Ref# ADV2025_450 | Date: Dec 24th 2025

---

VMware has published a security advisory addressing vulnerabilities in several Tanzu products between December 15^th – December 21^st, 2025. It is recommended that you take the necessary precautions by ensuring your products are always updated.

• .NET Core Tanzu Buildpack – version prior to 2.4.71 and 2.4.72
• Cloud Native Buildpacks for VMware Tanzu Platform – versions prior to 0.6.1
• Elastic Application Runtime for VMware Tanzu Platform – versions prior to 10.2.6+LTS-T, 10.3.2 and 6.0.23+LTS-T
• Extended App Support for Tanzu Platform – version prior to 1.0.11

For more information on these updates, you can follow this URL:

• Security Advisories – Tanzu

The Guyana National CIRT recommends that users and administrators review these updates and apply them where necessary.

PDF Download:  VMware Security Advisory

References

• VMware Security Advisory. (December 23, 2025). Retrieved from Canadian Centre for Cyber Security.
  https://www.cyber.gc.ca/en/alerts-advisories/vmware-security-advisory-av25-860
• Tanzu Security Advisory. (n.d.). Retrieved from Broadcom. https://support.broadcom.com/web/ecx/security-advisory?segment=VT