Product Release Advisory - Tanzu Hub 10.2.1
36111
05 September 2025
04 September 2025
CLOSED
CRITICAL
10
N/A
See CVE list in advisory
Product Release Advisory - Tanzu Hub 10.2.1
Advisory ID |
TNZ-2025-0093 |
Tanzu Issue Date |
2025-09-04 |
Updated on |
Highest Score CVE from list below advisory details |
|
Severity |
Critical |
CVSS V4 Vector |
Unavailable |
CVSS V4 Score |
Unavailable (Sev: Unavailable) |
CVSS V3.1 Vector |
Unavailable |
CVSS V3.1 Score |
Unavailable (Sev: Unavailable) |
CVSS V2 Vector |
AV:N/AC:L/Au:N/C:C/I:C/A:C |
CVSS V2 Score |
10.0 (Sev: Unavailable) |
- Note: if cvss scores are "Unavailable" is is most likely due to the vulnerability being GHSA or BDSA without a matching CVE for nvd lookup.
Product Version Release Advisory
- Product Release Tanzu Hub 10.2.1
- Product Release Notes: https://techdocs.broadcom.com/us/en/vmware-tanzu/platform/tanzu-hub/10-2/tnz-hub/release-notes.html
Security Fixes This release has the following security fixes, listed by component.
Component |
Vulnerabilities Resolved |
clickhouse-keeper |
|
clickhouse-logs |
|
ensemble-helm |
|
inventory-consumer |
|
lemans-gateway |
|
lemans-resources |
|
ops-kafka |
|
postgresql |
|
tanzu-sm-installer |
|
tas-ingestion-service |
|
tp-contour |
|
tp-prometheus |
|
tp-redis |
|
tpsm-collector-repos |
|
uaa |
|
vcf-remote-collector |
|
versitygw |
|
vss-cloud-accounts-service |
|
vss-inventory-service |
|