The Apache News Round-up: week ending 13 October 2017

We hope you’ve had a great week. The Apache community has been busy with the following:

Foundation Statement –Apache Is Open.

ASF Board –management and oversight of the business affairs of the corporation in accordance with the Foundation’s bylaws.
 – Next Board Meeting: 18 October. Board calendar and minutes

ASF Infrastructure –our distributed team on three continents keeps the ASF’s infrastructure running around the clock.
 – 7M+ weekly checks yield great performance at 99.77% uptime

ASF Operations Factoid –this week, 544 Apache Committers changed 1,026,830 lines of code over 3,469 commits. Top 5 contributors, in order, are: Maxim Solodovnik, Gary Gregory, Claus Ibsen, Iñigo Goiri, and Jonathan Hung.

Apache Commons™ VFS –provides a single API for accessing various different file systems.
 – Apache Commons VFS 2.2 released

Apache Jackrabbit™ –a fully conforming implementation of the Content Repository for Java Technology API (JCR).
 – Apache Jackrabbit 2.12.8 and Jackrabbit Oak 1.7.9 released

Apache Johnzon™ –a Java library for parsing and creating JSON.
 – Apache Johnzon-1.1.4 released

Apache Lucene™ –a high-performance, full-featured text search engine library written entirely in Java.
 – Apache Lucene 7.0.1 and Apache Solr 7.0.1 released
 – CVE-2017-12629: Please secure your Apache Solr servers since a zero-day exploit has been reported on a public mailing list

Apache NiFi™ –an easy to use, powerful, and reliable system to process and distribute data.
 – CVE-2017-12623

Apache Phoenix™ –enables OLTP and SQL-based operational analytics for Apache Hadoop.
 – Apache Phoenix 4.12 released

Apache Qpid™ –client supporting the Advanced Message Queuing Protocol 1.0, based around the Apache Qpid Proton protocol engine and implementing the AMQP JMS Mapping as it evolves at OASIS.
 – Apache Qpid JMS 0.26.0 released

Apache Syncope™ –an Open Source system for managing digital identities in enterprise environments, implemented in Java EE technology.
 – Apache Syncope 2.0.6 released

Apache Zookeeper™ –an Open Source server that enables highly reliable distributed coordination.
 – CVE-2017-5637: DOS attack on wchp/wchc four letter words (4lw)

Did You Know?

 – Did you know that the ASF Incubator has mentored 183 podlings in the Apache Way since its inception in 2002?

 – Did you know that Apache Spark won the 2017 JAX Innovation award for "Most innovative contribution to the Java ecosystem"?

 – Did you know that the City of San Diego is using Apache Airflow (incubating) for data automation?

Apache Community Notices:
 – "Success at Apache" focuses on the processes behind why the ASF "just works". 1) Project Independence 2) All Carrot and No Stick 3) Asynchronous Decision Making Rule of the Makers 5) JFDI –the unconditional love of contributors 6) Meritocracy and Me 7) Learning to Build a Stronger Community 8) Meritocracy. 9) Lowering Barriers to Open Innovation 10) All My Roads Led to Apache
 – Follow the ASF on social media: @TheASF on Twitter and on LinkedIn at (re-tweets/shares/likes most appreciated!)

 – Presentations from ApacheCon and Apache: Big Data are available; as well as videos and audio recordings

 – Do friend and follow us on the Apache Community Facebook page Twitter account

 – The list of Apache project-related MeetUps can be found at

 – The Apache community will be at All Things Open –stop by the ASF booth and say hello! 23-24 October in Raleigh

 – Learn about Apache Atlas, AriaTosca (incubating), Hadoop YARN, Kafka, ManifoldCF, Ranger, Spot (incubating), Thrift, and more at Open Source Summit Europe + ELC Europe 2017 23-26 October in Prague

 – Catch the Apache Ignite and Spark communities at the In-Memory Computing Summit 24-25 October in San Francisco

 – ASF Quarterly Report: Operations Summary Q1 FY2018

 – ASF Annual Report is available at

 – Find out how you can participate with Apache community/projects/activities –opportunities open with Apache HTTP Server, Avro, ComDev (community development), Directory, Incubator, OODT, POI, Polygene, Syncope, Tika, Trafodion, and more!
 – Are your software solutions Powered by Apache? Download & use our "Powered By" logos
= = =
For real-time updates, sign up for Apache-related news by sending mail to and follow @TheASF on Twitter. For a broader spectrum from the Apache community, provides an aggregate of Project activities as well as the personal blogs and tweets of select ASF Committers.

# # #