LoginSign Up
← Back to all sparks
A

Apache CloudStack

INFRA · APIS
Velocity2.5

Open-source IaaS platform for deploying and managing large virtual machine networks

cloudstack.apache.org ↗

CloudStack's feed shows two LTS branches maintained in parallel and little else

cloud-orchestrationlts-branchessecurity-releasesapacheiaas
◆Current state
The visible activity on Apache CloudStack is branch maintenance across two long-term-support lines, 4.20 and 4.22. The newest tag, 4.20.3.1, carries no release notes at all — just a line stating it was tagged on a fixes branch. The most informative recent entry remains 4.22.0.1, a security release fixing seven CVEs, several of them access-control failures around backups.
◆Where it's heading
This feed publishes tags, not changelogs: every maintenance release points at external documentation rather than listing what changed, so direction has to be inferred from version numbers and the occasional security advisory. What can be read from it is a steady dual-branch cadence, with 4.20 and 4.22 receiving parallel maintenance and 4.22 carrying the newer feature work. The one substantive disclosure in this window, the CVE batch, clustered around backup and template permissions.
◆Prediction
The dual-branch maintenance pattern should continue, though the feed itself will not reveal feature direction unless a security advisory forces detail into it.

◆Recent moves

  1. 1d ago

    4.20.3.1

    A bare tag on a 4.20.3.1 fixes branch with no accompanying notes. Whether it carries security fixes or routine maintenance cannot be determined from the feed, which publishes tag announcements rather than changelogs.

    View source ↗
  2. 2mo ago

    Apache CloudStack 4.22.1.0 (LTS)

    A 4.22 maintenance release announced only as a pointer to external release notes. Confirms the parallel-branch cadence without disclosing what changed.

    View source ↗
  3. 3mo ago

    CloudStack 4.22.0.1 patches 7 CVEs across backups and templates

    The one entry in this window with real detail. Seven CVEs, four rated Important, concentrated on users reaching backups they should not have access to — listing, restoring VMs from, and attaching volumes from them — plus unauthenticated command injection in direct-download templates.

    View source ↗
  4. 4mo ago

    Apache CloudStack 4.20.3.0 (LTS)

    A 4.20 maintenance release published as a documentation pointer. Part of the steady dual-branch maintenance rhythm rather than a directional move.

    View source ↗
  5. 9mo ago

    Apache CloudStack 4.22.0.0 (LTS)

    The 4.22.0.0 LTS line opening, which is the branch subsequent maintenance and security releases have been landing on. The feed gives no feature detail beyond the version itself.

    View source ↗
  6. 9mo ago

    Apache CloudStack 4.20.2.0 (LTS)

    Another 4.20 maintenance tag pointing at external notes, consistent with how this feed has published every non-security release.

    View source ↗