Product Release Advisory - VMware Tanzu for Valkey on Kubernetes 3.2.0

Product/Component

VMware Tanzu Data Intelligence

4 more products

Notification Id

36264

Last Updated

28 October 2025

Initial Publication Date

28 October 2025

Status

CLOSED

Severity

CRITICAL

CVSS Base Score

9.9

WorkAround

Affected CVE

Product Release Advisory

Advisory ID:	TNZ-2025-0129
Severity:	Critical
Issue Date:	October 28, 2025
Updated on:	October 28, 2025
Synopsis	Many critical & high vulnerabilities were found in Valkey for Kubernetes 3.1.0, which is addressed in Valkey for Kubernetes 3.2.0

Product Version Release Advisory

VMware Tanzu for Valkey on Kubernetes

https://techdocs.broadcom.com/us/en/vmware-tanzu/data-solutions/tanzu-for-valkey-on-kubernetes/3-2/valkey-on-kubernetes/release-notes.html

Security Fixes

This release has the following security fixes, listed by component and area.

Component	Vulnerabilities Resolved
Valkey 3.1.0, fixed in Valkey 3.2.0	CVE-2025-49844 (critical) CVE-2025-46817 (critical) CVE-2025-46818 (high) CVE-2025-46819 (high) CVE-2025-4674 (high) CVE-2025-7425 (high) CVE-2025-32415 (high) CVE-2025-5914 (high) CVE-2025-47907 (high) CVE-2025-5222 (high) CVE-2025-47906 (medium) CVE-2022-29458 (medium) CVE-2025-32414 (medium) CVE-2025-8058 (medium)

History

2025-10-28: Initial vulnerability report published.

Contact

E-mail: [email protected]

VMware Tanzu Security Advisories: https://tanzu.vmware.com/security