announce

[ANNOUNCE] Apache Grails 7.0.10

Sun, 05 Apr 2026 02:19:42 GMT

2026/04/05 -- James Daugherty

[ANN] Apache Tomcat 11.0.21 Available

Sat, 04 Apr 2026 12:09:52 GMT

2026/04/04 -- Mark Thomas

[ANNOUNCE] Apache Grails 7.1.0-RC1

Sat, 04 Apr 2026 11:50:05 GMT

2026/04/04 -- James Daugherty

[ANNOUNCE] Apache log4cxx 1.7.0 released

Sat, 04 Apr 2026 11:48:59 GMT

2026/04/04 -- Stephen Webb

[ANNOUNCE] Apache SkyWalking 10.4.0 released

Fri, 03 Apr 2026 18:58:34 GMT

2026/04/03 -- Sheng Wu

[ANN] Apache Syncope 4.0.5

Fri, 03 Apr 2026 13:14:45 GMT

2026/04/03 -- Francesco Chicchiriccò

[ANN] Apache Syncope 4.1.0

Fri, 03 Apr 2026 13:14:42 GMT

2026/04/03 -- Francesco Chicchiriccò

[ANN] Apache Tomcat 9.0.117 available

Fri, 03 Apr 2026 10:09:28 GMT

2026/04/03 -- Rémy Maucherat

[ANN] Apache Tomcat 10.1.54 Available

Fri, 03 Apr 2026 07:30:53 GMT

2026/04/03 -- Christopher Schultz

[ANN] End Of Support for Tomcat Native 1.x

Fri, 03 Apr 2026 07:28:44 GMT

2026/04/03 -- Christopher Schultz

[ANNOUNCE] Apache Traffic Server 10.1.2 Release

Thu, 02 Apr 2026 15:35:12 GMT

2026/04/02 -- Chris McFarlen

[ANNOUNCE] Apache Pulsar Client C++ 4.1.0 released

Thu, 02 Apr 2026 10:59:07 GMT

2026/04/02 -- Yunze Xu

[ANNOUNCE] Apache Accumulo Access 1.0.0-beta2

Wed, 01 Apr 2026 23:38:34 GMT

2026/04/01 -- Christopher

[ANNOUNCE] Apache ActiveMQ 5.19.4 has been released!

Wed, 01 Apr 2026 18:43:48 GMT

2026/04/01 -- Jean-Baptiste Onofré

[ANN] Apache Ant 1.10.16 Released

Wed, 01 Apr 2026 16:59:32 GMT

2026/04/01 -- Stefan Bodewig

[ANNOUNCE] Apache Pulsar 4.2.0 released

Wed, 01 Apr 2026 10:58:37 GMT

2026/04/01 -- Lari Hotari

Apache Beam 2.72.0 Released!

Tue, 31 Mar 2026 10:55:37 GMT

2026/03/31 -- Vitalii Terentev

[ANNOUNCE] Apache ActiveMQ 6.2.3 has been released!

Tue, 31 Mar 2026 10:54:54 GMT

2026/03/31 -- Jean-Baptiste Onofré

CVE-2026-32794: Apache Airflow Provider for Databricks: TLS Certificate Verification Disabled in Databricks Provider K8s Token Exchange

Mon, 30 Mar 2026 21:40:13 GMT

2026/03/30 -- Jens Scheffler

[ANNOUNCE] Release Apache SkyWalking Client JS version 1.1.0

Mon, 30 Mar 2026 15:13:17 GMT

2026/03/30 -- xue fan

[ANNOUNCE] Apache Groovy 5.0.5 Released

Sun, 29 Mar 2026 18:24:52 GMT

2026/03/29 -- Paul King

[ANNOUNCE] Apache Groovy 4.0.31 Released

Sun, 29 Mar 2026 18:24:11 GMT

2026/03/29 -- Paul King

[ANNOUNCE] Apache Airflow Providers prepared on 2026-03-24 are released

Sat, 28 Mar 2026 14:28:56 GMT

2026/03/28 -- Jens Scheffler

[ANNOUNCE] Apache Log4j `2.25.4` released

Sat, 28 Mar 2026 14:26:00 GMT

2026/03/28 -- Piotr P. Karwasz

[ANNOUNCE] Apache Camel 4.18.1 (LTS) Released

Fri, 27 Mar 2026 17:42:57 GMT

2026/03/27 -- Gregor Zurowski

[ANNOUNCE] Apache Kyuubi v1.11.1 is available

Thu, 26 Mar 2026 16:25:05 GMT

2026/03/26 -- Cheng Pan

[ANNOUNCEMENT] HttpComponents Core 5.5-alpha1 released

Thu, 26 Mar 2026 12:53:43 GMT

2026/03/26 -- Oleg Kalnichevski

[ANNOUNCE] Apache SkyWalking MCP 0.1.0 Released

Thu, 26 Mar 2026 10:54:04 GMT

2026/03/26 -- xue fan

[ANNOUNCE] Apache TsFile 2.2.1 released

Wed, 25 Mar 2026 10:57:49 GMT

2026/03/25 -- Haonan Hou

[ANNOUNCE] Apache Storm 2.8.5 Released

Wed, 25 Mar 2026 10:06:52 GMT

2026/03/25 -- Rui Abreu

[ANNOUNCE] Apache ActiveMQ 6.2.2 has been released!

Tue, 24 Mar 2026 14:57:28 GMT

2026/03/24 -- Jean-Baptiste Onofré

[ANNOUNCE] Apache ActiveMQ 5.19.3 has been released!

Tue, 24 Mar 2026 14:09:46 GMT

2026/03/24 -- Jean-Baptiste Onofré

[ANNOUNCE] Apache Tika 3.3.0 released

Tue, 24 Mar 2026 11:50:36 GMT

2026/03/24 -- Tim Allison

[ANN] Apache Tomcat 10.1.53 Available

Mon, 23 Mar 2026 20:28:53 GMT

2026/03/23 -- Christopher Schultz

[ANNOUNCE] Apache Airflow Helm Chart version 1.20.0 Released

Sun, 22 Mar 2026 23:38:56 GMT

2026/03/22 -- Jens Scheffler

CVE-2026-32642: Apache Artemis, Apache ActiveMQ Artemis: Temporary address auto-created for OpenWire consumer without createAddress permission

Fri, 20 Mar 2026 18:44:51 GMT

2026/03/20 -- Justin Bertram

[ANNOUNCE] Apache Creadur RAT 0.18

Fri, 20 Mar 2026 15:18:20 GMT

2026/03/20 -- P. Ottlinger

[ANN] Apache Tomcat 9.0.116 available

Fri, 20 Mar 2026 15:05:00 GMT

2026/03/20 -- Rémy Maucherat

[ANN] Apache Maven Daemon 1.0.5 released

Fri, 20 Mar 2026 12:23:54 GMT

2026/03/20 -- Tamás Cservenák

[ANN] Apache Tomcat 11.0.20 Available

Fri, 20 Mar 2026 12:20:08 GMT

2026/03/20 -- Mark Thomas

[ANNOUNCE] Apache Airflow CTl 0.1.3 from 0.1.3rc2 released

Thu, 19 Mar 2026 11:07:48 GMT

2026/03/19 -- Bugra Ozturk

[ANNOUNCE] Apache Commons Net 3.13.0

Thu, 19 Mar 2026 11:05:22 GMT

2026/03/19 -- Gary Gregory

[ANNOUNCE] Apache Fory 0.16.0 released

Wed, 18 Mar 2026 11:07:27 GMT

2026/03/18 -- Shawn Yang

[ANNOUNCE] Apache Kafka 4.1.2

Tue, 17 Mar 2026 23:01:11 GMT

2026/03/17 -- Andrew Schofield

Fwd: [ANNOUNCE] Apache Arrow Java 19.0.0 released

Tue, 17 Mar 2026 12:04:51 GMT

2026/03/17 -- Jean-Baptiste Onofré

[ANNOUNCE] Apache Seatunnel 2.3.13 released

Tue, 17 Mar 2026 12:04:03 GMT

2026/03/17 -- lidongdai

[ANNOUNCE] Apache Grails 7.0.9

Tue, 17 Mar 2026 12:03:19 GMT

2026/03/17 -- James Daugherty

CVE-2026-28563: Apache Airflow: DAG authorization bypass

Tue, 17 Mar 2026 06:27:58 GMT

2026/03/17 -- Rahul Vats

CVE-2026-26929: Apache Airflow: Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks Metadata

Tue, 17 Mar 2026 06:25:32 GMT

2026/03/17 -- Rahul Vats

CVE-2026-28779: Apache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applications

Tue, 17 Mar 2026 06:24:18 GMT

2026/03/17 -- Rahul Vats

CVE-2026-30911: Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization

Tue, 17 Mar 2026 06:22:16 GMT

2026/03/17 -- Rahul Vats

[ANNOUNCE] Apache Pekko Connectors 1.3.0 released

Mon, 16 Mar 2026 17:03:41 GMT

2026/03/16 -- PJ Fanning

[ANN] Apache Maven Daemon 1.0.4 released

Mon, 16 Mar 2026 13:29:02 GMT

2026/03/16 -- Tamás Cservenák

[ANNOUNCE] Apache PDFBox 2.0.36 released

Sun, 15 Mar 2026 18:38:23 GMT

2026/03/15 -- Andreas Lehmkühler

[ANNOUNCE] Apache Airflow 2.11.2 Released

Sun, 15 Mar 2026 15:43:18 GMT

2026/03/15 -- Jarek Potiuk

[ANNOUNCE] Apache Airflow Providers prepared on 2026-03-09 are released

Sat, 14 Mar 2026 01:00:04 GMT

2026/03/14 -- Vincent Beck

CVE-2025-54920: Apache Spark: Spark History Server Code Execution Vulnerability

Fri, 13 Mar 2026 21:15:22 GMT

2026/03/13 -- Holden Karau

CVE-2025-60012: Apache Livy: Restrict file access

Thu, 12 Mar 2026 16:42:43 GMT

2026/03/12 -- György Gál

CVE-2025-66249: Apache Livy: Unauthorized directory access

Thu, 12 Mar 2026 16:42:05 GMT

2026/03/12 -- György Gál

[ANN] Apache Maven 3.9.14 released

Thu, 12 Mar 2026 12:33:01 GMT

2026/03/12 -- Tamás Cservenák

[ANNOUNCE] Apache Airflow 3.1.8 Released

Wed, 11 Mar 2026 23:30:27 GMT

2026/03/11 -- Rahul Vats

[ANNOUNCE] Apache Gluten 1.6.0 released

Tue, 10 Mar 2026 13:05:58 GMT

2026/03/10 -- Hongze Zhang

[ANNOUNCE] Apache Pekko Management 1.2.1 released

Tue, 10 Mar 2026 12:17:47 GMT

2026/03/10 -- PJ Fanning

[ANN] Apache Tomcat Native 2.0.14 released

Tue, 10 Mar 2026 10:47:09 GMT

2026/03/10 -- Mark Thomas

[ANN] Apache Tomcat Native 1.3.7 released

Tue, 10 Mar 2026 10:43:44 GMT

2026/03/10 -- Mark Thomas

CVE-2026-23907: Apache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example Code

Tue, 10 Mar 2026 09:20:58 GMT

2026/03/10 -- Tilman Hausherr

[ANNOUNCE] Apache PDFBox 3.0.7 released

Mon, 09 Mar 2026 21:55:10 GMT

2026/03/09 -- Andreas Lehmkühler

[ANN] Apache Sling 14 Released

Mon, 09 Mar 2026 16:17:58 GMT

2026/03/09 -- Stefan Seifert

CVE-2026-25604: Apache Airflow AWS Auth Manager - Host Header Injection Leading to SAML Authentication Bypass

Mon, 09 Mar 2026 10:37:46 GMT

2026/03/09 -- Jarek Potiuk

CVE-2026-24015: Apache IoTDB: Insecure Default Configuration Vulnerability

Mon, 09 Mar 2026 04:09:29 GMT

2026/03/09 -- Haonan Hou

CVE-2026-24713: Apache IoTDB: JEXL Expression Injection Vulnerability

Mon, 09 Mar 2026 03:55:44 GMT

2026/03/09 -- Haonan Hou

CVE-2025-64152: Apache IoTDB: Path Traversal Vulnerability

Mon, 09 Mar 2026 02:57:49 GMT

2026/03/09 -- Haonan Hou

CVE-2025-55017: Apache IoTDB: Path Traversal Vulnerability

Mon, 09 Mar 2026 02:47:47 GMT

2026/03/09 -- Haonan Hou

CVE-2025-69219: Apache Airflow Providers Http: Unsafe Pickle Deserialization in apache-airflow-providers-http leading to RCE via HttpOperator

Sun, 08 Mar 2026 19:09:55 GMT

2026/03/08 -- Jarek Potiuk

[ANNOUNCE] Apache Grails 7.0.8

Sun, 08 Mar 2026 18:48:36 GMT

2026/03/08 -- James Fredley

[ANNOUNCE] Apache Commons Logging 1.3.6

Sun, 08 Mar 2026 16:58:51 GMT

2026/03/08 -- Gary Gregory

[ANNOUNCE] Apache Storm 2.8.4 Released

Sat, 07 Mar 2026 17:39:32 GMT

2026/03/07 -- Rui Abreu

[ANNOUNCE] Release Apache DolphinScheduler 3.4.1

Sat, 07 Mar 2026 13:08:36 GMT

2026/03/07 -- wenjun

CVE-2026-24308: Apache ZooKeeper: Sensitive information disclosure in client configuration handling

Sat, 07 Mar 2026 00:09:15 GMT

2026/03/07 -- Andor Molnar

CVE-2026-24281: Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager

Sat, 07 Mar 2026 00:07:33 GMT

2026/03/07 -- Andor Molnar

[ANNOUNCEMENT] HttpComponents Core 5.4.2 GA released

Fri, 06 Mar 2026 13:13:17 GMT

2026/03/06 -- Oleg Kalnichevski

[ANN] Apache Maven 3.9.13 released

Fri, 06 Mar 2026 13:12:47 GMT

2026/03/06 -- Tamás Cservenák

[ANNOUNCE] Apache Pulsar C# Client DotPulsar 5.2.2 released

Fri, 06 Mar 2026 13:12:36 GMT

2026/03/06 -- David Jensen

[ANNOUNCE] Apache Iceberg Go Release v0.5.0

Thu, 05 Mar 2026 23:04:12 GMT

2026/03/05 -- Matt Topol

[ANNOUNCE] Apache Accumulo ClassLoader Extras 1.0.0

Thu, 05 Mar 2026 23:03:31 GMT

2026/03/05 -- Christopher

[ANNOUNCE] Apache IoTDB 1.3.7 released

Thu, 05 Mar 2026 11:08:55 GMT

2026/03/05 -- Haonan Hou

[ANNOUNCE] Apache IoTDB 2.0.7 released

Thu, 05 Mar 2026 11:08:06 GMT

2026/03/05 -- Haonan Hou

[ANNOUNCE] Apache Airflow Providers prepared on 2026-03-03 are released

Wed, 04 Mar 2026 20:24:24 GMT

2026/03/04 -- Jarek Potiuk

[ANNOUNCE] Apache Solr 10.0.0 released

Wed, 04 Mar 2026 18:35:26 GMT

2026/03/04 -- Anshum Gupta

[ANNOUNCE] Apache Jackrabbit Oak 1.92.0

Tue, 03 Mar 2026 18:52:45 GMT

2026/03/03 -- Julian Reschke

CVE-2025-66168: Apache ActiveMQ, Apache ActiveMQ All Module, Apache ActiveMQ MQTT Module: MQTT control packet remaining length field is not properly validated

Tue, 03 Mar 2026 17:27:24 GMT

2026/03/03 -- Christopher L. Shannon

CVE-2026-27446: Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation

Tue, 03 Mar 2026 17:21:45 GMT

2026/03/03 -- Justin Bertram

Apache Airflow Providers prepared on 2026-02-26 are released

Tue, 03 Mar 2026 12:43:59 GMT

2026/03/03 -- Jarek Potiuk

CVE-2025-59059: Apache Ranger: Remote Code Execution Vulnerability in NashornScriptEngineCreator

Mon, 02 Mar 2026 20:21:36 GMT

2026/03/02 -- Velmurugan Periasamy

CVE-2025-59060: Apache Ranger: Hostname verification bypass in NiFiRegistryClient and NifiClient

Mon, 02 Mar 2026 20:20:13 GMT

2026/03/02 -- Velmurugan Periasamy

[ANNOUNCE] Apache Artemis 2.52.0 Released

Mon, 02 Mar 2026 19:18:00 GMT

2026/03/02 -- Justin Bertram

[ANNOUNCE] Apache Fluss 0.9.0-incubating released

Mon, 02 Mar 2026 14:43:09 GMT

2026/03/02 -- yuxia luo

[ANNOUNCE] Apache Ranger 2.8.0 released

Mon, 02 Mar 2026 12:57:55 GMT

2026/03/02 -- Madhan Neethiraj

[ANNOUNCE] Apache ShardingSphere 5.5.3 available

Sun, 01 Mar 2026 14:08:53 GMT

2026/03/01 -- Longtao Jiang

[ANNOUNCE] Release Apache Kvrocks 2.15.0

Sat, 28 Feb 2026 15:15:17 GMT

2026/02/28 -- hulk