The Apache Software Foundation Announces Apache® MyFaces™ Tobago 3

Posted by: Admin  :  Category: Apache

Linux Cpanel shared hosting: 600 GB disk space, 6 TB bandwidth, free domain, unlimited databases and ftp accounts, web hosting cheap and pro at Hostony

Standards-based Open Source components library allows developers to quickly and easily create business Web applications without worrying about technical details 

Forest Hill, MD —14 February 2017— The Apache Software Foundation (ASF), the all-volunteer developers, stewards, and incubators of more than 350 Open Source projects and initiatives, announced today the availability of Apache® MyFaces™ Tobago 3, the user interface components for creating business applications without the need for coding HTML, CSS, or JavaScript.
A sub-project of Apache MyFaces (the Open Source implementation of JavaServer Faces Web application framework that accomplishes the Model-View-Controller paradigm), Tobago is a component library for JavaServer Faces (JSF). The project was originally created at Atanion GmbH in 2002, and was donated to the Apache Incubator in 2005. Tobago graduated as Apache MyFaces sub-project in 2006.
"With a commitment to reduce the time and effort spent on development and deployment, the unofficial Tobago tagline is 'less magic, more standards'," said Udo Schnurpfeil, member of the Apache MyFaces Project Management Committee. "We are are happy that Tobago 3 helps users get their applications up and running even more quickly and easily."
By omitting the need to code HTML, CSS, or JavaScript, Tobago allows users to easily create business Web applications, and emulates the development process of conventional user interfaces (rather than the creation of Web pages) via:
  1. UI components abstracted from HTML, along with any layout information that does not belong to the general page structure. The final output format is determined by the client/user-agent;
  2. A theming mechanism that makes it easy to change the look-and-feel and provides special implementations for certain browsers; and
  3. A layout manager used to arrange the components automatically. This means that no manual laying out using HTML tables or other constructs is needed.
Under The Hood
Apache MyFaces Tobago 3's increased responsiveness and standardization makes it easier to integrate libraries and other projects. Features include:
  • Layout-management moved to CSS and JavaScript to natively achieve layout requirements and make rendering more efficient and responsive;
  • Themes using CSS library Bootstrap 4 make it easy to obtain a modern and rich design; and
  • Use of current technologies such as SCSS, CSS3, HTML5, AJAX, JSF and, Theming on pure CSS base further simplifies the development experience.
Apache Tobago dramatically reduces developer resources and programming time, providing individuals and organizations with improved productivity and ease of implementation.
"For over 10 years we have been working closely with the Tobago team. The close collaboration has been mutually beneficial. Currently we are working on more than 60 intranet applications based on Apache Tobago. We see the new features from Tobago 3 as a significant architectural leap – in particular the innovations with ajax, theming, and responsive design. We expect a fast project adoption – even with the associated migration costs," said Rainer Rohloff, Senior Software Architect at Norddeutsche Landesbank. "We look forward to working on additional projects with the Tobago team in the future."
"It's great to see many users adopt Tobago," added Schnurpfeil. "We welcome new developers and users to join us on our mailing lists, MeetUps, and community events."
Availability and Oversight
Apache MyFaces software is released under the Apache License v2.0 and is overseen by a self-selected team of active contributors to the project. A Project Management Committee (PMC) guides the Project's day-to-day operations, including community development and product releases. For downloads, release notes, documentation, and more information on Apache MyFaces, visit http://myfaces.apache.org/ and https://twitter.com/MyFacesTeam
About The Apache Software Foundation (ASF)
Established in 1999, the all-volunteer Foundation oversees more than 350 leading Open Source projects, including Apache HTTP Server –the world's most popular Web server software. Through the ASF's meritocratic process known as "The Apache Way," more than 620 individual Members and 5,900 Committers successfully collaborate to develop freely available enterprise-grade software, benefiting millions of users worldwide: thousands of software solutions are distributed under the Apache License; and the community actively participates in ASF mailing lists, mentoring initiatives, and ApacheCon, the Foundation's official user conference, trainings, and expo. The ASF is a US 501(c)(3) charitable organization, funded by individual donations and corporate sponsors including Alibaba Cloud Computing, ARM, Bloomberg, Budget Direct, Capital One, Cerner, Cloudera, Comcast, Confluent, Facebook, Google, Hortonworks, HP, Huawei, IBM, InMotion Hosting, iSigma, LeaseWeb, Microsoft, OPDi, PhoenixNAP, Pivotal, Private Internet Access, Produban, Red Hat, Serenata Flowers, WANdisco, and Yahoo. For more information, visit http://www.apache.org/ and https://twitter.com/TheASF
© The Apache Software Foundation. "Apache", "MyFaces", "Apache MyFaces", "Tobago", "Apache MyFaces Tobago", and "ApacheCon" are registered trademarks or trademarks of the Apache Software Foundation in the United States and/or other countries. All other brands and trademarks are the property of their respective owners.
# # #

Apache Software Foundation Blogs

Linux Cpanel shared hosting: 600 GB disk space, 6 TB bandwidth, free domain, unlimited databases and ftp accounts, web hosting cheap and pro at Hostony

Apache Subversion to WANdisco: +1 on the code contributions, -1 on the attitude.

Posted by: Admin  :  Category: Apache

In light of some recent press releases and blog posts from WANdisco ([1][2][3]), the Apache Subversion project would like to clarify that WANdisco, Inc participates in Subversion development under the same terms as any other organization.

Those wishing to verify this may prefer to use the project’s public mailing lists and change logs as primary sources, rather than WANdisco’s press releases.

Below are some of our specific concerns. We look forward to WANdisco’s continued participation in improving Subversion, and emphasize that WANdisco’s corporate statements do not reflect on our valued developers who happen to be employed there.

  • WANdisco CEO David Richards claims without evidence that bogus changes are being committed to the master tree. He wrote: "We … believe it’s unhelpful when certain unscrupulous committers decide to commit trivial changes in large files to simply get their stats up. That behavior has no place in any open source project; it’s a bad form [sic] and wastes everyone’s valuable time."

    We are unaware of any such behavior among the Subversion maintainers. Our repository logs are always open for public inspection, yet when asked to show evidence, Richards refused.

  • The first part of [1] would indicate to most readers that WANdisco was involved in the creation of Subversion; only if the reader were to persist for another six paragraphs would they finally encounter a disclaimer to the contrary. [3] has similar problems.

    WANdisco was not involved in the creation of Subversion. The Subversion open source project was started in 2000 by CollabNet, Inc. WANdisco’s involvement started in 2008, when it began employing Subversion committers, all of whom had prior history with the project. Subversion became part of the Apache Software Foundation in 2009. (CollabNet continues to participate in Subversion development to this day, on the same terms as all the other individuals and companies who undertake or fund development work.)

  • The Subversion development team is already working towards the enhancements that WANdisco inexplicably portrays ([2], [3]) as bold, controversial steps that must be pushed through in the face of (conveniently unnamed) opposition. WANdisco participates in Subversion development along with many parties, and the Subversion project has always welcomed WANdisco’s contributions. However, WANdisco alleges that some entities want to impede technical enhancements; at the same time, WANdisco also implies that it is the corporate leader of the project.

    Neither is true. Since WANdisco does not cite any sources for their specific claims, we cannot explain them. However, a bedrock condition of participation in Apache Subversion is that an individual contributor can have discussions, submit patches, review patches, and so forth, but that companies do not have a formal role. Instead, companies get involved by funding individuals to work on the project. WANdisco’s false implication that it is in some kind of steering position in Subversion development discredits the efforts of other contributors and companies.

In conclusion, we reiterate that we welcome WANdisco’s involvement in Subversion, and failure on WANdisco’s part to address the above concerns will have no effect on the acceptance of technical work funded by WANdisco. We simply felt it necessary to clarify WANdisco’s role in Apache Subversion, for the benefit of our users and potential contributors.

# # # 

The Apache Software Foundation Blog

The Apache Software Foundation Announces Apache OODT as a Top-Level Project

Posted by: Admin  :  Category: Apache
Open Source middleware for managing, unifying, and archiving data used in critical scientific applications, including NASA Jet Propulsion Laboratory, National Cancer Institute, and Children’s Hospital Los Angeles Virtual Pediatric Intensive Care Unit
The Apache Software Foundation (ASF), the all-volunteer developers, stewards, and incubators of nearly 150 Open Source projects and initiatives, today announced that Apache OODT (Object-Oriented Data Technology) has graduated from the Apache Incubator to become a Top-Level Project (TLP), signifying that the Project’s community and products have been well-governed under the ASF’s meritocratic, consensus-driven process and principles.
Apache OODT is "middleware for metadata" (and vice versa), used for computer processing workflow, hardware and file management, information integration, and linking databases. The OODT architecture allows distributed computing and data resources to be searchable and utilized by any end user.
Originally developed in 1998 by Daniel Crichton at NASA’s Jet Propulsion Laboratory to build a national framework for data sharing, OODT was quickly applied to other areas in physical science, medical research, and ground data systems. Early implementations include the National Cancer Institute’s Early Detection Research Network, as well as several programs at NASA, including the NASA Planetary Data System, SeaWINDS QuikSCAT project, the OCO/Atmospheric Carbon Observations from Space project, the joint NASA/DOD/NOAA NPOESS Preparatory Project, and the Soil Moisture Active Passive mission testbed. In addition, Apache OODT is also used in a number of research and technology tasks spanning astrophysics, radio astronomy, and climate change research. Apache OODT is also currently supporting research and data analysis within the pediatric intensive care domain in collaboration with Children’s Hospital Los Angeles (CHLA) and its Laura P. and Leland K. Whittier Virtual Pediatric Intensive Care Unit (VPICU).
"OODT had been successfully operating within the JPL for years; the time had come to realize the benefits of open source in the broader, external community," said Chris Mattmann, Vice President of Apache OODT. "Bringing new developer talents is integral in enhancing the quality of the OODT code, and making OODT available as an Apache project was an ideal way to introduce new features and capabilities."
OODT is the first NASA-developed software package to become an ASF TLP (OODT was submitted to the Apache Incubator in January 2010). Projects incubating at the ASF benefit from hands-on mentoring from other Apache contributors, as well as the Foundation’s widely-emulated process, stewardship, outreach, support, and community events.
"The Apache Software Foundation has a long history of software innovation through collaboration — the larger the pool of potential contributors, the more innovation we see," said Mattmann. "The Apache model and the Incubation process provided great guidance. We received solid mentoring, infrastructure, and development support from the Apache Software Foundation."
Oversight and Availability
All Apache products are released under the Apache Software Licence v2.0, and are overseen by a self-selected team of active contributors to the project. Upon a Project’s maturity to a TLP, a Project Mangement Committee (PMC) is formed to guide its day-to-day operations, including community development and product releases.
"We are working on improvements to our initial, v0.1 Apache release," added Mattmann. "Our dozen-strong team of contributors are developing new components to more reliably and accurately extract metadata from science datasets."
Apache OODT downloads, documentation, and related resources are available at http://oodt.apache.org/.
About the Apache Incubator and Incubation Process
The Apache Incubator is the entry path for projects and codebases wishing to become part of the efforts at The Apache Software Foundation. All code donations from external organisations and existing external projects wishing to join the ASF enter through the Incubator to: 1) ensure all donations are in accordance with the ASF legal standards; and 2) develop new communities that adhere to our guiding principles. Incubation is required of all newly accepted projects until a further review indicates that the infrastructure, communications, and decision making process have stabilized in a manner consistent with other successful ASF projects. While incubation status is not necessarily a reflection of the completeness or stability of the code, it does indicate that the project has yet to be fully endorsed by the ASF. For more information, visit http://incubator.apache.org/.
About The Apache Software Foundation (ASF)
Established in 1999, the all-volunteer Foundation oversees nearly one hundred fifty leading Open Source projects, including Apache HTTP Server — the world’s most popular Web server software. Through the ASF’s meritocratic process known as "The Apache Way," more than 300 individual Members and 2,500 Committers successfully collaborate to develop freely available enterprise-grade software, benefiting millions of users worldwide: thousands of software solutions are distributed under the Apache License; and the community actively participates in ASF mailing lists, mentoring initiatives, and ApacheCon, the Foundation’s official user conference, trainings, and expo. The ASF is funded by individual donations and corporate sponsors including AMD, Basis Technology, Cloudera, Facebook, Google, IBM, HP, Matt Mullenweg, Microsoft, SpringSource, and Yahoo!. For more information, visit http://www.apache.org/.

# # #

MEDIA CONTACT:
Sally Khudairi
The Apache Software Foundation
press@apache.org
+1 617 921 8656 

The Apache Software Foundation Blog

The Apache Software Foundation Announces Apache Chemistry as a Top-Level Project

Posted by: Admin  :  Category: Apache

Open Source implementation of the CMIS standard widely used in Enterprise Content Management solutions, such as Adobe, Alfresco, Nuxeo, OpenText, SAP, and more.

Forest Hill, MD – 23 February 2011 – The Apache Software Foundation (ASF), the all-volunteer developers, stewards, and incubators of nearly 150 Open Source projects and initiatives, today announced that Apache Chemistry has graduated from the Apache Incubator as a Top-Level Project (TLP). This signifies that the Apache Chemistry community and products have been well-governed under the ASF’s meritocratic, consensus-driven process and principles.

Apache Chemistry is an Open Source implementation of the OASIS CMIS (Content Management Interoperability Services) standard. The project provides an interoperable API to CMIS repositories such as Alfresco, EMC Documentum, IBM FileNet, Microsoft SharePoint, Nuxeo, OpenText Enterprise Library Services, and other CMIS-compliant content repositories. It also provides libraries to build CMIS-compliant repository connectors.

“Apache Chemistry is successfully driving adoption of the CMIS standard,” said Apache Chemistry Vice President Florian Müller. “An Apache Open Source implementation of CMIS is ideal for growing a developer community around the standard, which will improve interoperability, create new tools, and foster innovation.”

Originally submitted to the Apache Incubator in May 2009 as a single, Java-focused project, Apache Chemistry today comprises the following sub-projects:

  1. OpenCMIS – CMIS client and server libraries for Java, as well as test tools for content repository developers and client application developers. Version 0.2 was released in January 2011;
  2. cmislib – CMIS client library for Python. Version 0.4 was released in February 2011;
  3. phpclient – CMIS client library for PHP. Already used in production, the sub-project’s first release will be made in the near future;
  4. DotCMIS – CMIS client library for .NET.  Contributed to the Apache Chemistry project in January 2011; work is underway on its initial release.

Apache Chemistry is widely used in enterprise content management solutions and for CMIS implementation verification. Its flagship sub-project, OpenCMIS, is deployed in both Open Source and commercial products and solutions by Adobe, Alfresco, Metaversant, Nuxeo, OpenText, OpenWGA, and SAP, among others.

“Nuxeo is very happy to see Apache Chemistry finalize its incubation phase and move forward to become a top-level Apache project”, said Florent Guillaume, Director of R&D at Nuxeo. “We have supported Chemistry from the start, and we are so confident in the technology that we have included it as a core connector for the Nuxeo Enterprise Platform. Through Chemistry, many software platforms, such as Java, Python, PHP, and .NET, will be able to adopt the CMIS specification, which benefits both servers storing content documents or other assets, and the applications interacting with them.”

“CMIS is here, it works and it works well,” said Nathan McMinn, Software Engineer at Ansell. “Having a standard interface to our content repositories makes integrating Ansell’s various CMS systems with our applications much simpler. While the server support for the standard is of course essential, it is of limited value without stable client libraries. Sure, we could write our own client interface to CMIS, but with a project like Apache Chemistry there is no need. Chemistry gives us the tools we need to connect most of our major platforms (based on PHP, Python and Java) to our existing content stores, saving us time, money and headaches in the process.”

Supporting Standards Drives Industry Adoption

Many Apache Chemistry code committers are also members of the OASIS CMIS Technical Committee. The project is community-driven, allowing for greater transparency and direct feedback during the definition and improvement process of future CMIS specifications. Two OpenCMIS sandbox projects are currently being used to implement and test new CMIS 1.1 features.

“As a supporter for open source and open standards, Alfresco is pleased to have contributed resources to the Apache Chemistry project and to see it pass through the incubation phase,” said John Newton, CTO and Chairman at Alfresco. “Alfresco was instrumental in driving the CMIS standard from its inception. The Apache Chemistry project will drive wider adoption of CMIS and allow developers to build new social content management applications leveraging the Alfresco open source platform.”

“The big benefit of CMIS for customers is that it lets them do more with content no matter where it’s located across the enterprise,” said Richard Anstey, Vice President of Product Management at OpenText. “With the graduation of Apache Chemistry to the top level, a number of barriers to broader CMIS adoption are being removed. This will help ensure that customers derive maximum benefit from their investment in the OpenText ECM Suite 2010, which offers CMIS support for server-to-server and server-to-client interoperability.”

“SAP envisions the usage of OpenCMIS as a base technology in the SAP NetWeaver® platform,” said Björn Goerke, senior vice president, Technology and Innovation Platform Core, SAP. “The OASIS specification, which has been developed through co-innovation efforts, is driving forward standardization, through which our customers will be able to gain more from their existing content management systems with SAP® applications.”

“Apache Jackrabbit welcomes Apache Chemistry as a sibling top-level project,” said Apache Jackrabbit Vice President Jukka Zitting. “We helped mentor the Chemistry community early on, and we are excited to see them reach this milestone. The success of Chemistry and CMIS is another testament to the combined strength of open source and open standards.”

Availability and Oversight

All Apache products are released under the Apache Software License v2.0, and are overseen by a self-selected team of active contributors to the project. Upon a Project’s maturity to a TLP, a Project Management Committee (PMC) is formed to guide its day-to-day operations, including community development and product releases. Apache Chemistry source code, documentation, and related resources are available at http://chemistry.apache.org/.

About The Apache Software Foundation (ASF)

Established in 1999, the all-volunteer Foundation oversees nearly one hundred fifty leading Open Source projects, including Apache HTTP Server — the world’s most popular Web server software. Through the ASF’s meritocratic process known as “The Apache Way,” more than 300 individual Members and 2,500 Committers successfully collaborate to develop freely available enterprise-grade software, benefiting millions of users worldwide: thousands of software solutions are distributed under the Apache License; and the community actively participates in ASF mailing lists, mentoring initiatives, and ApacheCon, the Foundation’s official user conference, trainings, and expo. The ASF is a US 501(3)(c) not-for-profit charity, funded by individual donations and corporate sponsors including AMD, Basis Technology, Cloudera, Facebook, Google, IBM, HP, Matt Mullenweg, Microsoft, SpringSource, and Yahoo!. For more information, visit http://www.apache.org/.

“Apache” and “Apache Chemistry” are trademarks of The Apache Software Foundation. All other brands and trademarks are the property of their respective owners.

# # #


The Apache Software Foundation Blog

The Apache Software Foundation Announces Apache Cassandra 0.7

Posted by: Admin  :  Category: Apache
Highly-scalable Open Source Distributed Database for Handling Large Amounts of Data is a Key Component in Cloud Computing
Forest Hill, MD – 11 January 2011 – The Apache Software Foundation (ASF), the all-volunteer developers, stewards, and incubators of nearly 150 Open Source projects and initiatives, today announced Apache Cassandra v0.7, the highly-scalable, second generation Open Source distributed database.
"Apache Cassandra is a key component in cloud computing and other applications that deal with massive amounts of data and high query volumes," said Jonathan Ellis, Vice President of Apache Cassandra. "It is particularly successful in powering large web sites with sharp growth rates."
Apache Cassandra is successfully deployed at organizations with active data sets and large server clusters, including Cisco, Cloudkick, Digg, Facebook, Rackspace, and Twitter. The largest Cassandra cluster to date contains over 400 machines.
"Running any large website is a constant race between scaling your user base and scaling your infrastructure to support it," said David King, Lead Developer at Reddit. "Our traffic more than tripled this year, and the transparent scalability afforded to us by Apache Cassandra is in large part what allowed us to do it on our limited resources. Cassandra v0.7 represents the real-life operations lessons learned from installations like ours and provides further features like column expiration that allow us to scale even more of our infrastructure."
Among the new features in Apache Cassandra v0.7 are:
– Secondary Indexes, an expressive, efficient way to query data through node-local storage on the client side;
– Large Row Support, up to two billion columns per row;
– Online Schema Changes – automated online schema changes from the client API allow adding and modifying object definitions without requiring a cluster restart.
Oversight and Availability
Apache Cassandra is available under the Apache Software License v2.0, and is overseen by a Project Management Committee (PMC), who guide its day-to-day operations, including community development and product releases.
Apache Cassandra v0.7 downloads, documentation, and related resources are available at http://cassandra.apache.org/.
About The Apache Software Foundation (ASF)
Established in 1999, the all-volunteer Foundation oversees nearly one hundred fifty leading Open Source projects, including Apache HTTP Server — the world’s most popular Web server software. Through the ASF’s meritocratic process known as "The Apache Way," more than 300 individual Members and 2,500 Committers successfully collaborate to develop freely available enterprise-grade software, benefiting millions of users worldwide: thousands of software solutions are distributed under the Apache License; and the community actively participates in ASF mailing lists, mentoring initiatives, and ApacheCon, the Foundation’s official user conference, trainings, and expo. The ASF is funded by individual donations and corporate sponsors including AMD, Basis Technology, Cloudera, Facebook, Google, IBM, HP, Matt Mullenweg, Microsoft, SpringSource, and Yahoo!. For more information, visit http://www.apache.org/.
# # #

The Apache Software Foundation Blog

The Apache Software Foundation Announces Apache Pivot 2.0

Posted by: Admin  :  Category: Apache
Open Source Platform for Building Installable Internet Applications Makes Building GUI Applications Even Easier
Forest Hill, MD – 19 January 2011 – The Apache Software Foundation (ASF), the all-volunteer developers, stewards, and incubators of nearly 150 Open Source projects and initiatives, today announced Apache Pivot 2.0, the full-featured, Open Source platform for building installable Internet applications (IIAs). Apache Pivot provides a professional-grade foundation for easily building and deploying sophisticated and engaging GUI applications that can be downloaded and installed like traditional desktop or mobile applications.
Apache Pivot combines the enhanced productivity and usability features of a modern user interface toolkit with the power of Java or any other JVM-compatible language, such as JavaScript, Groovy, or Scala.
"With Pivot, developers use the languages, tools, and APIs they already know, thereby reducing technology sprawl and streamlining solution technology stacks," said Greg Brown, Vice President of Apache Pivot. "It’s a truly open solution for creating visually rich, highly functional desktop or Web-based applications."
Apache Pivot is used in hundreds of applications across numerous industries, including retail, software, financial services, manufacturing, aerospace, and education, among others. Many of these applications have been developed for international use as well, as one of the key benefits of using Apache Pivot is ease of localization.
Apache Pivot 2.0 features a number of significant enhancements that include:
– Dynamic data binding – properties of target elements are automatically updated whenever a source value changes;
– Support for named styles – CSS-like style classes are supported, including both typed and untyped style selectors;
– Support for SVG images in addition to standard bitmap-based images (such as JPEG, PNG, or GIF)
– Overhauled TextArea component – includes word navigation. undo/redo, and improved cut/paste behavior;
– Additional color schemes optimized for a variety of popular desktop environments;
– Serializer events – applications can now be notified as structured content such as JSON, XML, or CSV is read from an input stream;
– Eclipse launcher – an Eclipse plugin helps simplify creating launch configurations for Pivot applications.
Oversight and Availability
Apache Pivot is available under the Apache Software License v2.0, and is overseen by a Project Management Committee (PMC), who guide its day-to-day operations, including community development and product releases.
Apache Pivot 2.0 downloads, documentation, and related resources are available at http://pivot.apache.org/.
About The Apache Software Foundation (ASF)
Established in 1999, the all-volunteer Foundation oversees nearly one hundred fifty leading Open Source projects, including Apache HTTP Server — the world’s most popular Web server software. Through the ASF’s meritocratic process known as "The Apache Way," more than 300 individual Members and 2,500 Committers successfully collaborate to develop freely available enterprise-grade software, benefiting millions of users worldwide: thousands of software solutions are distributed under the Apache License; and the community actively participates in ASF mailing lists, mentoring initiatives, and ApacheCon, the Foundation’s official user conference, trainings, and expo. The ASF is funded by individual donations and corporate sponsors including AMD, Basis Technology, Cloudera, Facebook, Google, IBM, HP, Matt Mullenweg, Microsoft, SpringSource, and Yahoo!. For more information, visit http://www.apache.org/.
# # #

The Apache Software Foundation Blog

07 April 2009 – CVE-2008-5519: Apache Tomcat mod_jk information disclosure vulnerability

Posted by: Admin  :  Category: Apache

CVE-2008-5519: Apache Tomcat mod_jk information disclosure vulnerability

Severity: important

Vendor: The Apache Software Foundation

Versions Affected:
mod_jk 1.2.0 to 1.2.26

Description:
Situations where faulty clients set Content-Length without providing
data, or where a user submits repeated requests very quickly may permit
one user to view the response associated with a different user’s request.

Mitigation:
Upgrade to mod_jk 1.2.27 or later

Example:
See description

Credit:
This issue was discovered by the Red Hat Security Response Team

References:
http://tomcat.apache.org/security.html
http://tomcat.apache.org/security-jk.html

The Apache Tomcat Security Team

[ Category : Apache Tomcat ] PDFXML_RSS

Apache News Online

Apache Innovation Bolsters IBM’s “Smartest Machine on Earth” in First-ever Man vs. Machine Competition on Jeopardy! Quiz Show

Posted by: Admin  :  Category: Apache
Apache UIMA and Apache Hadoop Advance Data Intelligence and Semantics Capabilities of Watson Supercomputer
Forest Hill, MD – 14 February 2011 – The Apache Software Foundation (ASF), the all-volunteer developers, stewards, and incubators of nearly 150 Open Source projects and initiatives, today announced that Apache UIMA and Apache Hadoop play key roles in the data intelligence and analytic proficiency of the IBM Watson supercomputer, playing against human champions on the TV show "Jeopardy!".
Processing 80 trillion operations (teraflops) per second, Watson will access 200 million pages of content against 6 million logic rules to "understand" the nuances, meanings, and patterns in spoken human language, and compete in the trivia game show Jeopardy!. Contestants are presented with clues in the form of answers, and must phrase their responses as questions within a 5-second timeframe. 
Hundreds of Apache UIMA Annotators and thousands of algorithms help Watson –which runs disconnected from the Internet– access vast databases to simultaneously comprehend clues and formulate answers. Watson then analyzes 500 gigabytes of preprocessed information to match potential meanings for the question and a potential answer to the question. Helping Watson do this is:
  • Apache UIMA: standards-based frameworks, infrastructure and components that facilitate the analysis and annotation of an array of unstructured content (such as text, audio and video). Watson uses Apache UIMA for real-time content analytics and natural language processing, to comprehend clues, find possible answers, gather supporting evidence, score each answer, compute its confidence in each answer, and improve contextual understanding (machine learning) – all under 3 seconds.
  • Apache Hadoop: software framework that enables data-intensive distributed applications to work with thousands of nodes and petabytes of data. A foundation of Cloud computing, Apache Hadoop enables Watson to access, sort, and process data in a massively parallel system (90+ server cluster/2,880 processor cores/16 terabytes of RAM/4 terabytes of disk storage).
The Watson system uses UIMA as its principal infrastructure for component interoperability and makes extensive use of the UIMA-AS scale-out capabilities that can exploit modern, highly parallel hardware architectures. UIMA manages all work flow and communication between processes, which are spread across the cluster. Apache Hadoop manages the task of preprocessing Watson’s enormous information sources by deploying UIMA pipelines as Hadoop mappers, running UIMA analytics.
"The success and influence of Watson clearly shows that open source in general, and specifically open source software developed and released by the ASF, is deeply entwined in all layers and aspects of technology," said ASF President Jim Jagielski. "Apache software is part of computing and information technology DNA, forming complete or integral solutions to advanced problems, and leveraging the software under the non-restrictive Apache License allows for extremely rapid development of cutting edge technology."
Watson faces off against record-breaking (human) Jeopardy champions Ken Jennings and Brad Rutter for the $ 1M grand prize 14-16 February 2011. 100% of Watson’s winnings will be donated to charity; Rutter and Jennings have committed to donating 50% of their prizes.
Availability
All ASF products, including Apache UIMA and Apache Hadoop, are available to the public free of charge under the Apache Software Licence v2.0. Downloads, documentation, and related resources are available at http://www.apache.org/.
About The Apache Software Foundation (ASF)
Established in 1999, the all-volunteer Foundation oversees nearly one hundred fifty leading Open Source projects, including Apache HTTP Server — the world’s most popular Web server software. Through the ASF’s meritocratic process known as "The Apache Way," more than 300 individual Members and 2,500 Committers successfully collaborate to develop freely available enterprise-grade software, benefiting millions of users worldwide: thousands of software solutions are distributed under the Apache License; and the community actively participates in ASF mailing lists, mentoring initiatives, and ApacheCon, the Foundation’s official user conference, trainings, and expo. The ASF is a US 501(3)(c) not-for-profit charity, funded by individual donations and corporate sponsors including AMD, Basis Technology, Cloudera, Facebook, Google, IBM, HP, Matt Mullenweg, Microsoft, SpringSource, and Yahoo!. For more information, visit http://www.apache.org/.

# # #

Contact:

Sally Khudairi
The Apache Software Foundation
press@apache.org
+1 617 921 8656

The Apache Software Foundation Blog

[MISCS] From Editor — I am crying — 18th Nov. 2009

Posted by: Admin  :  Category: Apache

Before writing this: I should clarify this fact. I was elected as committer by “THREE TIMES” at *@*.apache.org mailing lists before becoming a first individual and outside USA sponsor ( http://an.to/asf ). Anyone can not buy @apache.org account : declaration:

—-

As an ex-sponsor of the apache software foundation I would like to write various thing here.
Before that, to be honest, the current board members are so much OBSOLETE from my point of views. Compile the tasks and go emertus I recommend as an ex-sponsor (individual). December Last Year or around, I sent messages to all the members in @apache.org (committers + members) as a sponsor. In general, “I do not know button” would never happen (See the thanks.html PAGE, guys) – because just “archive” button exist – however some (generally) nuts had pushed “I do not know” button and my linkedin account suspended for a few days.

(My heart was just saying in cruel: at that time) See the thanks.html page, MEMBERS!

Plus, my sponshorship was not “tax-deductive”. Understand that?

Gradually found out there lays the critical difference between the USA/European Foundations/NPOs and Japanese ones.

One of the NPOs which I am getting involved (donating) in — named “Tsubasa” (for the gifted in Japan / NPO — “tsubasa = wings”) : Tsubasa’s chair said to me “it is not a good joke because there are persons who donated 2000USD or more to us”. (It was just a mistake of him: I was just joking as I knew the policitians and chair of the re-form of japanese gov. — 12 years, so just joking) This attitude is Japanese NPOs’ style. Normal attitudes towards the donators. All the components (Apache members) should “thank” to those donated or sponsored as a matter of course — this IS the rule of NPOs at least in Japan.

….. And “I don’t know button”? …. and spam? … and abrupt suspension?

Cultural difference or the arrogance of the bureaucratic Foundation, which operates OPEN sources — anyways. My heart is crying …. Today is my birthday.

Tetsuya Kitahata — kitahata@99.alumni.u-tokyo.ac.jp

[ Category : Apache Software Foundation ] PDFXML_RSS

Apache News Online

[MISCS] From Editor — Devil’s Dictionary

Posted by: Admin  :  Category: Apache

(*) Devil’s Dictionary

Apache: The most infamous, bureaucratic and closed Foundation which accommodates #open# source projects

Apache members: Those who went to the dog obedient school.

Apache PMC/board members: Those who really became sly dogs.

[ Category : Apache Software Foundation ] PDFXML_RSS

Apache News Online