chainsaw
 – Apache CXF CVE-2021-30468: Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter
Messaging —
 – Apache Pulsar 2.8.0 released
Natural Language Processing —
 – Apache NLPCraft 0.8.0 (incubating) released
Observability —
 – Apache SkyWalking 8.6.0 released

Servers —
 – Apache Tomcat 8.5.68 and 10.1.0-M1 (alpha) released

Did You Know?

– Did you know that registration for ApacheCon Asia and ApacheCon@Home is free, and allows participants to choose to support the events by making an optional donation of $10, $20, or $50?

– Did you know that the Apache HTTP Server project are using libera for their user support channel? Join the main channel on #httpd and #httpd-dev for the dev community –to connect, check out

– Did you know that Apache Pinot (incubating) will be holding an online MeetUp on 22 June?

Apache Community Notices

– The Apache Month in Review: May 2021 and video highlights

– The Apache® Software Foundation Celebrates 22 Years of Open Source Leadership – world’s largest Open Source foundation advances community-led innovation “The Apache Way”

– The Apache Software Foundation Operations Summary: Q3 FY2021 (November 2020 – January 2021) + Video highlights

– Apache in 2020 – By The Digits + Video highlights

– ASF Security Report 2020 + Video highlights

– ASF FY2020 Annual Report

– “Trillions and Trillions Served” documentary on the ASF: 1) full feature 2) “Apache Everywhere” 3) “Why Apache” 4) “Apache Innovation” 

 – The Apache Way to Sustainable Open Source Success

 – Foundation Reports and Statements

 – All presentations from ApacheCon@Home are available at 

 – “Success at Apache” focuses on the people and processes behind why the ASF “just works”.

 – Inside Infra: the new interview series with members of the ASF infrastructure team –meet 
    Chris Thistlethwaite
    Drew Foulks
    Greg Stein Part I
      …Part II and Part III
    Daniel Gruno Part I and Part II
    Gavin McDonald Part I and Part II
    Andrew Wetmore Part I and Part II
    Chris Lambertus Part I  and Part II

 – ASF Targeted Sponsor Manning Publications is offering special deals on the latest books on Apache Airflow, Pulsar, Spark, and Thrift, among other titles and eBooks

 – Follow the ASF on social media: @TheASF on Twitter ( and on LinkedIn at

 – Follow the Apache Community on Facebook and Twitter

 – Are your software solutions Powered by Apache? Download & use our “Powered By” logos

= = =

For real-time updates, sign up for Apache-related news by sending mail to and follow @TheASF on Twitter. For a broader spectrum from the Apache community, provides an aggregate of Project activities as well as the personal blogs and tweets of select ASF Committers.