Repository navigation
[repo-status] Daily Status Report – June 3, 2026 #13333
Description
☁️ Apache CloudStack — Daily Status Report
Generated: June 3, 2026
🚀 Latest Release
Apache CloudStack 4.22.1.0 (LTS) — released May 26, 2026 🎉
The latest 4.22 LTS maintenance release is live! Users on 4.22.0.1 (the May 8 security release) should plan their upgrade.
🔥 New Issues Filed Today (June 3)
| # | Title |
|---|---|
#13331 |
Blank volume snapshots list after VM deletion |
#13329 |
Zone wizard — unable to re-add a host after a failed addition |
#13328 |
Provide an option to delete the SystemVM template |
#13326 |
No option to update the Bucket region |
#13324 |
Missing event: ErrorinPrepareForMaintenance |
Good variety of UX and functionality bug reports — the community is actively testing! 🧪
⚠️ Security Issues — Ongoing Triage Needed
A batch of ~10 security issues was filed on June 2 by @YLChen-007, covering plaintext credential/password exposure in log files across multiple subsystems:
- IPMI Tool plaintext passwords (
#13296) - Keystore password & CIFS credentials in SSH logs (
#13297) - Sensitive data in Baremetal PING PXE resources (
#13298) - Plaintext CIFS credential leakage (
#13300) - Password leak in async job status logging (
#13301) - VM Snapshot VNC password loss (
#13302) - Credential exposure via parameter map serialization (
#13303) - Sensitive credentials in system logs (
#13304) - Keystore & SSL private key plaintext exposure (
#13305)
💡 Maintainers: These issues share a common theme — log sanitization. A consolidated tracking issue and coordinated fix pass would be highly efficient. Please follow [Apache Security Policy]((www.apache.org/redacted) for handling confirmed vulnerabilities.
🔀 Open Pull Requests — Needs Your Eyes 👀
There are 20 open PRs, several of which have been waiting a while:
| # | Title | Author | Last Updated |
|---|---|---|---|
#12403 |
Fix host metrics on overprovisioning change | vishesh92 | Feb 16 |
#12606 |
Fix duplicate RUNNING_VM helper record on repeated VM.START | SURYAS1306 | Feb 27 |
#12425 |
Add errorprone 2.24.1 static analysis + GitHub Action | Pearl1594 | Mar 10 |
#12419 |
Fix issues found by Errorprone | Pearl1594 | Mar 12 |
#12410 |
Enhance DHCP with lease timeout support | NVShawn | Mar 17 |
#12695 |
server: ignore projectid=-1 for finding owner | shwstppr | Mar 16 |
#11800 |
Use ip structured data for default route detection |
mosys0815 | May 11 |
Several dependabot dependency bumps are also pending (#12684, #12543, #12744, #12746).
📊 Project Health Snapshot
| Metric | Status |
|---|---|
| Latest release | ✅ 4.22.1.0 LTS (May 26) |
| Open PRs | 20 open, several awaiting first review |
| Security issues backlog | |
| Dependency hygiene | 🟡 4 dependabot PRs pending merge |
| Issue activity | 🟢 Active — 5 new issues today |
🎯 Recommended Actions for Maintainers
- 🔴 Security triage — Assign and review the credential-exposure issues from
@YLChen-007; consider a unified log-sanitization tracking issue - 🟡 Clear the PR queue — Several PRs from Q1 2026 are still open; a review sprint would clear the backlog
- 🟢 Merge dependabot PRs — Four dependency update PRs are ready and low-risk
- 🔍 Investigate
#13331— The blank volume snapshots bug is a regression affecting users on 4.22.1.0 and deserves prompt attention
Keep up the excellent work, Apache CloudStack community! ☁️⚡
Generated by Repo Status · sonnet46 663.1K · ◷
Add this agentic workflows to your repo
To install this agentic workflow, run
gh aw add githubnext/agentics/workflows/repo-status.md@main
Activity
github-actions commentedon Jun 4, 2026
This issue is being closed as outdated. A newer issue has been created: #13350
View newer issue
This action was performed automatically by the
Repo Statusworkflow.