Apereo CAS
Apereo CAS 8.1.0 reaches a third release candidate with 8.0.0 still not final.
A side-by-side editorial comparison of Nomad and ZoneMinder — release velocity, themes, recent moves, and the top alternatives to consider.
Nomad 2.1's first candidate brings an experimental batch job queue.
Nomad's feed tracks Enterprise releases on the 1.10 and 1.11 lines, cut in matched pairs with the same fixes, plus the 2.x candidates. On 28 October 1.11.12 and 1.10.18 closed cross-namespace information leaks in several APIs and hardened client file handling, following July's two Docker CVEs and a cross-namespace volume delete. 2.1.0-rc.1 on 20 October added an experimental batch job queue with FIFO and dynamic priority modes.
ZoneMinder 1.38.5 fixes 19 vulnerabilities, including authenticated remote code execution
ZoneMinder's 1.38 line is in security maintenance. 1.38.5 fixes 19 reported vulnerabilities, including authenticated OS command execution through the filter debug modal, a JPEG heap overflow and cross-monitor authorization bypasses. It replaces a default or empty auth hash secret on upgrade and refuses token logins while the public default is set. 1.38.6 followed within the hour only to fix RPM builds, since no 1.38.5 RPMs were published.
Nomad's feed tracks Enterprise releases on the 1.10 and 1.11 lines, cut in matched pairs with the same fixes, plus the 2.x candidates. On 28 October 1.11.12 and 1.10.18 closed cross-namespace information leaks in several APIs and hardened client file handling, following July's two Docker CVEs and a cross-namespace volume delete. 2.1.0-rc.1 on 20 October added an experimental batch job queue with FIFO and dynamic priority modes.
Security work keeps centring on namespace boundaries, which matters most to multi-tenant clusters. On the feature side, the batch queue moves Nomad toward HPC- and batch-style scheduling alongside its service workloads.
Nomad 2.1.0 final is the likely next entry, with the batch queue still marked experimental.
ZoneMinder's 1.38 line is in security maintenance. 1.38.5 fixes 19 reported vulnerabilities, including authenticated OS command execution through the filter debug modal, a JPEG heap overflow and cross-monitor authorization bypasses. It replaces a default or empty auth hash secret on upgrade and refuses token logins while the public default is set. 1.38.6 followed within the hour only to fix RPM builds, since no 1.38.5 RPMs were published.
Every 1.38 release since June has been mostly authorization and memory-safety work. The 1.38.0 feature set (RBAC, WebRTC, the monitor function split) is being made safe rather than extended.
Further security releases on 1.38 are likely; the entries give no sign of a 1.39 feature release.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Nomad or ZoneMinder.
Apereo CAS 8.1.0 reaches a third release candidate with 8.0.0 still not final.
RabbitMQ 4.4 moves to Erlang 28 and tightens OpenID Connect checks, with 4.3 still patched.
nginx patched HTTP/3 twice in a month and is trimming old platform code on mainline.
Nebula 1.12 adds optional offloading for throughput after a run of platform fixes.
At Universe, GitHub folds Copilot into Enterprise seats and lets Copilot Fusion pick the model.
Strimzi 1.3 starts encrypting and authenticating Kafka's internal connections.
See all Nomad alternatives → · See all ZoneMinder alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Nomad and ZoneMinder are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Nomad and ZoneMinder are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Nomad alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Nomad alternatives" section above for the current picks, or visit /alternatives/nomad for the full list with editorial commentary on each.
Top ZoneMinder alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "ZoneMinder alternatives" section above for the current picks, or visit /alternatives/zoneminder for the full list with editorial commentary on each.