Ce mail provient de l'extérieur, restons vigilants

=====================================================================

                            CERT-Renater

                Note d'Information No. 2025/VULN395
_____________________________________________________________________

DATE                : 25/06/2025

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running VMware Tanzu products.

=====================================================================
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35857
_____________________________________________________________________

Product Release Advisory - VMware Tanzu for Valkey 8.0.2, 7.2.9
Product/Component

VMware Tanzu Data Services
VMware Tanzu Data Services Solutions
VMware Tanzu Data Suite
VMware Tanzu Platform
Vmware Tanzu Platform - SM
VMware Tanzu Redis 


Notification Id
35857

Last Updated
24 June 2025

Initial Publication Date
24 June 2025

Status
CLOSED

Severity
HIGH

CVSS Base Score

WorkAround

Affected CVE
See CVE list in advisory

Security Advisory

Advisory ID:
TNZ-2025-0038

Severity:
High

Issue Date:
June 24, 2025

Updated on:
June 24, 2025


Synopsis
	

1 major vulnerability was found in Valkey v7.2.8 and v8.0.2, which
is addressed in Valkey v7.2.9 and v8.0.3 regarding limit output
buffer for unauthenticated clients.


Product Version Release Advisory

    VMware Tanzu for Valkey
        https://techdocs.broadcom.com/us/en/vmware-tanzu/data-solutions/tanzu-valkey/7-2/tanzu-valkey-docs/release-notes.html 
        https://techdocs.broadcom.com/us/en/vmware-tanzu/data-solutions/tanzu-valkey/8-0/tanzu-valkey-docs/release-notes.html 

Security Fixes

This release has the following security fixes, listed by component and area.


Component       Vulnerabilities Resolved

Valkey          CVE-2025-21605 

 

History
2025-06-24: Initial vulnerability report published.

Contact
E-mail: tanzu.psirt@broadcom.com

VMware Tanzu Security Advisories
https://tanzu.vmware.com/security



=========================================================
+ CERT-RENATER        |    tel : 01-53-94-20-44         +
+ 23/25 Rue Daviel    |    fax : 01-53-94-20-41         +
+ 75013 Paris         |   email:cert@support.renater.fr +
=========================================================