LoginSign Up
← Back to all sparks
A

Apache CloudStack

INFRA · APIS
Velocity5.0

Open-source IaaS platform for deploying and managing large virtual machine networks

cloudstack.apache.org ↗

Apache CloudStack 4.23 ships as a Regular release while two LTS branches stay on maintenance cadence.

cloud-infrastructureiaasopen-sourcevirtualizationapachemulti-tenant
◆Current state
Apache CloudStack maintains three active release lines: 4.23.0.0 just shipped as the latest Regular release, 4.22 continues on LTS maintenance with patch 4.22.1.1, and 4.20 received a maintenance tag (4.20.3.1). A security release (4.22.0.1) in May addressed two CVEs — backup access control and instance access violations. The project's multi-branch support model indicates a large installed base that upgrades slowly.
◆Where it's heading
CloudStack follows a predictable Regular → LTS → maintenance cadence. 4.23 as a Regular release means 4.24 or the LTS designation of 4.23 will come next. The concurrent maintenance of 4.20 alongside 4.22 suggests the project serves operators who can't upgrade quickly — a characteristic of infrastructure software running in production cloud deployments. No signal of architectural pivots.
◆Prediction
A 4.23.x security or maintenance release will follow within 2-3 months, consistent with historical cadence; 4.23 LTS designation or a 4.24 preview could come mid-2027. Security response is active — operators on 4.22 and earlier should apply the CVE patches.

◆Recent moves

  1. 14d ago

    Apache CloudStack 4.23.0.0 (Regular)

    CloudStack 4.23.0.0 is the current Regular release — the changelog entry links to release notes but doesn't enumerate specific features. Following the Regular release pattern, this version likely includes new features destined for a future LTS designation, but the entry content doesn't allow per-feature analysis.

    View source ↗
  2. 29d ago

    4.22.1.1: LTS patch tag

    4.22.1.1 is a patch tag on the 4.22 LTS branch. Minimal content in the entry — standard maintenance tagging with no user-visible change description.

    View source ↗
  3. 29d ago

    4.20.3.1: LTS patch tag

    4.20.3.1 is a patch tag on the 4.20 LTS branch — continued support for a release line that remains in use in production deployments that haven't yet migrated to 4.22 or 4.23.

    View source ↗
  4. 3mo ago

    Apache CloudStack 4.22.1.0 (LTS)

    4.22.1.0 is the first maintenance release on the 4.22 LTS branch — standard bug fixes and stability improvements for operators on the LTS track.

    View source ↗
  5. 4mo ago

    Apache CloudStack 4.22.0.1 (LTS Security Release)

    The LTS security release patches two CVEs: unauthorized backup enumeration (severity Low) and an additional access control issue. For operators running 4.22.0.0, this is a required upgrade — the security fixes are user-visible in the sense that they close real access control gaps in the backup and instance APIs.

    View source ↗
  6. 5mo ago

    Apache CloudStack 4.20.3.0 (LTS)

    4.20.3.0 is a standard LTS maintenance release for the 4.20 branch — bug fixes and stability for operators who haven't migrated to 4.22. Long-tail LTS support consistent with CloudStack's multi-branch model.

    View source ↗