René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"[repo-status] Daily Status Report — June 1, 2026","articleBody":"## 🌟 Apache CloudStack Daily Status — June 1, 2026\n\n### 🚀 Recent Release\n**[Apache CloudStack 4.22.1.0 (LTS)](https://github.com/apache/cloudstack/releases/tag/4.22.1.0)** was released on May 26, 2026! 🎉 This is the latest maintenance release for the 4.22 LTS line. Users on 4.22.0.1 (the security release from May 8) are encouraged to upgrade.\n\n---\n\n### ✅ Merged PRs This Week (May 25 – June 1)\n\n| # | Title | Author |\n|---|-------|--------|\n| [`#13278`](https://github.com/apache/cloudstack/pull/13278) | Update GitHub AW actions | vishesh92 |\n| [`#13246`](https://github.com/apache/cloudstack/pull/13246) | Add GaOrtiga to collaborators 👋 | GaOrtiga |\n| [`#13238`](https://github.com/apache/cloudstack/pull/13238) | docs: Note MariaDB support in README | robertsilen |\n| [`#13215`](https://github.com/apache/cloudstack/pull/13215) | Bump github-actions-dependencies (dependabot) | dependabot |\n| [`#13210`](https://github.com/apache/cloudstack/pull/13210) | Convert command timeout for snapshot commands | erikbocks |\n| [`#13204`](https://github.com/apache/cloudstack/pull/13204) | Fix local upload from browser (SSVM cert not trusted) | abh1sar |\n| [`#13180`](https://github.com/apache/cloudstack/pull/13180) | Fix Instance Backup related events | abh1sar |\n| [`#13078`](https://github.com/apache/cloudstack/pull/13078) | fix(linstor): surface ambiguous template fallbacks \u0026 legacy orphan cleanup | jmsperu |\n| [`#13050`](https://github.com/apache/cloudstack/pull/13050) | flasharray: fall back to array capacity when pod has no quota | genegr |\n| [`#13021`](https://github.com/apache/cloudstack/pull/13021) | Fix validation of CPVM states in multiple zones | Tonitzpp |\n| [`#12961`](https://github.com/apache/cloudstack/pull/12961) | Refactor Quota balance | winterhazel |\n| [`#12774`](https://github.com/apache/cloudstack/pull/12774) | Refactor GitHub actions | vishesh92 |\n\nGreat velocity this week — **12 PRs merged** covering bug fixes, storage plugins, CI improvements, and docs! 💪\n\n---\n\n### 🔥 Hot Issues Today (June 1)\n\nSeveral **security-related issues** were filed today by `@YLChen-007`, covering potential log/credential exposure areas:\n- [`#13311`](https://github.com/apache/cloudstack/issues/13311) – `ApiServlet` logs duplicate sensitive query parameters\n- [`#13309`](https://github.com/apache/cloudstack/issues/13309) – `Script.java` command sanitization\n- [`#13308`](https://github.com/apache/cloudstack/issues/13308) – Plaintext password in OVM3 hypervisor config\n- [`#13307`](https://github.com/apache/cloudstack/issues/13307) – VM user-data/SSH key log exposure (Baremetal KVM)\n- [`#13306`](https://github.com/apache/cloudstack/issues/13306) – Keystore credentials in SSHCmdHelper logs\n- [`#13305`](https://github.com/apache/cloudstack/issues/13305) – SSL private key plaintext exposure\n- [`#13304`](https://github.com/apache/cloudstack/issues/13304) – Sensitive auth credentials in system logs\n- [`#13303`](https://github.com/apache/cloudstack/issues/13303) – Credential exposure via parameter map serialization\n- [`#13302`](https://github.com/apache/cloudstack/issues/13302) – VM snapshot VNC password loss leading to unauthenticated console\n- [`#13301`](https://github.com/apache/cloudstack/issues/13301) – Password leak in async job status update logging\n- [`#13300`](https://github.com/apache/cloudstack/issues/13300) – Plaintext CIFS storage credential leakage in logs\n\n⚠️ **Maintainers: These security issues deserve prompt triage.** Please follow [Apache Security Policy]((www.apache.org/redacted) for handling, and consider whether any should be reported privately.\n\nOther new issues:\n- [`#13265`](https://github.com/apache/cloudstack/issues/13265) – `distutils` warnings when upgrading to 4.22.1.0\n- [`#13314`](https://github.com/apache/cloudstack/issues/13314) – CEPH/Backup mount error: no MDS up\n- [`#13313`](https://github.com/apache/cloudstack/issues/13313) – Show VM name in backup events\n\n---\n\n### 📋 Notable Open PRs Needing Review\n\n- [`#12403`](https://github.com/apache/cloudstack/pull/12403) – Fix host metrics on overprovisioning change *(vishesh92)*\n- [`#12330`](https://github.com/apache/cloudstack/pull/12330) – Constrained offerings should not have CPU speed of 0 *(DaanHoogland)*\n- [`#12606`](https://github.com/apache/cloudstack/pull/12606) – Fix duplicate RUNNING_VM helper record on repeated VM.START events\n- [`#12425`](https://github.com/apache/cloudstack/pull/12425) – Add errorprone 2.24.1 static analysis + GitHub Action *(Pearl1594)*\n- [`#11800`](https://github.com/apache/cloudstack/pull/11800) – Use `ip` structured data for default route detection\n\n---\n\n### 🎯 Recommendations for Maintainers\n\n1. **🔐 Triage the security issues** filed today — assess severity and handle via proper disclosure channels if confirmed.\n2. **📦 Help upgrade-path users** — the 4.22.1.0 upgrade from 4.22.0.1 has a reported `distutils` warning; worth a quick fix.\n3. **🔍 Review queued PRs** — several solid bug-fix PRs have been waiting for a second review.\n4. **🛡️ Consider a CI security scan** — the volume of potential log-exposure issues suggests a systematic log-scrubbing pass could be valuable.\n\n---\n\n*Generated automatically on 2026-06-01. Data reflects GitHub activity as of report time.*\n\n\n\n\n\u003e Generated by [Repo Status](https://github.com/apache/cloudstack/actions/runs/26780613756) · sonnet46 693.2K · [◷](https://github.com/search?q=repo%3Aapache%2Fcloudstack+is%3Aissue+%22gh-aw-workflow-call-id%3A+apache%2Fcloudstack%2Fdaily-repo-status%22\u0026type=issues)\n\u003e\n\u003cdetails\u003e\n\u003csummary\u003eAdd this agentic workflows to your repo\u003c/summary\u003e\n\nTo install this agentic workflow, run\n\n```\ngh aw add githubnext/agentics/workflows/repo-status.md@main\n```\n\u003c/details\u003e\n\n\n\u003c!-- gh-aw-agentic-workflow: Repo Status, engine: copilot, version: 1.0.52, model: claude-sonnet-4.6, id: 26780613756, workflow_id: daily-repo-status, run: https://github.com/apache/cloudstack/actions/runs/26780613756 --\u003e\n\n\u003c!-- gh-aw-workflow-id: daily-repo-status --\u003e\n\u003c!-- gh-aw-workflow-call-id: apache/cloudstack/daily-repo-status --\u003e","author":{"url":"https://github.com/github-actions[bot]","@type":"Person","name":"github-actions[bot]"},"datePublished":"2026-06-01T20:42:38.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/13317/cloudstack/issues/13317"}