Apache CloudStack version 4.5.0 and later has a SAML 2.0 authentication Service Provider plugin which is found to be vulnerable to XML external entity (XXE) injection. This plugin is not enabled by default and the attacker would require that this plugin be enabled to exploit the vulnerability. When the SAML 2.0 plugin is enabled in affected versions of... [Read more...]
Posted at 01:16PM Jul 18, 2022 by Rohit Yadav in Announcements
On 9th December 2021, a new zero-day vulnerability for Apache Log4j was reported. It is by now tracked under CVE-2021-44228: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228 . CVE-2021-44228 vulnerability is classified under the highest severity mark and allows an attacker to execute arbitrary code by injecting a sub-string in the form... [Read more...]
Posted at 11:12AM Dec 13, 2021 by Rohit Yadav in Announcements
Apache CloudStack 4.16 is the latest release of the cloud management platform from the Apache Software Foundation and is a result of months of work from the development community. 4.16 is an LTS (Long Term Support) release so will be maintained for a period of 18 months after release. As always, the release contains a myriad of small improvements and... [Read more...]
Posted at 08:30AM Nov 16, 2021 by Rohit Yadav in News
The Apache Software Foundation Announces Apache® CloudStack® v4.16 "In the past years, CloudStack has been proving a mature and easy-to-use platform. The released 4.16.0.0 LTS adds new features, enhancements, and bug fixes that will help tech-savy companies stay up to date." said Gabriel Brascher, Vice President of Apache CloudStack. ... [Read more...]
Posted at 02:40PM Nov 15, 2021 by Rohit Yadav in Announcements
by Mark Shan, Chairman of Tencent Open Source Alliance and Tencent Cloud Open Source Ecosystem General Manager The Apache Software Foundation (ASF) manages more than 227 million lines of code, has 206 project management committees, leads more than 350 Apache projects and operates through a merit system, with more than 850 members, 8,100+ committers,... [Read more...]
Posted at 06:44PM Nov 11, 2021 by Sally Khudairi in SuccessAtApache