“The achievement of one goal should be the starting point of another”- Alexander Graham Bell
March 7, 2025
VMware Tanzu Product Releases
In this section, we will add releases information on Tanzu Platform for Cloud Foundry, Tanzu Platform for Kubernetes, Tanzu Data Services, and Tanzu Spring Essentials Products that are part of Tanzu Platform and Standalone solutions along with its release date and release notes. (Note : Broadcom Support portal requires you to register)
Tanzu Product Downloads | KB article on How to Download Products | Tanzu Product Lifecycle (Select Tanzu Division to find Tanzu product releases) | Tanzu Product Documentation
Note: Broadcom Support Portal – Download – Access changes
Tanzu Entitlement Requirements for Support Portal Download – To support the transition from Tanzu Network to Broadcom’s Customer Support Portal, product downloads were initially configured as accessible to all users. Starting March 3rd 2025, downloads will be only accessible to entitled users. After this date, users will only be able to view products they are entitled to download in the `My Downloads` section of Support Portal. Free products will be accessible via a hyperlink at the top of that page. Non-entitled products will not display in `My Downloads` and users will see a `Not Entitled` response via Tanzu Network API when attempting to generate a download link.
| Product Name | Version | Release Date | Related Links |
| VMware Tanzu Platform Stemcells (Ubuntu Jammy) Stemcells (Ubuntu Jammy FIPS) Stemcells (Ubuntu Jammy Azure Light) Check Release Notes for details | 1.785 1.785 1.785 | 2025-03-06 | Release Notes |
| VMware Tanzu Data Solutions VMware Tanzu Postgres Check Release Notes for details | 17.4.0 16.8.0 15.12.0 14.17.0 13.20.0 | 2025-02-28 | Release Notes Release Notes Release Notes Release Notes Release Notes |
| VMware Tanzu for Valkey Check Release Notes for details | 8.0.2 7.2.8 | 2025-03-06 | Release Notes |
| Other Releases IPsec for VMware Tanzu Check Release Notes on Maintenance change details. | 1.9.66 | 2025-03-05 | Release Notes |
VMware Tanzu Product Security Updates
Within the release notes there may be security or governance specific updates that are worth highlighting. The Tanzu Security team reviews each release and summarizes security or governance specific highlights found within the release notes.
Tanzu Security Team Disclaimer:
The summary below is a review of the above product release notes from a security and governance point of view and may not reflect specific security or governance requirements you may require. It also does not include all details from the release notes. Please review the full release notes for release details.
VMware Tanzu Platform
Stemcells (Ubuntu Jammy)
Stemcells (Ubuntu Jammy FIPS)
Stemcells (Ubuntu Jammy Azure Light)
- USN-7306-1 – GNU binutils – Resolved 2 medium CVEs
- USN-7314-1 – Kerberos – Resolved 4 medium,negligible,low CVEs
- USN-7327-1 – Linux kernel – Resolved 1 high CVE
VMware Tanzu Data Solutions
VMware Tanzu Postgres
- This release introduces three new UDFs to manage password policy for role.
- The changes made for CVE-2025-1094 had one serious oversight: PQescapeLiteral() and PQescapeIdentifier() failed to honor their string length parameter, instead always reading to the input string’s trailing null. This resulted in including unwanted text in the output, if the caller intended to truncate the string via the length parameter. With very bad luck it could cause a crash due to reading off the end of memory.
- Fix small memory leak in pg_createsubscriber (Ranier Vilela
VMware Tanzu Valkey
- This is the first GA release of Tanzu for Valkey. For an overview of this product, see Overview of Tanzu for Valkey
Known Vulnerabilities
- Valkey v7.2.6 has the following vulnerabilities that were addressed in Valkey v7.2.8:
- CVE-2024-31449 Lua library commands can be
- CVE-2024-31227 Potential Denial-of-service due to malformed ACL selectors.
- CVE-2024-31228 Potential Denial-of-service due to unbounded pattern matching.
- CVE-2024-46981 Lua script commands can lead to remote code execution.
- CVE-2024-51741 Denial-of-service due to malformed ACL selectors.
- Valkey v8.0.1 has the following vulnerabilities that were addressed in Valkey v8.0.2:
- CVE-2024-46981 Lua script commands can lead to remote code execution.
- CVE-2024-51741 Denial-of-service because of malformed ACL selectors.
Other Releases
IPsec for VMware Tanzu
- This is a maintenance release
- OpenSSL: Upgraded to v3.4.1
Check out the troubleshooting Tips and Resolutions on various Tanzu Products. This section is a great resource for you to bookmark and quickly prevent issues before pushing applications to Production.
Broadcom Support Portal – Tanzu Network automation tools
Tanzu Network to Broadcom’s Customer Support Portal Transition – Automation Impact – Starting on June 24th 2024, all on-premise Tanzu products will be distributed on Broadcom’s Customer Support Portal (https://support.broadcom.com). The impact to Tanzu Network automation tools is clarified in this article.
VMware Tanzu Application Service (TAS)
Upgrading Tanzu Application Service fails with Unexpected EOF during uploading releases – When upgrading from TAS. In this example we are upgrading from v4.0.32LTS to v6.0.12. Upgrade/Deployment fails with the following error. Check the article for details.
Certificate expiration warning still shown on Grafana post successful certificate rotation – The certificates on TAS foundation are rotated successfully. However, a warning is still shown on Grafana for some certificates although the new expiration date of the certificate is several years away. Check the article for cause and resolution details.
delete-orphaned-routes cf cli command fails with unknown error – The foreign key constraint error is triggered because the orphaned route has a label associated with it and the delete-orphaned-routes cli command is not checking and deleting the labels prior to deleting the route.
VMware Tanzu Kubernetes Grid Integrated Edition (TKGI)
Large number of velero backups could lead to kube-api load and high memory consumption – During upgrade of a cluster the control plane VMs suddenly started going into failing state due to kube-api service running out of memory (consuming all available memory on the control planes). Check the article for details.
Configure custom kernel parameter needed to run elasticsearch on TKGi cluster – This article includes steps to configure custom kernel parameter for elasticsearch pods/app running on worker node of TKGi cluster.
Tanzu Platform
Use Tanzu Platform to Optimize Troubleshooting and Improve Capacity Planning (Blog) Rachna Srivastava Tanzu Platform recently introduced a common control plane and user interface for application deployment.
AI Agents: Why Workflows Are the LLM Use Case to Watch (Blog) Jonathan Eyler-Werve The agentic app revolution isn’t a transformation story. It’s a modernization story; a chance to solve small problems with the team you already have.
Spring Updates
Supercharge Spring Apps with Zero Effort: Automatic AOT Optimizations in Tanzu Platform (Blog) Sebastien Deleuze & Michelle Sebek Tanzu Platform continues to raise the bar in simplifying cloud-native app deployments with its latest update, enhancing performance and introducing new capabilities for developers using the Java buildpack.
Getting started with Spring Cloud Gateway Extensions (Blog) Fredrich Obmico Spring Cloud Gateway is a battle-tested, production-proven API gateway that delivers scalable, secure, and high-performance traffic management for modern applications.
This Week in Spring – March 4, 2025 (Blog) Josh Long Let’s dive into this week’s roundup!
Tanzu GemFire
Redundancy, Free Capacity, and Example Calculations (Blog) Charlie Black Welcome to the second blog in our Tanzu GemFire sizing series. In part 2 we will be covering the recommended levels of redundancy, the importance of maintaining free capacity, and a straightforward sizing example you can adapt to your own environment. Part 1
Cloud Foundry Weekly Series – Subscribe | RSS Feed
Zero to Hero with Spring AI: Part Two – Cloud Foundry Weekly : Ep 48 – (Video) Nick Kuhn and Nicky Pike with Adib Saikali covering his Zero to Hero class on Spring AI! We will also continue to show how easy it is to expand and empower Java developers on the platform using Spring AI to jumpstart intelligent app development using Cloud Foundry and our GenAI tile.
Upcoming Events and Webinars sorted in Date order below for your convenience with relevant links and information for you to not miss these key happenings.
Tanzu Data Management Console | March 12,2025 | 10am PST
Simplifying Database Operations with Tanzu Data Management Console – Register Now – Join Ivan Novick and Skand Purohit from Broadcom for a webinar on Tanzu Data management console, where we’ll explore how it simplifies database operations with a unified control plane.
Spring Podcasts/ Office Hours
A Bootiful Podcast: Johannes Bechberger, Java engineer at SAP In this installment Josh talks to Johannes Bechberger, Java engineer working on profilers and their underlying technology in the SapMachine team at SAP.
Tanzu What’s New Series – Weekly Tanzu digest on Tanzu product Releases, KB Articles, Success Stories, Updates, Blogs, Videos & More – You can also Subscribe for this weekly update on the official VMWare Tanzu Linked In Newsletter Now!!!! We now have 11k + subscribers and growing!!
Tanzu Academy – An on-demand, comprehensive learning hub for platform and application operators to become experts at achieving meaningful outcomes with Tanzu products.
Tanzu Fundamentals (Videos)
Tanzu Webinars – New home
Tanzu Blogs – All Tanzu blogs will be here
Spring by VMware Tanzu Blog – Find all Spring updates, events, podcasts and more | Spring Office Hours
Spring Academy – The new Spring Academy Pro FREE is live! Check out the details here
Tanzu Documentation – Tanzu Platform | Tanzu Data Solutions | Tanzu Platform Services | Tanzu Spring | Tanzu Standalone Components | Reference Architectures
Tanzu Hands on Labs (HOL) – Self Paced Labs to try hands on Tanzu Products
