Product Release Advisory - VMware Tanzu GemFire 10.1.5
Product Release Advisory
|
Advisory ID: |
TNZ-2025-0228 |
|
Severity: |
High |
|
Issue Date: |
2025-11-18 |
|
Updated on: |
2025-11-18 |
|
Synopsis |
Bumped multiple dependencies, which resulted in at least 5 CVEs remediated in this release |
Product Version Release Advisory
- VMware Tanzu GemFire 10.1.5
Security Fixes
This release has the following security fixes, listed by component and area.
|
Component |
Vulnerabilities Resolved |
|
Jetty |
CVE-2025-5115 (high) |
|
Netty |
CVE-2025-58056 (low) CVE-2025-59419 (medium) |
|
Spring Framework |
CVE-2025-41254 (medium) |
History
2025-11-18 Initial vulnerability report published.
Contact
E-mail: [email protected]
VMware Tanzu Security Advisories
https://tanzu.vmware.com/security