“The journey of a thousand miles begins with one step.” – Lao Tzu
Jan 31 2025
VMware Tanzu Product Releases
In this section, we will add releases information on Tanzu Platform for Cloud Foundry, Tanzu Platform for Kubernetes, Tanzu Data Services, and Tanzu Spring Essentials Products that are part of Tanzu Platform and Standalone solutions along with its release date and release notes. (Note : Broadcom Support portal requires you to register)
Tanzu Product Downloads | KB article on How to Download Products | Tanzu Product Lifecycle (Select Tanzu Division to find Tanzu product releases) | Tanzu Product Documentation
| Product Name | Version | Release Date | Related Links |
| VMware Tanzu Platform Tanzu Platform for Cloud Foundry Fixes and Known issues are listed in Release Notes. Known as TAS earlier. | 10.0.2 4.0.32+LTS-T 6.0.12+LTS-T | 2025-02-03 | Release Notes Release Notes Release Notes |
| Tanzu Platform for Cloud Foundry Windows Fixes and Known issues are listed in Release Notes. Known as TASW earlier | 10.0.2 4.0.32+LTS-T 6.0.12+LTS-T | 2025-01-28 | Release Notes Release Notes Release Notes |
| Stemcells (Ubuntu Jammy) & Stemcells (Ubuntu Jammy Azure Light) Check Release Notes details | 1.737 1.737 (Azure Light) | 2025-01-30 | Release Notes |
| VMware Tanzu Kubernetes Grid Integrated Edition (TKGI) K8s distro that is deployed via Bosh and OpsManager in CF environments. Check Release Notes for Compatible component version details | 1.21.0 (CLI and Tile) 1.21.0 (Management Console) | 2025-01-27 | Release Notes |
| VMware Tanzu Data Solutions VMware Tanzu for Postgres Check Release Notes for Software Component Versions and Supported Platform details | 17.2.0 | 2025-01-31 | Release Notes |
| Tanzu Data Management Console (TDMC) With TDMC , you can create, manage, and use database services like PostgreSQL, RabbitMQ, MySQL, governed by centralized role-based access control. Its a one-stop solution for all your data services needs on a Kubernetes platform.Check Release Notes details | 1.0.0 (New !!!) | 2025-02-03 | Release Notes |
| VMware Tanzu Greenplum Minor release that includes new and changed features and resolves several issues. Check Release Notes for details | 7.4.0 | 2025-01-31 | Release Notes |
| Other Releases Tanzu Platform for Cloud Foundry isolation segment (ISO) Check Release Notes for Component version, Feature and Bug Fix details | 10.0.2 4.0.32+LTS-T 6.0.12+LTS-T | 2025-01-28 | Release Notes Release Notes Release Notes |
VMware Tanzu Product Security Updates
Within the release notes there may be security or governance specific updates that are worth highlighting. The Tanzu Security team reviews each release and summarizes security or governance specific highlights found within the release notes.
Tanzu Security Team Disclaimer:
The summary below is a review of the above product release notes from a security and governance point of view and may not reflect specific security or governance requirements you may require. It also does not include all details from the release notes. Please review the full release notes for release details.
VMware Tanzu Platform
Tanzu Platform for Cloud Foundry
- Security Fixes
- The following lists CVEs that were fixed since the previous patch version of Tanzu Platform for Cloud Foundry:
- java-offline-buildpack
- CVE-2024-47072
- CVE-2024-8184
- CVE-2024-52317
- CVE-2022-40151
- CVE-2024-35255
- CVE-2024-6763
- CVE-2022-41966
- nodejs-offline-buildpack
- CVE-2024-36138
- CVE-2024-22020
- backup-and-restore-sdk
- CVE-2024-10978
- CVE-2024-10977
- CVE-2024-10976
- CVE-2024-10979
- CVE-2024-7348
- push-apps-manager-release
- CVE-2015-8863
- CVE-2016-4074
- GHSA-f5x3-32g6-xq36
- CVE-2024-28863
- pxc
- CVE-2021-27928
- CVE-2020-26542
- php-offline-buildpack
- CVE-2024-9026
- CVE-2024-8927
- CVE-2024-8925
- CVE-2024-8926
- notifications
- CVE-2015-8863
- CVE-2016-4074
- otel-collector
- GHSA-mh55-gqvf-xfwm
- Bumped component versions: java-offline-buildpack, nodejs-offline-buildpack, backup-and-restore-sdk, push-apps-manager-release, pxc, php-offline-buildpacks, notifications, otel-collector
- Enable space auditors to view app autoscaling rules
- Explicitly set the allowed ciphers for diego ssh proxy.
- java-offline-buildpack
Tanzu Platform for Cloud Foundry Windows
- Security Fixes
- CVEs that were fixed since the previous patch version of Tanzu Platform for Cloud Foundry [Windows]:
- otel-collector
- GHSA-mh55-gqvf-xfwm
- GHSA-xr7q-jx4m-x55m
- diego
- CVE-2024-4067
- GHSA-29wx-vh33-7x7r
- CVE-2024-55565
- CVE-2024-4068
- CVE-2024-51744
- CVE-2023-44270
- otel-collector
- Bump component versions: otel-collector, diego
Stemcells (Ubuntu Jammy) & Stemcells (Ubuntu Jammy Azure Light)
- Disable cloud logging to avoid a bug in the current version of the google-guest-agent package
- USN-7218-1 – Python – Resolved 1 medium CVE
- USN-7220-1 – Vim – Resolved 1 medium CVE
- USN-7235-1 – Linux kernel – Resolved 3 medium, high CVEs
VMware Tanzu Kubernetes Grid Integrated Edition (TKGI)
- Bump components: Antrea, Cloud Providers-AWS/Azure/vSphere, Containerd, CoreDNS, etcd, Kubernetes, Metrics Sever, NCP, UAA, Velero
- TKGI v1.21.0 has no breaking changes.
- GMSA non_domain_joined configuration supports pods joining gMSA domain dynamically and independently from their host node.
- Enhances security for TKGI system pods by changing securityContext settings:
- Runs as non-root user
- Disables allowPrivilegeEscalation
- Drop unnecessary Capabilities
- Resolved the following issues:
- GMSA authentication failure after stemcell upgrade
- Authentication failure when attaching or detaching TMC clustres
- NSX-T errand fails when datacenter name includes a space
- Rotating NSX certificates behind HTTP/HTTPS proxy
- Upgrade times out when postgres nodes fail to train
- CSI bump fixes persistent volume attach failure
VMware Tanzu Data Solutions
VMware Tanzu for Postgres
- Component upgrades: PostgreSQL, pgBackRest, pg-auto_failover, psqlODBC, pgvector
Tanzu Data Management Console (TDMC)
- Initial Release
- Tanzu Data Management Console is a one-stop solution for all your data services needs on a Kubernetes platform.
- Data Service LCM: Full Life Cycle Management (LCM) operations for RabbitMQ, PostgreSQL, MySQL and Redis instances.
- Create, delete, update, backup and restore, monitoring, and CLI-based integration on a Kubernetes cluster.
- Runs on Kubernetes clusters, making it easy to install and manage.
- Custom fleet management dashboards give a birds-eye view of all service, data plane and resources consumption.
- Bulk updates capabilities for all services and data dataplane from one view
- Supports federation with external identity providers via LDAP.
- Complete user management backed by OAuth2.0 integration.
- Role-based access control for SRE (platform engineer), Admin, Developer, Viewer, Operator, and other personas.
- Policy-based access control for both TDMC and the data services it manages.
- Built-in log aggregation via Elasticsearch with Kibana dashboard.
- Built-in audit capabilities for key activities, accessible and exportable via dashboards.
VMware Tanzu Greenplum
- Tanzu Greenplum 7.4.0 introduces the gpmigrate utility to check major version compatibility between Tanzu Greenplum 6 and Greenplum 7 for gpbackup and gprestore migrations. This utility can also detect user defined objects in pg_catalog.
- Introduced a new check for removed GUCs set at the database or role level.
- Tanzu Greenplum 7.4.0 introduces a new view, gp_toolkit.gp_orphaned_backends, which lists all orphaned backend processes in the system.
- Tanzu Greenplum 7.4.0 introduces a new UDF advanced_password_check.role_password_status(rolname TEXT) to display the password creation time, expiration time, and the role’s valid until time.
- Tanzu Greenplum 7.4.0 introduces support for ssl_min_protocol_version in gpload for gpfdists connections via the configuration file.
- Enhanced logging by introducing a new log folder, /var/log/greenplum-7, to hold gpservice logs.
- Resolves a crash that occurred when starting or rebooting the cluster with a disk quota-enabled database containing over 10,000 tables.
- Resolves race conditions in autovacuum during temporary table cleanup.
- Resolves an issue with VACUUM of append-optimized tables that might cause incorrect SELECT results or PANIC errors.
- Resolves an issue where advanced_password_check would error out when changing a password for a role with the valid until time set to infinity or null.
Other Releases
Tanzu Platform for Cloud Foundry isolation segment (ISO)
- 10.0.2
- The following CVEs that were fixed since the previous patch version of Isolation Segment:
- otel-collector
- GHSA-mh55-gqvf-xfwm
- GHSA-xr7q-jx4m-x55m
- otel-collector
- Component bump: bpm, cf-networking, cflinux4, cf-cli, count-cores-indicator, diego, garden-runc, loggregator-agent, maps, nfs-volume, otel-collector, routing, silk, smb-volume, smoke-tests, syslog, tanzu-jammy-stack
- The following CVEs that were fixed since the previous patch version of Isolation Segment:
- 6.0.12
- The following CVEs that were fixed since the previous patch version of Isolation Segment:
- otel-collector
- GHSA-mh55-gqvf-xfwm
- GHSA-xr7q-jx4m-x55m
- otel-collector
- Component bump: bpm, cf-networking, cflinux3, cflinux4, garden-runc, loggregator-agent, maps, nfs-volume, otel-collector, routing, silk, smb-volume, syslog
- The following CVEs that were fixed since the previous patch version of Isolation Segment:
- 4.0.32
- Component bump: bpm, cf-networking, cflinux3, cflinux4, garden-runc, loggregator-agent, maps, metrics-discovery, nfs-volume, routing, silk, smb-volume, syslog
Check out the troubleshooting Tips and Resolutions on various Tanzu Products. This section is a great resource for you to bookmark and quickly prevent issues before pushing applications to Production.
Broadcom Portal – VIP AuthHub Sign-On is Now Live for Customers and Partners!
Broadcom Profile Authentication Technology Transition Notice – Broadcom Inc., is modifying our authentication technology and will require you to activate your account after the transition is complete on January 21, 2025. To complete the transition of your Broadcom Profile please follow the steps mentioned in this article.
VMware Tanzu Application Service (TAS)
VMware/Broadcom’s response to CVE-2024-50379, CVE-2024-54677, CVE-2024-56337 – Check the article for CVE report detail and fix version information.
cf-java-client Timeout Workaround – This article details a timeout error that may be experienced while pushing an app with cf-java-client.
VMware Tanzu Kubernetes Integrated Edition (TKGI)
How to reset the root password on a VMware Tanzu Kubernetes Grid Integrated Edition Management Console (TKGI MC) VM – This article explains how to reset the root password if it expires or is lost.
TKGi – OpsMan Certificates page not displaying certificates – In OpsMan UI, when viewing the Certificates tab it is advised that ‘No certificates found.’ and ‘To optimize deployment time please rotate expiring CA certificates prior to any leaf certificates.
Spring Updates
Spring Cloud Services for Tanzu Platform (Blog) by Michelle Sebek Spring Cloud Services for Cloud Foundry v3.3 is here! It provides new features and enhancements designed to improve your development and operational experience
VMware Tanzu
How many apps run in private cloud? (Video) by Michael Coté Private cloud is something like 40% to 60% of workloads, likely more in large organizations.
Speeding up your AI app ROI with Spring AI and Tanzu (Video) by Michael Coté The cost of AI is dropping, and with Spring AI and Tanzu, Java-based apps can start leveraging AI today—just focus on the right frameworks and platforms.
Cloud Foundry Weekly Series – Subscribe | RSS Feed
Deploying Deepseek-r1 in your Datacenter : Cloud Foundry Weekly : Ep 43– (Video) Nick Kuhn Are you trying to make sense of all the AI news around deepseek-r1? Well, then join the show this week to get a deep dive on how to deploy deepseek-r1 in your datacenter running on the Tanzu Platform for Cloud Foundry
Upcoming Events and Webinars sorted in Date order below for your convenience with relevant links and information for you to not miss these key happenings.
DevNexus | March 4-6, 2025 | Atlanta, GA
Celebrating 30 years of Java at DevNexus 2025! Join us for the world’s largest Java Ecosystem Conference. VMware Tanzu is proud to be a platinum sponsor—don’t miss the innovation, insights, and community!
Spring Podcasts/ Office Hours
A Bootiful Podcast: HTMX creator Carson Gross In this installment , Talk to hypermedia enjoyer Carson Gross, creator of the ever popular HTMX library which eschews a ton of the complexity associated with building client side applications.
S4E3 – Java Without Spring: Understanding the Spring Advantage Join Dan Vega and DaShaun Carter as they explore Java development outside the Spring ecosystem. In this insightful episode, they’ll demonstrate what Spring Boot provides out of the box and how these features compare to traditional Java development approaches.
Tanzu What’s New Series – Weekly Tanzu digest on Tanzu product Releases, KB Articles, Success Stories, Updates, Blogs, Videos & More – has been moved to a New Home Tanzu Blogs. You can also Subscribe for this weekly update on the official VMWare Tanzu Linked In Newsletter Now!!!! We now have 11k + subscribers and growing!!
Tanzu Academy – An on-demand, comprehensive learning hub for platform and application operators to become experts at achieving meaningful outcomes with Tanzu products.
Tanzu Fundamentals (Videos)
Tanzu Webinars – New home
Tanzu Blogs – Migration still in progress , some old blogs may not redirect to new home
Spring by VMware Tanzu Blog – Find all Spring updates, events, podcasts and more | Spring Office Hours
Spring Academy – The new Spring Academy Pro FREE is live! Check out the details here
Tanzu Documentation – Tanzu Platform | Tanzu Data Solutions | Tanzu Platform Services | Tanzu Spring | Tanzu Standalone Components | Reference Architectures
Tanzu Hands on Labs (HOL) – Self Paced Labs to try hands on Tanzu Products
