[repo-status] Daily Status Report — June 1, 2026 #13317

🌟 Apache CloudStack Daily Status — June 1, 2026

🚀 Recent Release

Apache CloudStack 4.22.1.0 (LTS) was released on May 26, 2026! 🎉 This is the latest maintenance release for the 4.22 LTS line. Users on 4.22.0.1 (the security release from May 8) are encouraged to upgrade.

✅ Merged PRs This Week (May 25 – June 1)

Great velocity this week — 12 PRs merged covering bug fixes, storage plugins, CI improvements, and docs! 💪

🔥 Hot Issues Today (June 1)

Several security-related issues were filed today by @YLChen-007, covering potential log/credential exposure areas:

• #13311 – ApiServlet logs duplicate sensitive query parameters
• #13309 – Script.java command sanitization
• #13308 – Plaintext password in OVM3 hypervisor config
• #13307 – VM user-data/SSH key log exposure (Baremetal KVM)
• #13306 – Keystore credentials in SSHCmdHelper logs
• #13305 – SSL private key plaintext exposure
• #13304 – Sensitive auth credentials in system logs
• #13303 – Credential exposure via parameter map serialization
• #13302 – VM snapshot VNC password loss leading to unauthenticated console
• #13301 – Password leak in async job status update logging
• #13300 – Plaintext CIFS storage credential leakage in logs

⚠️ Maintainers: These security issues deserve prompt triage. Please follow [Apache Security Policy]((www.apache.org/redacted) for handling, and consider whether any should be reported privately.

Other new issues:

• #13265 – distutils warnings when upgrading to 4.22.1.0
• #13314 – CEPH/Backup mount error: no MDS up
• #13313 – Show VM name in backup events

📋 Notable Open PRs Needing Review

• #12403 – Fix host metrics on overprovisioning change (vishesh92)
• #12330 – Constrained offerings should not have CPU speed of 0 (DaanHoogland)
• #12606 – Fix duplicate RUNNING_VM helper record on repeated VM.START events
• #12425 – Add errorprone 2.24.1 static analysis + GitHub Action (Pearl1594)
• #11800 – Use ip structured data for default route detection

🎯 Recommendations for Maintainers

1. 🔐 Triage the security issues filed today — assess severity and handle via proper disclosure channels if confirmed.
2. 📦 Help upgrade-path users — the 4.22.1.0 upgrade from 4.22.0.1 has a reported distutils warning; worth a quick fix.
3. 🔍 Review queued PRs — several solid bug-fix PRs have been waiting for a second review.
4. 🛡️ Consider a CI security scan — the volume of potential log-exposure issues suggests a systematic log-scrubbing pass could be valuable.

Generated automatically on 2026-06-01. Data reflects GitHub activity as of report time.

Generated by Repo Status · sonnet46 693.2K · ◷

gh aw add githubnext/agentics/workflows/repo-status.md@main