VMware security advisory (AV25-860)

Serial number: AV25-860
Date: December 23, 2025

Between December 15 and 21, 2025, VMware published security advisories to address vulnerabilities in multiple Tanzu products:

  • .NET Core Tanzu Buildpack – version prior to 2.4.71 and 2.4.72
  • Cloud Native Buildpacks for VMware Tanzu Platform – versions prior to 0.6.1
  • Elastic Application Runtime for VMware Tanzu Platform – versions prior to 10.2.6+LTS-T, 10.3.2 and 6.0.23+LTS-T
  • Extended App Support for Tanzu Platform – version prior to 1.0.11

The Cyber Centre encourages users and administrators to review the provided web link and apply the necessary updates.

Date modified: