Apache CloudStack LTS Release 4.20.0.0

The Apache CloudStack project is pleased to announce the release of CloudStack 4.20.0.0.

Apache CloudStack 4.20 is the most recent release of the cloud management platform. It comes as a product of extensive contributions from the development community and is a LTS release, guaranteeing ongoing maintenance and support for a period of 18 months

The Apache CloudStack project announces the release of LTS security releases 4.18.2.5 and 4.19.1.3 that address the following security issues:

• CVE-2024-50386 (severity 'Important')

The Apache CloudStack project announces the release of LTS security releases 4.18.2.4 and 4.19.1.2 that address the following security issues:

• CVE-2024-45219 (severity 'Important')
• CVE-2024-45461 (severity 'Moderate')
• CVE-2024-45462 (severity 'Moderate')
• CVE-2024-45693 (severity 'Important')

Apache CloudStack project announces the release of LTS security releases 4.18.2.3 and 4.19.1.1 that address CVE-2024-42062 and CVE-2024-42222, both of severity rating 'critical', explained below.

The Apache CloudStack project is pleased to announce the release of CloudStack 4.19.1.0.

The CloudStack 4.19.1.0 release is a maintenance release as part of its 4.19.x LTS branch and contains more than 300 fixes and improvements since the CloudStack 4.19.0.0 release. Some of the highlights include:

Apache CloudStack project announces the release of LTS security releases 4.19.1.0 and 4.18.2.2 that addresses CVE-2024-41107 that affects CloudStack SAML users, of severity 'important' explained below.

Apache CloudStack project announces the release of LTS security releases 4.18.2.1 and 4.19.0.2 that addresses CVE-2024-38346 and CVE-2024-39864, both of severity rating 'important', explained below.

The Apache CloudStack project is pleased to announce the release of CloudStack Kubernetes Provider v1.1.0 that facilitates Kubernetes deployments on Cloudstack.

It allows Kubernetes to dynamically allocate IP addresses and the respective networking rules on CloudStack to ensure seamless TCP, UDP and TCP-Proxy LoadBalancer deployments on Kubernetes. This was historically part of the Kubernetes codebase which was later removed and donated to the project to allow for further maintenance of the provider plugin.

We are pleased to announce the release of Apache CloudStack Terraform provider v0.5.0. Terraform is an open-source infrastructure as code software tool that provides a consistent CLI workflow to manage resources in many public/private clouds.

Apache CloudStack security releases 4.18.1.1 and 4.19.0.1 address the CVEs listed below. Affected users are recommended to upgrade their CloudStack installations.