The Apache News Round-up: week ending 22 September 2017

Hello, Friday! The Apache community has been busy this week working on:

Support Apache –if your employer has a matching gifts program, you can increase your contribution and help sustain the ASF’s mission of providing software for the public good. Every dollar counts.

ASF Board –management and oversight of the business affairs of the corporation in accordance with the Foundation’s bylaws.
 – Next Board Meeting: 18 October. Board calendar and minutes
 – ASF Quarterly Report: Operations Summary Q1 FY2018

ASF Infrastructure –our distributed team on three continents keeps the ASF’s infrastructure running around the clock.
 – 7M+ weekly checks yield clever performance at 99.63% uptime

ASF Operations Factoid –this week, 562 Committers changed 1,427,529 lines of code over 3,425 commits. Top 5 contributors, in order, are: Jian He; Carlo Curino; Dominik Stadler; Semen Boikov; and Claus Ibsen.

Apache Arrow™ –a columnar in-memory analytics layer designed to accelerate Big Data.
 – Apache Arrow 0.7.0 released

Apache BookKeeper™ DistributedLog –core library for interacting Apache BookKeeper in log streams and a proxy service for serving large number of logs, fan-in writes and fan-out reads.
 – Apache DistributedLog 0.5.0 released

Apache Commons™ BCEL –Byte Code Engineering Library (BCEL) is intended to give users a convenient way to analyze, create, and manipulate (binary) Java class files (those ending with .class).
 – Apache Commons BCEL 6.1 released 

Apache Geode™ –Big Data management platform.
 – Apache Geode 1.2.1 released

Apache Geronimo™ Config –adds support for basic configuration nomenclatures based on the MicroProfile Config specification.
 – Apache Geronimo Config 1.0 released

Apache Gora™ –Open Source framework provides an in-memory data model and persistence for Big Data.
 – Apache Gora 0.8 released

Apache HBase™ –an Open Source, distributed, versioned, non-relational database.
 – Apache HBase 2.0.0-alpha-3 released

Apache Ignite™ –in-memory computing platform that is durable, strongly consistent and highly available with powerful SQL, key-value and processing APIs.
 – Apache Ignite 2.2.0 released

Apache Log4j™ –a well-known framework for logging application behavior.
 -Apache Log4j 2.9.1 released

Apache Lucene™ Solr –the popular, blazing fast, open source NoSQL search platform from the Apache Lucene project.
 – Apache Lucene and Solr 7.0.0 released
 – CVE-2017-9803: Security vulnerability in Kerberos delegation token functionality

Apache OpenMeetings™ –provides video conferencing, instant messaging, white board, collaborative document editing and other groupware tools using API functions of the Red5 Streaming Server for Remoting and Streaming.
 – Apache OpenMeetings 3.3.2 released

Apache OpenNLP™ –a machine learning based toolkit for the processing of natural language text.
 – Apache OpenNLP 1.8.2 released

Apache POI™ –well-known in the Java field as a library for reading and writing Microsoft Office file formats, such as Excel, PowerPoint, Word, Visio, Publisher and Outlook.
 – Apache POI 3.17 released

Apache Qpid™ Proton –a messaging library for the Advanced Message Queuing Protocol 1.0 (AMQP 1.0, ISO/IEC 19464,
 – Apache Qpid Proton-J 0.22.0 released

Apache Storm™ –a distributed, fault-tolerant, and high-performance realtime computation system that
provides strong guarantees on the processing of data.
 – Apache Storm 1.0.5 released

Apache Tephra (incubating)™ –a transaction engine for distributed data stores like Apache HBase.
 – Apache Tephra-0.13.0-incubating released

Apache Tomcat™ –an Open Source software implementation of the Java Servlet, JavaServer Pages, Java Unified Expression Language, Java WebSocket and Java Authentication Service Provider Interface for Containers technologies.
 – CVE-2017-12615 Apache Tomcat Remote Code Execution via JSP upload
 – CVE-2017-12616 Apache Tomcat Information Disclosure
 – CVE-2017-12615 Apache Tomcat Remote Code Execution via JSP upload
 – Apache Tomcat Possible additional RCE via JSP upload
 – End of life for Apache Tomcat Native 1.1.x

Apache Wicket™ –an Open Source Java component oriented Web application framework.
 – Apache Wicket 7.9.0 released

Apache Zeppelin™ –a collaborative data analytics and visualization tool for distributed, general-purpose data processing system such as Apache Spark, Apache Flink, etc.
 – Apache Zeppelin 0.7.3 released

Did You Know?

 – Did you know that Reddit uses Apache Lucene Solr for its new search functionality for 300M users across 1.1M communities?

 – Did you know that 29,334 files in Apache NetBeans (incubating) were re-licensed to the ASF?

 – Did you know that algorithmic IT operations platform StackState uses Apache Tinkerpop Gremlin for analytical queries?

Apache Community Notices:
 – "Success at Apache" focuses on the processes behind why the ASF "just works". 1) Project Independence 2) All Carrot and No Stick 3) Asynchronous Decision Making Rule of the Makers 5) JFDI –the unconditional love of contributors 6) Meritocracy and Me 7) Learning to Build a Stronger Community 8) Meritocracy. 9) Lowering Barriers to Open Innovation
 – Follow the ASF on social media: @TheASF on Twitter and on LinkedIn at (re-tweets/shares/likes most appreciated!)

 – Presentations from ApacheCon and Apache: Big Data are available; as well as videos and audio recordings

 – Do friend and follow us on the Apache Community Facebook page Twitter account

 – The list of Apache project-related MeetUps can be found at

 – TomcatCon will be held 25 September in London

 – The Apache community will be at All Things Open –stop by the ASF booth and say hello! 23-24 October in Raleigh

 – Learn about Apache Atlas, AriaTosca (incubating), Hadoop YARN, Kafka, ManifoldCF, Ranger, Spot (incubating), Thrift, and more at Open Source Summit Europe + ELC Europe 2017 23-26 October in Prague

 – Catch the Apache Ignite and Spark communities at the In-Memory Computing Summit 24-25 October in San Francisco

 – ASF Annual Report is available at

 – Find out how you can participate with Apache community/projects/activities –opportunities open with Apache HTTP Server, Avro, ComDev (community development), Directory, Incubator, OODT, POI, Polygene, Syncope, Tika, Trafodion, and more!
 – Are your software solutions Powered by Apache? Download & use our "Powered By" logos
= = =
For real-time updates, sign up for Apache-related news by sending mail to and follow @TheASF on Twitter. For a broader spectrum from the Apache community, provides an aggregate of Project activities as well as the personal blogs and tweets of select ASF Committers.

# # #