At present, the ability of open source to drive innovation is becoming more and more significant, and it has become the enabler of new economic and social changes. Open source has become the main mode of software technology upgrading and industrial development by gathering innovative resources, building a trusting environment, promoting the sharing of knowledge, wisdom, technology, achievements, etc., accelerating the efficient flow of innovation elements, and promoting the implementation of global technological innovation achievements. The core driving force and important path to promote scientific and technological innovation through software.
As a non-profit organization dedicated to promoting the development of global open source, the Open Atom Open Source Foundation has produced and released the "Global Open Source Development Situation Insights", which collects and sorts out the development trends of open source foundations at home and abroad, relevant policies in the open source field, technology development, and reports etc., gain insight into the latest developments in the open source field. "Global Open Source Development Situation Insights" is issued every half a month, bringing readers an open source feast with an international perspective, so stay tuned!
Insight Catalog
International Open Source Foundation
● Apache Linkis officially graduated and became the top project of Apache Software Foundation
● Apache bRPC officially graduated and became the top project of Apache Software Foundation
● Jina AI officially donated DocArray to the Linux Foundation
● Paralus officially became a sandbox project of the Cloud Native Computing Foundation
industry development
● Intel suspends RISC-V plan and network switch business
● openKylin 0.9.5 release: support Arm, RISC-V for the first time
● HUAWEI CLOUD releases a cold start acceleration solution: Helps increase serverless computing speed by 90%+
● CNCF Foundation will launch Kubernetes and Cloud Security (KCSA) certification in the third quarter
● cdCon + GitOpsCon 2023 topic collection (as of 2.10)
● Istio releases 2022 security audit results
● Venafi launches cloud-native machine identity management service TLS Protect for Kubernetes
● K8s DevOps platform Tanzu Application Platform v1.4 released
● Application connection platform Tetrate Service Bridge v1.6.0 released
● Container security tool Qualys Container Security v1.21 released
● Multi-cloud and multi-cluster Kubernetes management solution Tanzu Mission Control update
● OpenShift Container Platform 4.12 released
● Spot by NetApp launched Ocean CD, a continuous delivery product for Kubernetes applications
● Service mesh product Kong Mesh v2.1 released
● Docker BuildKit 0.11 adds supply chain security features
● OpenTelemetry PHP beta release
● Kubefirst platform improves local experience and password management
● Kubernetes Java Client 17.0 provides support for Kubernetes 1.25
● Kubernetes reports an increase in misconfigured workloads
open source security
● Apache Superset has a SQL injection vulnerability
● Apache HTTP Server mod_proxy_ajp module has HTTP request smuggling vulnerability
● GitLab CE/EE has an authorization bypass vulnerability
● Argo CD < 2.5.8 OIDC has a signature verification bypass vulnerability
● Apache Airflow MySQL Provider has an arbitrary file read vulnerability
● Apache Linkis < 1.3.1 has an arbitrary client file reading vulnerability
● Apache Linkis < 1.3.1 has a deserialization vulnerability
● Apache InLong has an arbitrary file read vulnerability
● hutool has a deserialization vulnerability
● Docker has lax container file permission verification vulnerability
● Improper authentication vulnerability in Jira Service Management
● Apache AGE <= 1.1.0 SQL has an injection vulnerability
● Apache IoTDB-Workbench < 0.13.3 has an authentication bypass vulnerability
advanced technology
● OpenShift Container Platform 4.12 released
● Service mesh product Kong Mesh v2.1 released
● Cloud native batch computing project Volcano v1.7.0 released
● CNI plug-in Kube-OVN v1.11.0 released
● Cloud-native certificate management project Cert-manager v1.11.0 released
● CNI plug-in Calico v3.25.0 released
● K8s local development tool Telepresence v2.10.0 released
● Release of cloud native gateway APISIX v3.1.0
● Cloud-native distributed block storage Longhorn v1.4.0 released
● Distributed application delivery tool Sealer v0.9.0 released
● CNI plug-in Antrea v1.10.0 released
● Go1.20 version released
open source policy
● Dortmund, Germany intensifies the development of open source industry
open source report
● CSIS released "The Role of Government in Promoting Open Source Development"
● 2022 CNCF Foundation and Linux Foundation Open Source Project Ranking
● Cilium releases 2022 annual report
download link
