Support Content Notification - Support Portal

Product Release Advisory - Stemcells (Ubuntu Jammy) 1.906.x - jammy-stemcell-openstack

Product/Component

Tanzu Kubernetes Runtime

7 more products

Notification Id

36420

Last Updated

06 November 2025

Initial Publication Date

06 November 2025

Status

CLOSED

Severity

HIGH

CVSS Base Score

WorkAround

N/A

Affected CVE

See CVE list in advisory

Product Release Advisory - Stemcells (Ubuntu Jammy) 1.906.x

	Highest Score CVE from list below advisory details
Severity	High
CVSS V4 Vector	Unavailable
CVSS V4 Score	Unavailable (Sev: Unavailable)
CVSS V3.1 Vector	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS V3.1 Score	8.4 (Sev: HIGH)
CVSS V2 Vector	Unavailable
CVSS V2 Score	Unavailable (Sev: Unavailable)

Note: if cvss scores are "Unavailable" is most likely due to the vulnerability being GHSA or BDSA without a matching CVE for nvd lookup.

Product Version Release Advisory

Security Fixes: This release has the following security fixes, listed by component.

Component	Vulnerabilities Resolved
jammy-stemcell-openstack	CVE-2024-27407 (High) CVE-2025-8677 (Medium) CVE-2025-6170 (Medium) CVE-2025-6021 (Medium) CVE-2025-49796 (Medium) CVE-2025-49794 (Medium) CVE-2025-40780 (Medium) CVE-2025-40778 (Medium) CVE-2025-38350 (Medium) CVE-2025-38079 (Medium) CVE-2025-38078 (Medium) CVE-2025-38077 (Medium) CVE-2025-38075 (Medium) CVE-2025-38072 (Medium) CVE-2025-38068 (Medium) CVE-2025-38066 (Medium) CVE-2025-38065 (Medium) CVE-2025-38061 (Medium) CVE-2025-38058 (Medium) CVE-2025-38052 (Medium) CVE-2025-38051 (Medium) CVE-2025-38048 (Medium) CVE-2025-38044 (Medium) CVE-2025-38043 (Medium) CVE-2025-38037 (Medium) CVE-2025-38035 (Medium) CVE-2025-38034 (Medium) CVE-2025-38031 (Medium) CVE-2025-38004 (Medium) CVE-2025-38003 (Medium) CVE-2025-37752 (Medium) CVE-2024-57996 (Medium) CVE-2023-4039 (Low)

Component

Vulnerabilities Resolved

jammy-stemcell-openstack