Hi all, I am preparing the October report for the Board. Can you please send me any updates that I should include?
Here is what I currently have (nothing for Torque right now) The DB project received a report of a CWE-502 vulnerability in the retired DdlUtils source code. Although the DdlUtils subproject is retired and no longer actively developed, the DB project decided to address the vulnerability, which is now tracked as CVE-2021-41616, and removed the insecure source code from the source repository. The DB project also removed the DdlUtils-1.0 release from distribution via the Apache mirrors, and updated the DdlUtils web site to make it more clear that DdlUtils is retired and no longer actively developed. The JDO team have published the JDO 3.2 spec (or is it still in review?) The JDO team have been making changes suggested by the Apache Diversity Conscious Language Checker, including changing the name of the git branch from master to main, and investigating language changes in the source code and specification. The Derby team have validated Derby behavior with Java 17. This involved significant work to address changes due to JEP411. --------------------------------------------------------------------- To unsubscribe, e-mail: torque-dev-unsubscr...@db.apache.org For additional commands, e-mail: torque-dev-h...@db.apache.org
