Product Release Advisory - Stemcells (Ubuntu Jammy) 1.866

Tanzu Kubernetes Runtime

5 more products

35984

24 July 2025

24 July 2025

CLOSED

HIGH

8

N/A

See CVE list in advisory

Product Release Advisory - Stemcells (Ubuntu Jammy) 1.866

 

 

Advisory Details

Severity

High

CVSSv3 Range

8

CVSSv3 Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Issue Date

2025-07-24

Updated on

 

 

Product Version Release Advisory

 

 

Security Fixes This release has the following security fixes, listed by component and area.

 

Component

Vulnerabilities Resolved

jammy-stemcell-aws 

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-vsphere

jammy-stemcell-google

CVE-2024-50047 (High)

jammy-stemcell-google 

jammy-stemcell-openstack

jammy-stemcell-azure

jammy-stemcell-aws

jammy-stemcell-vsphere

CVE-2025-32462 (High)

jammy-stemcell-vsphere 

jammy-stemcell-openstack

jammy-stemcell-azure

jammy-stemcell-google

jammy-stemcell-aws

CVE-2025-23138 (Medium)

jammy-stemcell-openstack 

jammy-stemcell-aws

jammy-stemcell-google

jammy-stemcell-vsphere

jammy-stemcell-azure

CVE-2025-22073 (Medium)

jammy-stemcell-openstack 

jammy-stemcell-azure

jammy-stemcell-google

jammy-stemcell-aws

jammy-stemcell-vsphere

CVE-2025-21962 (Medium)

jammy-stemcell-google 

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-vsphere

jammy-stemcell-aws

CVE-2025-5916 (Medium)

jammy-stemcell-google 

jammy-stemcell-vsphere

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-aws

CVE-2025-21959 (Medium)

jammy-stemcell-google 

jammy-stemcell-vsphere

jammy-stemcell-azure

jammy-stemcell-aws

jammy-stemcell-openstack

CVE-2025-22055 (Medium)

jammy-stemcell-openstack 

jammy-stemcell-vsphere

jammy-stemcell-google

jammy-stemcell-azure

jammy-stemcell-aws

CVE-2025-22056 (Medium)

jammy-stemcell-vsphere 

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-aws

jammy-stemcell-google

CVE-2025-37932 (Medium)

jammy-stemcell-google 

jammy-stemcell-openstack

jammy-stemcell-azure

jammy-stemcell-vsphere

jammy-stemcell-aws

CVE-2022-49636 (Medium)

jammy-stemcell-google 

jammy-stemcell-vsphere

jammy-stemcell-aws

jammy-stemcell-openstack

jammy-stemcell-azure

CVE-2025-22044 (Medium)

jammy-stemcell-openstack 

jammy-stemcell-azure

jammy-stemcell-vsphere

jammy-stemcell-aws

jammy-stemcell-google

CVE-2025-22063 (Medium)

jammy-stemcell-vsphere 

jammy-stemcell-openstack

jammy-stemcell-azure

jammy-stemcell-google

jammy-stemcell-aws

CVE-2025-39728 (Medium)

jammy-stemcell-aws 

jammy-stemcell-google

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-vsphere

CVE-2025-21991 (Medium)

jammy-stemcell-google 

jammy-stemcell-vsphere

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-aws

CVE-2025-22045 (Medium)

jammy-stemcell-vsphere 

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-google

jammy-stemcell-aws

CVE-2025-32989 (Medium)

jammy-stemcell-aws 

jammy-stemcell-vsphere

jammy-stemcell-openstack

jammy-stemcell-azure

jammy-stemcell-google

CVE-2025-38000 (Medium)

jammy-stemcell-google 

jammy-stemcell-vsphere

jammy-stemcell-openstack

jammy-stemcell-azure

jammy-stemcell-aws

CVE-2025-38575 (Medium)

jammy-stemcell-azure 

jammy-stemcell-openstack

jammy-stemcell-google

jammy-stemcell-vsphere

jammy-stemcell-aws

CVE-2025-23136 (Medium)

jammy-stemcell-openstack 

jammy-stemcell-azure

jammy-stemcell-vsphere

jammy-stemcell-aws

jammy-stemcell-google

CVE-2024-46787 (Medium)

jammy-stemcell-vsphere 

jammy-stemcell-aws

jammy-stemcell-google

jammy-stemcell-azure

jammy-stemcell-openstack

CVE-2025-22021 (Medium)

jammy-stemcell-aws 

jammy-stemcell-google

jammy-stemcell-vsphere

jammy-stemcell-openstack

jammy-stemcell-azure

CVE-2022-49728 (Medium)

jammy-stemcell-azure

CVE-2025-50181 (Medium)

jammy-stemcell-azure 

jammy-stemcell-vsphere

jammy-stemcell-aws

jammy-stemcell-google

jammy-stemcell-openstack

CVE-2025-21999 (Medium)

jammy-stemcell-vsphere 

jammy-stemcell-google

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-aws

CVE-2025-22086 (Medium)

jammy-stemcell-openstack 

jammy-stemcell-google

jammy-stemcell-aws

jammy-stemcell-vsphere

jammy-stemcell-azure

CVE-2025-22025 (Medium)

jammy-stemcell-aws 

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-google

jammy-stemcell-vsphere

CVE-2025-22066 (Medium)

jammy-stemcell-google 

jammy-stemcell-aws

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-vsphere

CVE-2025-22008 (Medium)

jammy-stemcell-aws 

jammy-stemcell-google

jammy-stemcell-vsphere

jammy-stemcell-azure

jammy-stemcell-openstack

CVE-2025-21968 (Medium)

jammy-stemcell-vsphere 

jammy-stemcell-aws

jammy-stemcell-google

jammy-stemcell-openstack

jammy-stemcell-azure

CVE-2025-5915 (Medium)

jammy-stemcell-azure 

jammy-stemcell-openstack

jammy-stemcell-aws

jammy-stemcell-google

jammy-stemcell-vsphere

CVE-2025-22004 (Medium)

jammy-stemcell-azure 

jammy-stemcell-aws

jammy-stemcell-vsphere

jammy-stemcell-openstack

jammy-stemcell-google

CVE-2025-2312 (Medium)

jammy-stemcell-aws 

jammy-stemcell-vsphere

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-google

CVE-2025-21975 (Medium)

jammy-stemcell-aws 

jammy-stemcell-google

jammy-stemcell-vsphere

jammy-stemcell-azure

jammy-stemcell-openstack

CVE-2025-37997 (Medium)

jammy-stemcell-google 

jammy-stemcell-vsphere

jammy-stemcell-openstack

jammy-stemcell-azure

jammy-stemcell-aws

CVE-2025-5372 (Medium)

jammy-stemcell-aws 

jammy-stemcell-vsphere

jammy-stemcell-openstack

jammy-stemcell-azure

jammy-stemcell-google

CVE-2025-22007 (Medium)

jammy-stemcell-google 

jammy-stemcell-azure

jammy-stemcell-vsphere

jammy-stemcell-openstack

jammy-stemcell-aws

CVE-2024-46821 (Medium)

jammy-stemcell-openstack 

jammy-stemcell-google

jammy-stemcell-aws

jammy-stemcell-vsphere

jammy-stemcell-azure

CVE-2025-22071 (Medium)

jammy-stemcell-vsphere 

jammy-stemcell-aws

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-google

CVE-2025-22050 (Medium)

jammy-stemcell-vsphere 

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-aws

jammy-stemcell-google

CVE-2025-38637 (Medium)

jammy-stemcell-azure 

jammy-stemcell-vsphere

jammy-stemcell-aws

jammy-stemcell-google

jammy-stemcell-openstack

CVE-2025-37890 (Medium)

jammy-stemcell-vsphere 

jammy-stemcell-aws

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-google

CVE-2025-21964 (Medium)

jammy-stemcell-azure

CVE-2024-47081 (Medium)

jammy-stemcell-azure 

jammy-stemcell-google

jammy-stemcell-aws

jammy-stemcell-vsphere

jammy-stemcell-openstack

CVE-2024-53144 (Medium)

jammy-stemcell-google 

jammy-stemcell-vsphere

jammy-stemcell-openstack

jammy-stemcell-azure

jammy-stemcell-aws

CVE-2025-37889 (Medium)

jammy-stemcell-aws 

jammy-stemcell-openstack

jammy-stemcell-azure

jammy-stemcell-vsphere

jammy-stemcell-google

CVE-2025-22097 (Medium)

jammy-stemcell-azure 

jammy-stemcell-openstack

jammy-stemcell-google

jammy-stemcell-aws

jammy-stemcell-vsphere

CVE-2025-22005 (Medium)

jammy-stemcell-azure 

jammy-stemcell-openstack

jammy-stemcell-vsphere

jammy-stemcell-aws

jammy-stemcell-google

CVE-2025-21981 (Medium)

jammy-stemcell-azure 

jammy-stemcell-openstack

jammy-stemcell-vsphere

jammy-stemcell-aws

jammy-stemcell-google

CVE-2025-22075 (Medium)

jammy-stemcell-vsphere 

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-google

jammy-stemcell-aws

CVE-2025-38177 (Medium)

jammy-stemcell-google 

jammy-stemcell-aws

jammy-stemcell-vsphere

jammy-stemcell-openstack

jammy-stemcell-azure

CVE-2025-22060 (Medium)

jammy-stemcell-vsphere 

jammy-stemcell-google

jammy-stemcell-aws

jammy-stemcell-openstack

jammy-stemcell-azure

CVE-2025-4877 (Medium)

jammy-stemcell-google 

jammy-stemcell-aws

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-vsphere

CVE-2025-37937 (Medium)

jammy-stemcell-aws 

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-vsphere

jammy-stemcell-google

CVE-2025-32990 (Medium)

jammy-stemcell-google 

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-vsphere

jammy-stemcell-aws

CVE-2025-32988 (Medium)

jammy-stemcell-aws 

jammy-stemcell-vsphere

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-google

CVE-2025-21963 (Medium)

jammy-stemcell-vsphere 

jammy-stemcell-aws

jammy-stemcell-google

jammy-stemcell-azure

jammy-stemcell-openstack

CVE-2025-39735 (Medium)

jammy-stemcell-openstack 

jammy-stemcell-vsphere

jammy-stemcell-aws

jammy-stemcell-google

jammy-stemcell-azure

CVE-2025-21992 (Medium)

jammy-stemcell-vsphere 

jammy-stemcell-google

jammy-stemcell-aws

jammy-stemcell-azure

jammy-stemcell-openstack

CVE-2025-21996 (Medium)

jammy-stemcell-openstack 

jammy-stemcell-azure

jammy-stemcell-vsphere

jammy-stemcell-aws

jammy-stemcell-google

CVE-2025-5318 (Medium)

jammy-stemcell-vsphere 

jammy-stemcell-openstack

jammy-stemcell-azure

jammy-stemcell-google

jammy-stemcell-aws

CVE-2024-53051 (Medium)

jammy-stemcell-aws 

jammy-stemcell-google

jammy-stemcell-vsphere

jammy-stemcell-azure

jammy-stemcell-openstack

CVE-2024-46812 (Medium)

jammy-stemcell-vsphere 

jammy-stemcell-openstack

jammy-stemcell-azure

jammy-stemcell-google

jammy-stemcell-aws

CVE-2025-21941 (Medium)

jammy-stemcell-openstack 

jammy-stemcell-aws

jammy-stemcell-azure

jammy-stemcell-vsphere

jammy-stemcell-google

CVE-2025-6020 (Medium)

jammy-stemcell-aws 

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-vsphere

jammy-stemcell-google

CVE-2025-5914 (Medium)

jammy-stemcell-azure 

jammy-stemcell-openstack

jammy-stemcell-google

jammy-stemcell-aws

jammy-stemcell-vsphere

CVE-2024-36945 (Medium)

jammy-stemcell-google 

jammy-stemcell-openstack

jammy-stemcell-aws

jammy-stemcell-azure

jammy-stemcell-vsphere

CVE-2025-22081 (Medium)

jammy-stemcell-google 

jammy-stemcell-vsphere

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-aws

CVE-2025-38001 (Medium)

jammy-stemcell-vsphere 

jammy-stemcell-aws

jammy-stemcell-azure

jammy-stemcell-google

jammy-stemcell-openstack

CVE-2024-8805 (Medium)

jammy-stemcell-google 

jammy-stemcell-vsphere

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-aws

CVE-2024-46753 (Medium)

jammy-stemcell-azure 

jammy-stemcell-openstack

jammy-stemcell-vsphere

jammy-stemcell-google

jammy-stemcell-aws

CVE-2025-21970 (Medium)

jammy-stemcell-vsphere 

jammy-stemcell-openstack

jammy-stemcell-google

jammy-stemcell-azure

jammy-stemcell-aws

CVE-2025-22020 (Medium)

jammy-stemcell-aws 

jammy-stemcell-google

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-vsphere

CVE-2024-56664 (Medium)

jammy-stemcell-google 

jammy-stemcell-aws

jammy-stemcell-openstack

jammy-stemcell-azure

jammy-stemcell-vsphere

CVE-2025-22079 (Medium)

jammy-stemcell-aws 

jammy-stemcell-google

jammy-stemcell-openstack

jammy-stemcell-azure

jammy-stemcell-vsphere

CVE-2023-40403 (Medium)

jammy-stemcell-aws 

jammy-stemcell-google

jammy-stemcell-openstack

jammy-stemcell-azure

jammy-stemcell-vsphere

CVE-2023-53034 (Medium)

jammy-stemcell-aws 

jammy-stemcell-openstack

jammy-stemcell-azure

jammy-stemcell-vsphere

jammy-stemcell-google

CVE-2025-22035 (Medium)

jammy-stemcell-aws 

jammy-stemcell-vsphere

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-google

CVE-2025-38152 (Medium)

jammy-stemcell-openstack 

jammy-stemcell-azure

jammy-stemcell-google

jammy-stemcell-vsphere

jammy-stemcell-aws

CVE-2025-37785 (Medium)

jammy-stemcell-aws 

jammy-stemcell-google

jammy-stemcell-vsphere

jammy-stemcell-azure

jammy-stemcell-openstack

CVE-2025-22010 (Medium)

jammy-stemcell-google 

jammy-stemcell-vsphere

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-aws

CVE-2025-21956 (Medium)

jammy-stemcell-openstack 

jammy-stemcell-aws

jammy-stemcell-google

jammy-stemcell-vsphere

jammy-stemcell-azure

CVE-2025-22018 (Medium)

jammy-stemcell-google 

jammy-stemcell-aws

jammy-stemcell-openstack

jammy-stemcell-azure

jammy-stemcell-vsphere

CVE-2025-22014 (Medium)

jammy-stemcell-aws 

jammy-stemcell-openstack

jammy-stemcell-azure

jammy-stemcell-vsphere

jammy-stemcell-google

CVE-2025-21957 (Medium)

jammy-stemcell-vsphere 

jammy-stemcell-google

jammy-stemcell-openstack

jammy-stemcell-aws

jammy-stemcell-azure

CVE-2025-22054 (Medium)

jammy-stemcell-aws 

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-vsphere

jammy-stemcell-google

CVE-2025-22089 (Medium)

jammy-stemcell-aws 

jammy-stemcell-vsphere

jammy-stemcell-google

jammy-stemcell-azure

jammy-stemcell-openstack

CVE-2025-37798 (Medium)

jammy-stemcell-aws 

jammy-stemcell-vsphere

jammy-stemcell-openstack

jammy-stemcell-azure

jammy-stemcell-google

CVE-2025-4878 (Medium)

jammy-stemcell-aws 

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-vsphere

jammy-stemcell-google

CVE-2025-5917 (Medium)

jammy-stemcell-openstack 

jammy-stemcell-vsphere

jammy-stemcell-google

jammy-stemcell-aws

jammy-stemcell-azure

CVE-2025-21994 (Medium)

jammy-stemcell-vsphere 

jammy-stemcell-azure

jammy-stemcell-openstack

jammy-stemcell-aws

jammy-stemcell-google

CVE-2025-6395 (Medium)

jammy-stemcell-vsphere 

jammy-stemcell-openstack

jammy-stemcell-azure

jammy-stemcell-google

jammy-stemcell-aws

CVE-2024-42230 (Medium)

jammy-stemcell-openstack 

jammy-stemcell-google

jammy-stemcell-aws

jammy-stemcell-vsphere

jammy-stemcell-azure

CVE-2024-58093 (Low)