The Apache News Round-up: week ending 6 January 2017
[this announcement is available online at https://s.apache.org/94r5 ] Happy New Year! The Apache community kicks off 2017 with the following activities: ASF Board –management and oversight of the business and affairs of the corporation in accordance with the Foundation's bylaws. - Next Board Meeting: 18 January 2017. Board calendar and minutes available at http://apache.org/foundation/board/calendar.html ASF Infrastructure –our distributed team on four continents keeps the ASF's infrastructure running around the clock. - 7M+ weekly checks yield smashing performance at 99.92% uptime http://status.apache.org/ ApacheCon™ –the official conference series of The Apache Software Foundation. - CFP OPEN: Apache: Big Data and ApacheCon North America 16-18 May 2017/Miami http://apachecon.com/ - 2016/Seville's session recordings continue to be processed and posted at Feathercast http://feathercast.org Apache Incubator –projects and communities intending to become fully-fledged projects under the auspices of The Apache Software Foundation do so through the Apache Incubator. - Call for Entries --Apache Incubator Logo https://s.apache.org/rFii Apache Attic –provides process and solutions to make it clear when an Apache project has reached its end of life. - Apache DeviceMap retired http://mail-archives.apache.org/mod_mbox/www-announce/201701.mbox/%3CCALGG8z3wZ3iSii15BdgVx6SnfVwVuNFMQD3mQuVOQCqWi5CG9A%40mail.gmail.com%3E Apache Ant™ –a Java library and command-line tool that helps building software. - Apache Ant 1.9.8 and 1.10.0 released http://ant.apache.org/bindownload.cgi Apache Commons™ JCS –a distributed, versatile caching system. - Apache Commons JCS 2.0 released https://commons.apache.org/proper/commons-jcs/download_jcs.cgi Apache Guacamole –a clientless remote desktop gateway that supports standard protocols like VNC, RDP, and SSH. - Apache Guacamole 0.9.10-incubating released http://guacamole.incubator.apache.org/releases/0.9.10-incubating/ Apache log4net™ –a tool to help the programmer output log statements to a variety of output targets. - Apache log4net 2.0.7 released https://logging.apache.org/log4net/download_log4net.cgi Apache OpenNLP™ –a machine learning based toolkit for the processing of natural language text. - Apache OpenNLP 1.7.0 released http://opennlp.apache.org/cgi-bin/download.cgi Apache Tomcat™ –a Web server that is an Open Source software implementation of the Java Servlet, JavaServer Pages, Java Expression Language and Java WebSocket technologies. - CVE-2016-8745 Apache Tomcat Information Disclosure http://mail-archives.apache.org/mod_mbox/www-announce/201701.mbox/%3C04ead0cb-c989-1386-0fd1-a51ef80f7b57%40apache.org%3E Did You Know? - Did you know that in 2016 Apache projects comprised 797 Repositories; 205,167 code commits by 3,314 Committers; and 60,327,418 lines changed. https://projects.apache.org/ - Did you know that over the past year, Apache communities sent 2,003,919 emails by 27,940 authors on 1,127 lists with 789,825 topics. Prolific! - Did you know that ASF Infrastructure have upgraded and improved blogs.apache.org? https://blogs.apache.org/infra/entry/blogs-a-o-moved-upgraded Apache Community Notices: - "Success at Apache" is a new monthly blog series that focuses on the processes behind why the ASF "just works". First article: Project Independence https://s.apache.org/CE0V - Feedback from The Apache Software Foundation on the Free and Open Source Security Audit (FOSSA) https://s.apache.org/romf - ASF Operations Summary - Q2 FY2017 https://s.apache.org/oTOF - The list of Apache project-related MeetUps can be found at http://apache.org/events/meetups.html - Find out how you can participate with Apache community/projects/activities --opportunities open with Apache HTTP Server, Avro, ComDev (community development), Directory, Incubator, OODT, POI, Syncope, Tika, Trafodion, Zest, and more! https://helpwanted.apache.org/ - ApacheCon North America and Apache:BigData will be held 16-18 May 2017 in Miami http://apachecon.com/ - Are your software solutions Powered by Apache? Download & use our "Powered By" logos http://www.apache.org/foundation/press/kit/#poweredby - Show your support for Apache with ASF-approved swag from http://www.zazzle.com/featherwearand http://s.apache.org/landsend--all proceeds benefit the ASF! = = = For real-time updates, sign up for Apache-related news by sending mail to announce-subscr...@apache.org and follow @TheASF on Twitter. For a broader spectrum from the Apache community, https://twitter.com/PlanetApache provides an aggregate of Project activities as well as the personal blogs and tweets of select ASF Committers. # # # NOTE: you are receiving this message because you are subscribed to the announce@apache.org distribution list. To unsubscribe, send email from the recipient account to announce-unsubscr...@apache.org with the word "Unsubscribe" in
[ANN] Apache OpenJPA 2.4.2 released
The Apache OpenJPA team is pleased to announce the release of OpenJPA 2.4.2. Apache OpenJPA is a Java persistence project at The Apache Software Foundation that can be used as a stand-alone POJO persistence layer or integrated into any Java EE compliant container and many other lightweight frameworks, such as Tomcat and Spring. The 1.x releases are a production ready, feature-rich, compliant implementation of the Java Persistence API (JPA) 1.0 part of the JSR-220 Enterprise Java Beans 3.0 specification, which pass the Sun JPA 1.0b Technology Compatibility Kit. The 2.x releases are a production ready, compliant implement of the JSR-317 Java Persistence 2.0 specification, which is backwards compatible to the JPA 1.0 specification and passes the Sun JPA 2.0 Technology Compatibility Kit. The release will be available within 24h from: http://openjpa.apache.org/downloads.html The full change log is available here: http://openjpa.apache.org/openjpa-2.4.x.html We welcome your help and feedback. For more information on how to report problems, and to get involved, visit the project website at http://openjpa.apache.org/ The Apache OpenJPA Team
[ANNOUNCE] Apache Jackrabbit 2.14.0 released
The Apache Jackrabbit community is pleased to announce the release of Apache Jackrabbit 2.14.0 The release is available for download at: http://jackrabbit.apache.org/downloads.html See the full release notes below for details about this release: Release Notes -- Apache Jackrabbit -- Version 2.14.0 Introduction This is Apache Jackrabbit(TM) 2.14.0, a fully compliant implementation of the Content Repository for Java(TM) Technology API, version 2.0 (JCR 2.0) as specified in the Java Specification Request 283 (JSR 283). Apache Jackrabbit 2.14.0 is an incremental feature release based on and compatible with earlier stable Jackrabbit 2.x releases. Jackrabbit 2.14.x releases are considered stable and targeted for production use. Changes in Jackrabbit 2.14.0 The main changes in this release are: - Switch WebDAV client components to HttpClient 4.5.x (summary in JCR-2406) - Introduction of Commons-VFS Datastore implementation (JCR-3975) - Allow use of JDK7 features (JCR-4030) In detail: New Feature [JCR-3975] - Commons-VFS Datastore implementation [JCR-3983] - Possibility to parallelize the Garbage Collection Bug [JCR-2633] - Modified externally exception when modifying mixinTypes with single session [JCR-3632] - Test failed under Java 8 [JCR-3882] - GlobalPattern's equals() implementation throws NullPointerException [JCR-3893] - Multiple issues with standalone 2.10.1 [JCR-3937] - jackrabbit-jcr-commons bundle incorrectly has google dependency in Export-Package uses clause [JCR-3948] - LostFromCacheIssueTest failure [JCR-3949] - occasional test failure in RepositoryConfigTest.testAutomaticClusterNodeIdCreation() [JCR-3950] - XSS in DirListingExportHandler [JCR-3958] - Endless loop until async upload completes [JCR-3965] - RepositoryStatistics is reset per second for bundle cache size which should not be the case for the bundle cache stats [JCR-3987] - jackrabbit-jcr-commons JcrUtils.getOrCreateByPath fails if session is not allowed to read root [JCR-3992] - JcrUtils.getOrCreateByPath broken by JCR-3987 [JCR-3996] - Incorrect producer time in ListenerTracker [JCR-3999] - Possibility for a Deadlock in FineGrainedISMLocking in a XA Environment [JCR-4002] - CSRF in Jackrabbit-Webdav using empty content-type (CVE-2016-6801) [JCR-4005] - TestVFSDataStore.testDeleteRecord() fails occasionally [JCR-4006] - TestCachingFDS.testDeleteRecord() fails occasionally [JCR-4007] - CachingDataStore - touching every time on getRecord() was unnecessary [JCR-4008] - Restore TestCachingFDS.testDeleteRecord() to fix it with disabling AsyncUpload in unit tests [JCR-4009] - CSRF in Jackrabbit-Webdav (CVE-2016-6801) [JCR-4015] - jackrabbit-jcr-commons JcrUtils.getOrCreateByPath fails if session is not allowed to read root [JCR-4022] - populate.jsp (standalone) doesn't work due to google ajax api change [JCR-4027] - NPE in JcrRemotingServlet.canHandle() when content-type is missing [JCR-4031] - AbstractLocatorFactory: typo in log message [JCR-4033] - Session Leak in case of an exception inside the constructor of SessionImpl [JCR-4041] - spi2davex: bogus content type charset parameter for application/x-www-form-urlencoded [JCR-4042] - Adding Escape Character in GQL [JCR-4047] - Build fails: jackrabbit-jcr2spi: Signature errors found. [JCR-4052] - RFC4918DestinationHeaderTest fails with internal server error [JCR-4060] - unintended export versions due to changed defaults in maven bundle plugin [JCR-4068] - jcr-commons: get rid of test dependency to json.org JSON parser [JCR-4072] - Creation of marker file fails when parent folder does not exist in CachingDataStore [JCR-4079] - incorrect PROPPATCH response error handling [JCR-4085] - DavEx json should always add type information for Doubles Improvement [JCR-3938] - Require maven 3.x for build [JCR-4000] - More event stats in EventListenerMBean [JCR-4004] - Log exception in AbstractDataStore.getReferenceFromIdentifier() [JCR-4012] - Include initial cost in stats for observation processing [JCR-4013] - Calculate eventConsumerTimeRatio for entire time series [JCR-4018] - Consistent Async Upload Executor handling in Backend implementations [JCR-4032] - Add jmx EventListenerMBean.getToString() for clearer consolidated listener stats [JCR-4063] - Minor improvements in GetSupportedQueryLanguagesTest [JCR-4074] - jackrabbit-jcr2dav: add system property to disable davex support for testing Task [JCR-4025] - Enable animal sniffer plugin [JCR-4030] - Allow use of Java 7 in Jackrabbit trunk [JCR-4080] - Upgrade Apache Commons Collections to v3.2.2 [JCR-4081] - Upgrade Apache Commons IO to 2.5 [JCR-4084] - decide on frozen export version numbers [JCR-4090] - Fix Javadoc for JDK 1.8 doctool compliance [J
