Ref# ADV2026_49 | Date: Feb 6th 2026

---

VMware published a security advisory highlighting vulnerabilities in the following products between January 26 and February 1, 2026. It is recommended that you take the necessary precautions by ensuring your products are always updated. 

• Platform Services for VMware Tanzu Platform – versions prior to 10.3.4 

• Python Buildpack – versions prior to 1.8.71 and 1.8.75 

• Ruby Buildpack – versions prior to 1.10.53 

• Service Publisher for VMware Tanzu Platform – versions prior to 10.3.4 

• Stemcells (Ubuntu Jammy FIPS) – versions prior to 1.1016.x 

• Stemcells (Ubuntu Noble) – versions prior to 1.188.x 

• Stemcells (Windows) – versions prior to 2019.94.x 

• Tanzu Hub – versions prior to 10.3.4 

For more information on these updates, you can follow this URL: 

• Security Advisories – Tanzu 

 

The Guyana National CIRT recommends that users and administrators review these updates and apply them where necessary. 

References 

• VMware Security Advisory (February 2nd, 2026). Retrieved from VMware. https://support.broadcom.com/web/ecx/security-advisory?segment=VT 

• VMware Security Advisory (February 2nd, 2026). Retrieved from Canadian Centre for Cyber Security. https://www.cyber.gc.ca/en/alerts-advisories/vmware-security-advisory-av26-075