René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"[repo-status] Daily Status Report – June 3, 2026","articleBody":"## ☁️ Apache CloudStack — Daily Status Report\n*Generated: June 3, 2026*\n\n---\n\n## 🚀 Latest Release\n\n**[Apache CloudStack 4.22.1.0 (LTS)](https://github.com/apache/cloudstack/releases/tag/4.22.1.0)** — released May 26, 2026 🎉\nThe latest 4.22 LTS maintenance release is live! Users on 4.22.0.1 (the May 8 security release) should plan their upgrade.\n\n---\n\n## 🔥 New Issues Filed Today (June 3)\n\n| # | Title |\n|---|-------|\n| [`#13331`](https://github.com/apache/cloudstack/issues/13331) | Blank volume snapshots list after VM deletion |\n| [`#13329`](https://github.com/apache/cloudstack/issues/13329) | Zone wizard — unable to re-add a host after a failed addition |\n| [`#13328`](https://github.com/apache/cloudstack/issues/13328) | Provide an option to delete the SystemVM template |\n| [`#13326`](https://github.com/apache/cloudstack/issues/13326) | No option to update the Bucket region |\n| [`#13324`](https://github.com/apache/cloudstack/issues/13324) | Missing event: `ErrorinPrepareForMaintenance` |\n\nGood variety of UX and functionality bug reports — the community is actively testing! 🧪\n\n---\n\n## ⚠️ Security Issues — Ongoing Triage Needed\n\nA batch of **~10 security issues** was filed on June 2 by `@YLChen-007`, covering **plaintext credential/password exposure in log files** across multiple subsystems:\n\n- IPMI Tool plaintext passwords ([`#13296`](https://github.com/apache/cloudstack/issues/13296))\n- Keystore password \u0026 CIFS credentials in SSH logs ([`#13297`](https://github.com/apache/cloudstack/issues/13297))\n- Sensitive data in Baremetal PING PXE resources ([`#13298`](https://github.com/apache/cloudstack/issues/13298))\n- Plaintext CIFS credential leakage ([`#13300`](https://github.com/apache/cloudstack/issues/13300))\n- Password leak in async job status logging ([`#13301`](https://github.com/apache/cloudstack/issues/13301))\n- VM Snapshot VNC password loss ([`#13302`](https://github.com/apache/cloudstack/issues/13302))\n- Credential exposure via parameter map serialization ([`#13303`](https://github.com/apache/cloudstack/issues/13303))\n- Sensitive credentials in system logs ([`#13304`](https://github.com/apache/cloudstack/issues/13304))\n- Keystore \u0026 SSL private key plaintext exposure ([`#13305`](https://github.com/apache/cloudstack/issues/13305))\n\n\u003e 💡 **Maintainers:** These issues share a common theme — log sanitization. A consolidated tracking issue and coordinated fix pass would be highly efficient. Please follow [Apache Security Policy]((www.apache.org/redacted) for handling confirmed vulnerabilities.\n\n---\n\n## 🔀 Open Pull Requests — Needs Your Eyes 👀\n\nThere are **20 open PRs**, several of which have been waiting a while:\n\n| # | Title | Author | Last Updated |\n|---|-------|--------|-------------|\n| [`#12403`](https://github.com/apache/cloudstack/pull/12403) | Fix host metrics on overprovisioning change | vishesh92 | Feb 16 |\n| [`#12606`](https://github.com/apache/cloudstack/pull/12606) | Fix duplicate RUNNING_VM helper record on repeated VM.START | SURYAS1306 | Feb 27 |\n| [`#12425`](https://github.com/apache/cloudstack/pull/12425) | Add errorprone 2.24.1 static analysis + GitHub Action | Pearl1594 | Mar 10 |\n| [`#12419`](https://github.com/apache/cloudstack/pull/12419) | Fix issues found by Errorprone | Pearl1594 | Mar 12 |\n| [`#12410`](https://github.com/apache/cloudstack/pull/12410) | Enhance DHCP with lease timeout support | NVShawn | Mar 17 |\n| [`#12695`](https://github.com/apache/cloudstack/pull/12695) | server: ignore projectid=-1 for finding owner | shwstppr | Mar 16 |\n| [`#11800`](https://github.com/apache/cloudstack/pull/11800) | Use `ip` structured data for default route detection | mosys0815 | May 11 |\n\nSeveral dependabot dependency bumps are also pending ([`#12684`](https://github.com/apache/cloudstack/pull/12684), [`#12543`](https://github.com/apache/cloudstack/pull/12543), [`#12744`](https://github.com/apache/cloudstack/pull/12744), [`#12746`](https://github.com/apache/cloudstack/pull/12746)).\n\n---\n\n## 📊 Project Health Snapshot\n\n| Metric | Status |\n|--------|--------|\n| Latest release | ✅ 4.22.1.0 LTS (May 26) |\n| Open PRs | 20 open, several awaiting first review |\n| Security issues backlog | ⚠️ ~10 new log-exposure issues need triage |\n| Dependency hygiene | 🟡 4 dependabot PRs pending merge |\n| Issue activity | 🟢 Active — 5 new issues today |\n\n---\n\n## 🎯 Recommended Actions for Maintainers\n\n1. **🔴 Security triage** — Assign and review the credential-exposure issues from `@YLChen-007`; consider a unified log-sanitization tracking issue\n2. **🟡 Clear the PR queue** — Several PRs from Q1 2026 are still open; a review sprint would clear the backlog\n3. **🟢 Merge dependabot PRs** — Four dependency update PRs are ready and low-risk\n4. **🔍 Investigate `#13331`** — The blank volume snapshots bug is a regression affecting users on 4.22.1.0 and deserves prompt attention\n\n---\n\n*Keep up the excellent work, Apache CloudStack community! ☁️⚡*\n\n\n\n\n\u003e Generated by [Repo Status](https://github.com/apache/cloudstack/actions/runs/26910618425) · sonnet46 663.1K · [◷](https://github.com/search?q=repo%3Aapache%2Fcloudstack+is%3Aissue+%22gh-aw-workflow-call-id%3A+apache%2Fcloudstack%2Fdaily-repo-status%22\u0026type=issues)\n\u003e\n\u003cdetails\u003e\n\u003csummary\u003eAdd this agentic workflows to your repo\u003c/summary\u003e\n\nTo install this agentic workflow, run\n\n```\ngh aw add githubnext/agentics/workflows/repo-status.md@main\n```\n\u003c/details\u003e\n\n\n\u003c!-- gh-aw-agentic-workflow: Repo Status, engine: copilot, version: 1.0.52, model: claude-sonnet-4.6, id: 26910618425, workflow_id: daily-repo-status, run: https://github.com/apache/cloudstack/actions/runs/26910618425 --\u003e\n\n\u003c!-- gh-aw-workflow-id: daily-repo-status --\u003e\n\u003c!-- gh-aw-workflow-call-id: apache/cloudstack/daily-repo-status --\u003e","author":{"url":"https://github.com/github-actions[bot]","@type":"Person","name":"github-actions[bot]"},"datePublished":"2026-06-03T21:04:51.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/13333/cloudstack/issues/13333"}