# Apache CloudStack LTS Maintenance Release 4.17.2.0 The Apache CloudStack project is pleased to announce the release of CloudStack 4.17.2.0. The CloudStack 4.17.2.0 release is a maintenance release as part of its 4.17.x LTS branch and contains more than 20 fixes since the CloudStack 4.17.1.0 release. CloudStack LTS branches are supported for... [Read more...]
Posted at 04:46PM Dec 16, 2022 by Rohit Yadav in Announcements
Apache CloudStack version 4.5.0 and later has a SAML 2.0 authentication Service Provider plugin which is found to be vulnerable to XML external entity (XXE) injection. This plugin is not enabled by default and the attacker would require that this plugin be enabled to exploit the vulnerability. When the SAML 2.0 plugin is enabled in affected versions of... [Read more...]
Posted at 01:16PM Jul 18, 2022 by Rohit Yadav in Announcements