The Apache News Round-up: week ending 6 July 2018

Hello Friday and welcome, July! Here we go –the Apache Community has been productive over the past week with:

Support Apache –thank you in advance for helping offset the ASF’s day-to-day operating expenses! Every dollar counts.
 – Corporate matching gifts can double your individual contribution to the ASF. Add the ASF to your corporate matching gift program today

ASF Board –management and oversight of the business affairs of the corporation in accordance with the Foundation’s bylaws.
 – Next Board Meeting: 18 July. Board calendar and minutes

ApacheCon™ –the ASF’s official global conference series. Join us!
 – 24-27 September: Sign up for ApacheCon today and SAVE $300
 – 8 October: Apache Roadshow and Open Source Job Fair/Fairfax, VA –Save The Date!
 – Seeking Media and Community Partners for ApacheCon: contact if you can help.

ASF Infrastructure –our distributed team on three continents keeps the ASF’s infrastructure running around the clock.
 – 7M+ weekly checks yield stablized performance at 87.35% uptime.

ASF Operations Factoid –this week, 451 Apache contributors changed 987,908 lines of code over 2,626 commits. Top 5 contributors, in order, are: Jean-Baptiste Onofré, Rakesh Radhakrishnan, Till Rohrmann, mxnet-ci, and Tellier Benoit.

Apache CXF™ –an Open Source services framework.
 – Apache Apache CXF 3.2.5, 3.1.16, and CXF Fediz 1.4.4 released

Apache HttpComponents™ Core –a set of low level HTTP transport components that can be used to build custom client and server side HTTP services with a minimal footprint.
 – Apache HttpComponents Core 4.4.10 released

Apache Jackrabbit™ –a fully conforming implementation of the Content Repository for Java Technology API (JCR).
 – Apache Jackrabbit 2.8.8 and Jackrabbit Oak 1.8.5 and 1.9.5 released

Apache Jena™ –a framework for developing Semantic Web and Linked Data applications in Java.
 – Apache Jena 3.8.0 released

Apache Kafka™ –distributed, fault tolerant, publish-subscribe messaging.
 – Apache Kafka and released

Apache Lucene™ Solr™ –a high-performance, full-featured text search engine library written entirely in Java.
 – CVE-2018-8026: XXE vulnerability due to Apache Solr configset upload

Apache OpenNLP™ –a machine learning based toolkit for the processing of natural language text.
 – Apache OpenNLP 1.9.0 released

Apache PDFBox™ –an Open Source Java tool for working with PDF documents.
 – Apache PDFBox 1.8.15 released
 – DoS (OOM) Vulnerability in Apache PDFBox’s AFMParser

Apache Qpid™ JMS –pure java implementation of messaging broker supporting Advanced Message Queuing Protocols 1.0 (AMQP 1.0, ISO/IEC 19464).
 – Apache Qpid JMS 0.34.0, Qpid Dispatch 1.2.0, and Qpid Proton 0.24.0 released

Apache Syncope™ –an Open Source system for managing digital identities in enterprise environments.
 – Apache Syncope 2.0.9

Did You Know?

 – Did you know that you can watch presentations from the Apache Roadshow and FOSS Backstage at ?

 – Did you know that Clojure MXNet has become part of the main Apache MXNet (incubating) project?

 – Did you know that you can meet members of the Apache community at the Apache booth at OSCON 18-19 July?

Apache Community Notices:

 – The Apache Software Foundation Celebrates 19 Years of Open Source Leadership "The Apache Way"

 – Read "Open – For Business – At the ASF" by Merv Adrian, VP Research at Gartner

 – The Apache Software Foundation 2018 Vision Statement

 – Apache in 2017 – By The Digits

 – Foundation Statement –Apache Is Open.

 – "Success at Apache" focuses on the processes behind why the ASF "just works".

 – Please follow/like/re-tweet the ASF on social media: @TheASF on Twitter and on LinkedIn at

 – Do friend and follow us on the Apache Community Facebook page Twitter account

 – The list of Apache project-related MeetUps can be found at

 – ApacheCon North America will be held 24-27 September in Montreal

 – Save the Date: Apache Roadshow DC and Open Source/Government/Cyber/Job Fair – 8 October 2018 in Fairfax, VA

 – ASF Quarterly Report: Operations Summary: November 2017 – January 2018

 – ASF FY 2017 Annual Report is available at

 – Find out how you can participate with Apache community/projects/activities –opportunities open with Apache HTTP Server, Avro, ComDev (community development), Directory, Incubator, OODT, POI, Polygene, Syncope, Tika, Trafodion, and more!
 – Are your software solutions Powered by Apache? Download & use our "Powered By" logos
= = =
For real-time updates, sign up for Apache-related news by sending mail to and follow @TheASF on Twitter. For a broader spectrum from the Apache community, provides an aggregate of Project activities as well as the personal blogs and tweets of select ASF Committers.

# # #