| --- |
| layout: post |
| status: PUBLISHED |
| published: true |
| title: 'The Apache Weekly News Round-up: week ending 7 January 2022' |
| id: db380d11-e27b-49fb-8059-8d1f08c0b561 |
| date: '2022-01-10 14:38:24 -0500' |
| categories: foundation |
| tags: |
| - roundup |
| - innovation |
| - software |
| - newsletter |
| - weekly |
| - opensource |
| - news |
| - apache |
| - projects |
| - '2022' |
| - community |
| - foundation |
| - updates |
| - asf |
| permalink: foundation/entry/the-apache-weekly-news-round8 |
| --- |
| </p></p></p></p></p></p></p></p> |
| <p>Welcome, 2022! We hope that you have had a festive holiday season<br /> |
| and are excited to kick off the new year. Here's what happened over the<br /> |
| past week:<br></p> |
| <div><b>Apache in 2021 - By The Digits</b> – a look at the achievements from the Apache Community over the past 12 months.<br> - Summary and stats at <a href="https://s.apache.org/Apache2021Digits" target="_blank">https://s.apache.org/Apache2021Digits</a><br> - Video highlights <a href="https://youtu.be/GU0SV_2tWkU" target="_blank">https://youtu.be/GU0SV_2tWkU</a></div> |
| <div><b><br></b></div> |
| <div><b>The Apache Month in Review </b>– highlights of what we've accomplished over the past month. <br> - December 2021 <a href="https://s.apache.org/December2021" target="_blank">https://s.apache.org/December2021</a></div> |
| <div><span style="font-weight: 700;"><br>ASF Board</span> – management and oversight of the business affairs of the corporation in accordance with the Foundation's bylaws.<br></div> |
| <p> - Next Board Meeting: 19 January 2022. Board calendar and minutes <a href="https://apache.org/foundation/board/calendar.html" target="_blank">https://apache.org/foundation/board/calendar.html</a></p> |
| <p><span style="font-weight: 700;">ASF Infrastructure</span> – our distributed team on three continents keeps the ASF's infrastructure running around the clock.<br> -<br /> |
| 7M+ weekly checks yield uptime at 99.98%. Performance checks across 50<br /> |
| different service components spread over more than 250 machines in data<br /> |
| centers around the world. View the <a href="http://www.apache.org/uptime/" target="_blank">ASF's Infrastructure Uptime site to see the most recent averages</a>.<br></p> |
| <p><span style="font-weight: 700;">Apache Code Snapshot </span>–<br /> |
| Over the past week, 280 Apache Committers changed 2,780,891 lines of<br /> |
| code over 2,868 commits. Top 5 contributors, in order, are: <span>Jean-Baptiste Onofré, Gary Gregory, Mark Thomas, Harikrishna Patnala, and Claus Ibsen. </span><span style="font-weight: 700;"></span></p> |
| <p><span style="font-weight: 700;">Apache Project Announcements</span> – the latest updates by category.</p> |
| <p>Big Data --<br> - <a href="https://avro.apache.org/" target="_blank">Apache Avro</a> 1.11.0 released <br> -- <a href="https://s.apache.org/l8r9g" target="_blank">CVE-2021-43045</a>: Possible DOS vulnerabilities in C# Avro SDK <br></p> |
| <p>Enterprise Processes Automation / ERP --<br><br /> |
| - <a href="https://ofbiz.apache.org/" target="_blank">Apache </a><span class="il"><a href="https://ofbiz.apache.org/" target="_blank">OFBiz</a></span> 18.12.05 released<br></p></p> |
| <p>Integration --<br> - <a href="https://camel.apache.org/" target="_blank">Apache </a><span class="il"><a href="https://camel.apache.org/" target="_blank">Camel</a></span> 3.11.5 (LTS) released </p> |
| <p>Mail --<br> - <a href="https://james.apache.org/" target="_blank">Apache </a><span class="il"><a href="https://james.apache.org/" target="_blank">James</a></span> 3.6.1 released <br> -- <a href="https://s.apache.org/4dnw1" target="_blank">CVE-2021-38542</a>: STARTTLS command injection (IMAP and POP3) <br> -- <a href="https://s.apache.org/5nwbw" target="_blank">CVE-2021-40110</a>: IMAP vulnerable to a ReDoS <br> -- <a href="https://s.apache.org/kt2t1" target="_blank">CVE-2021-40111</a>: IMAP parsing Denial Of Service <br> -- <a href="https://s.apache.org/keasu" target="_blank">CVE-2021-40525</a>: Sieve file storage vulnerable to path traversal attacks </p> |
| <p>Network Client --<br><br /> |
| - <a href="https://guacamole.apache.org/" target="_blank">Apache </a><span class="il"><a href="https://guacamole.apache.org/" target="_blank">Guacamole</a></span> 1.4.0 released <br> - <a href="https://mina.apache.org" target="_blank">Apache </a><span class="il"><a href="https://mina.apache.org" target="_blank">MINA</a></span> FTPServer 1.1.2 released <br></p> |
| <p>Web Frameworks--<br> - <a href="https://struts.apache.org/" target="_blank">Apache </a><span class="il"><a href="https://struts.apache.org/" target="_blank">Struts</a></span> 2.5.28.3 released <br> - <a href="https://portals.apache.org/" target="_blank">Apache Portals</a> 3.1.1 released <br> -- <a href="https://s.apache.org/79g3o" target="_blank">CVE-2021-36737</a>: XSS in V3 Demo Portlet <br> -- <a href="https://s.apache.org/meum0" target="_blank">CVE-2021-36738</a>: XSS vulnerability in the JSP version of the Pluto Applicant MVCBean CDI portlet <br> -- <a href="https://s.apache.org/uga6s" target="_blank">CVE-2021-36739</a>: XSS vulnerability in the MVCBean JSP portlet maven archetype <a href="https://s.apache.org/uga6s"></a></p> |
| <p><span style="font-weight: 700;"><br>Did You Know?</span><br></p> |
| <p> - Did you know that in 2021, 724 individuals new to the ASF contributed to Apache projects and initiatives? <a href="https://s.apache.org/Apache2021Digits" target="_blank">https://s.apache.org/Apache2021Digits</a> <br></p> |
| <p> - Did you know that Apache Druid is frequently used for AdTech data? <a target="_blank" class="c-link" data-stringify-link="https://druid.apache.org/" data-sk="tooltip_parent" href="https://druid.apache.org/" rel="noopener noreferrer">https://druid.apache.org/</a></p> |
| <p> - Did you know that PulsarSummit Asia 2022 will be held online on January 15-16? <a target="_blank" class="c-link" data-stringify-link="https://pulsar-summit.org/" data-sk="tooltip_parent" href="https://pulsar-summit.org/" rel="noopener noreferrer">https://pulsar-summit.org/</a><br><br></p> |
| <h3>Apache Community Notices</h3> |
| <p> - Watch "<a href="https://www.youtube.com/watch?v=JUt2nb0mgwg" target="_blank">Trillions and Trillions Served</a>", the documentary on the ASF 1) <a href="https://www.youtube.com/watch?v=JUt2nb0mgwg" target="_blank">full feature</a> [49 min] 2) "<a href="https://www.youtube.com/watch?v=nXtIti9jMFI" target="_blank">Apache Everywhere</a>" [6 min] 3) "<a href="https://www.youtube.com/watch?v=YM5dLvNatRs" target="_blank">Why Apache</a>" [2.5 min] 4) “<a href="https://www.youtube.com/watch?v=qkvqJaX4S50" target="_blank">Apache Innovation</a>” [40 min] <br></p> |
| <p> - ASF Annual Report: FY2021 -- <a href="https://blogs.apache.org/foundation/entry/the-apache-software-foundation-announces78" target="_blank">Press release</a> and <a href="https://www.apache.org/foundation/docs/FY2021AnnualReport.pdf" target="_blank">Report</a> (PDF)</p> |
| <p> - The Apache Way to <a href="https://s.apache.org/GhnI" target="_blank">Sustainable Open Source Success</a> </p> |
| <p> - <a href="http://www.apache.org/foundation/reports.html" target="_blank">Foundation Reports and Statements</a><br></p> |
| <p> - Presentations from 2021's ApacheCon Asia and ApacheCon@Home are available on the <a href="https://www.youtube.com/c/TheApacheFoundation/" target="_blank" style="background-color: rgb(255, 255, 255);">ASF YouTube channel</a>.</p> |
| <p> - "<a href="https://blogs.apache.org/foundation/category/SuccessAtApache" target="_blank">Success at Apache</a>" focuses on the people and processes behind why the ASF "just works." <br></p> |
| <div> |
| <p> - Inside Infra: the new interview series with members of the ASF infrastructure team --meet <br> Chris Thistlethwaite <a href="https://s.apache.org/InsideInfra-Chris" target="_blank">https://s.apache.org/InsideInfra-Chris</a><br> Drew Foulks <a href="https://s.apache.org/InsideInfra-Drew" rel="noreferrer" target="_blank" data-saferedirecturl="https://www.google.com/url?q=https://s.apache.org/InsideInfra-Drew&source=gmail&ust=1588339104628000&usg=AFQjCNF9dVEn48pV7o9HBG14sP9uprU8Xw">https://s.apache.org/InsideInf<wbr>ra-Drew</a><br> Greg Stein Part I <a href="https://s.apache.org/InsideInfra-Greg" target="_blank">https://s.apache.org/InsideInfra-Greg</a><br> ...Part II <a href="https://s.apache.org/InsideInfra-Greg2" target="_blank">https://s.apache.org/InsideInfra-Greg2</a> and Part III <a href="https://s.apache.org/InsideInfra-Greg3" target="_blank">https://s.apache.org/InsideInfra-Greg3</a><br> Daniel Gruno Part I <a href="https://s.apache.org/InsideInfra-Daniel1" target="_blank">https://s.apache.org/InsideInfra-Daniel1</a> and Part II <a href="https://s.apache.org/InsideInfra-Daniel2" target="_blank">https://s.apache.org/InsideInfra-Daniel2</a><br> Gavin McDonald Part I <a href="https://s.apache.org/InsideInfra-Gavin" target="_blank">https://s.apache.org/InsideInfra-Gavin</a> and Part II <a href="https://s.apache.org/InsideInfra-Gavin2" target="_blank">https://s.apache.org/InsideInfra-Gavin2</a><br> Andrew Wetmore Part I <a href="https://s.apache.org/InsideInfra-Andrew" target="_blank">https://s.apache.org/InsideInfra-Andrew</a> and Part II <a href="https://s.apache.org/InsideInfra-Andrew2" target="_blank">https://s.apache.org/InsideInfra-Andrew2</a><br> Chris Lambertus Part I <a href="https://s.apache.org/InsideInfra-ChrisL" target="_blank">https://s.apache.org/InsideInfra-ChrisL</a> and Part II <a href="https://s.apache.org/InsideInfra-ChrisL2" target="_blank">https://s.apache.org/InsideInfra-ChrisL2</a></p> |
| </div> |
| <div> |
| <p> - Follow the ASF on social media: <a href="https://twitter.com/TheASF" target="_blank">@TheASF on Twitter</a> and <a href="https://www.linkedin.com/company/the-apache-software-foundation" target="_blank">The ASF page LinkedIn</a>. <br></p> |
| <p> - Follow the <a href="https://www.facebook.com/ApacheSoftwareFoundation/" target="_blank">Apache Community on Facebook</a> and <a href="https://twitter.com/ApacheCommunity" target="_blank">Twitter</a>. </p> |
| </div> |
| <div> - Are your software solutions Powered by Apache? <a href="http://www.apache.org/foundation/press/kit/#poweredby" target="_blank">Download & use our "Powered By" logos</a>.<br></div> |
| <p><span class="LrzXr"></span><span class="LrzXr"></span></p> |
| <div> |
| <hr> |
| <h2>Stay updated about The ASF</h2> |
| <p>For<br /> |
| real-time updates, sign up for Apache-related news by sending mail to<br /> |
| announce-subscribe@apache.org and follow @TheASF on Twitter. For a<br /> |
| broader spectrum from the Apache community, <a href="https://twitter.com/PlanetApache">https://twitter.com/PlanetApache</a> provides an aggregate of Project activities as well as the personal blogs and tweets of select ASF Committers.</p> |
| </div></p></p></p></p></p></p></p></p> |
