|
"The only way to do great work is to love what you do." - Steve Jobs
VMware Tanzu Product Releases
In this section, we will add releases information on Tanzu Platform for Cloud Foundry, Tanzu Platform for Kubernetes, Tanzu Data Services, and Tanzu Spring Essentials Products that are part of Tanzu Platform and Standalone solutions along with its release date and release notes.
(Note : Broadcom Support portal requires you to register)
Tanzu Product Downloads | KB article on How to Download Products | Tanzu Product Lifecycle (Select Tanzu Division to find Tanzu product releases)
VMware Tanzu Product Security Updates
Within the release notes there may be security or governance specific updates that are worth highlighting. The Tanzu Security team reviews each release and summarizes security or governance specific highlights found within the release notes.
Tanzu Security Team Disclaimer:
The summary below is a review of the above product release notes from a security and governance point of view and may not reflect specific security or governance requirements you may require. It also does not include all details from the release notes. Please review the full release notes for release details.
VMware Tanzu Platform for Cloud Foundry
Tanzu Application Service for VMs (TAS)
This release is affected by a known issue for customers who use both Postgres for the TAS for VMs database and TCP Routes. Users who use both Postgres and TCP Routes should not upgrade to this version. This only applies if Postgres is used for the core Cloud Foundry databases, not if apps use Postgres services.
- Updated versions and dependent components:
- backup-and-restore-sdk, binary-offline-buildpack, bmp, capi, cf-autoscale, cf-cli, cf-networking, cflinux4, credhub, dotnet-core-offline-buildpack, go-offline-buildpack, log-cache, loggregator-agent, metric-registrar, metrics-discovery, nfs-volume, nginx-offline-buildpack, nodejs-offline-buildpack, notifications, notifications-ui, php-offline-buildpack, push-apps-manager-release, push-usage-service-release, pxc, python-offline-buildpack, ruby-offline-buildpack, web-servers-cnb-buildpack, silk, smb-volume, staticfile-offline-buildpack, statsd-injector, system-metrics-scraper, uaa
Tanzu Application Service for VMs [Windows] (TASW)
- Updated versions and dependent components:
- hwc-offline-buildpack, loggregator-agent, metrics-discovery, windows-syslog
Isolation Segment (ISO)
- This release is affected by a known issue for customers who use both Postgres for the TAS for VMs database and TCP Routes. Users who use both Postgres and TCP Routes should not upgrade to this version. This only applies if Postgres is used for the core Cloud Foundry databases, not if apps use Postgres services.
- Updated versions and dependent components:
- bpm, cf-networking, cflinux4, cf-cli, loggregator-agent, metrics-discovery, nfs-volume, silk, smb-volume
Telemetry for VMware Tanzu [VMs]
- Corrects bug that prevented operational data from sending; any customers that were not seeing Operational Data appear in their report should upgrade to this new version
- Corrects a bug where our agent would log more often than necessary
Ubuntu Jammy Stemcell (TAS, TKGI, Jammy based tiles)
- USN-6910-1: Apache ActiveMQ 12 medium CVEs resolved
- USN-6919-1: Linux kernel 292 high,medium,low,unknown CVEs resolved
- USN-6917-1: Linux kernel 149 high,medium,low,unknown CVEs resolved
- USN-6898-3: Linux kernel kernel 148 high,medium,low CVEs resolved
- USN-6898-2: Linux kernel 144 high,medium,low CVEs resolved
- USN-6913-1: phpCAS 1 medium CVEs resolved
- USN-6914-1: OCS Inventory 1 medium CVEs resolved
- USN-6905-1: Rack 4 medium CVEs resolved
- USN-6900-1: Linux kernel 104 high,medium,low CVEs resolved
- USN-6895-2: Linux kernel 100 high,medium,low CVEs resolved
- USN-6895-3: Linux kernel 100 high,medium,low,unknown CVEs resolved
- USN-6909-1: Bind 8 medium CVEs resolved
- USN-6923-1: Linux kernel 6 high,medium CVEs resolved
- USN-6907-1: Squid 1 medium CVE resolved
- USN-6902-1: Apache HTTP Server 1 medium CVE resolved
- USN-6911-1: Nova 1 medium CVE resolved
- USN-6906-1: python-zipp 1 medium CVE resolved
- USN-6904-1: PyMongo 1 medium CVE resolved
- USN-6903-1: Thunderbird 10 medium CVEs resolved
- USN-6899-1: GTK 1 medium CVE resolved
VMware Tanzu Platform for Kubernetes
VMware Tanzu Application Platform (TAP)
- Known Issues (not all issues, please see release notes for full list):
- TAP 1.11.1 - Upgrading from v1.8.x, v1.9.x, or v1.10.x to Tanzu Application Platform v1.11 might fail initially on the Build profile, but will reconcile automatically within a few seconds. There is no current workaround.
- The Tanzu Application Platform integration with Tanzu Service Mesh does not work on vSphere with TKR v1.26.
- Supply Chain Security Tools - Policy defaults to The Update Framework (TUF) enabled due to incorrect logic.
- The Snyk scanner outputs an incorrectly created date, resulting in an invalid date.
- Recurring scan has a maximum of approximately 5000 container images that can be scanned at a single time due to size limits configMaps.
- If the supply-chain container image-scanning is configured to use a different scanner or scanner version than the recurring scan, the vulnerabilities displayed in Tanzu Developer Portal might be inaccurate.
- SCST - Scan 1.0 fails with the error secrets 'store-ca-cert' not found during deployment by using Tanzu Mission Control with a non-default issuer.
- When uninstalling Tanzu Application Platform v1.11, the removal of the scanning package can get stuck because of a failed namespace deletion in the scanning package.
- When outputting CycloneDX v1.5 SBOMs, the report is found to be an invalid SBOM by CycloneDX validators.
- Ad-blocking browser extensions and standalone ad-blocking software can interfere with telemetry collection within the VMware Customer Experience Improvement Program and restrict access to all or parts of Tanzu Developer Portal.
- TAP 1.11.1 has the following security fixes, see release notes for full CVE listing:
- application-configuration-service.tanzu.vmware.com: 9 CVEs resolved
- aws.service.tanzu.vmware.com: 14 CVEs resolved
- base-jammy-stack-lite.buildpacks.tanzu.vmware.com: 3 CVEs resolved
- conventions.component.apps.tanzu.vmware.com: 267 CVEs resolved
- crossplane.tanzu.vmware.com: 15 CVEs resolved
- developer-conventions.tanzu.vmware.com: 17 CVEs resolved
- managed-resource-controller.apps.tanzu.vmware.com: 5 CVEs resolved
- source.component.apps.tanzu.vmware.com: 154 CVEs resolved
- spring-cloud-gateway.tanzu.vmware.com: 15 CVEs resolved
- sso.apps.tanzu.vmware.com: 4 CVEs resolved
- supply-chain.apps.tanzu.vmware.com: 4 CVEs resolved
- tap-gui.tanzu.vmware.com: 1224 CVEs resolved
- tekton.tanzu.vmware.com: 11 CVEs resolved
- TAP 1.8.6 has the following security fixes, see release notes for full CVE listing:
- amr-observer.apps.tanzu.vmware.com: 8 CVES resolved
- apis.apps.tanzu.vmware.com: 17 CVEs resolved
- application-configuration-service.tanzu.vmware.com: 9 CVEs resolved
- aws.services.tanzu.vmware.com: 7 CVEs resolved
- base-jammy-stack-lite.buildpacks.tanzu.vmware.com: 3 CVEs resolved
- conventions.component.apps.tanzu.vmware.com: 267 CVEs resolved
- crossplane.tanzu.vmware.com: 16 CVEs resolved
- developer-conventions.tanzu.vmware.com: 18 CVEs resolved
- dotnet-core-lite.buildpacks.tanzu.vmware.com: 6 CVEs resolved
- git-writer.component.apps.tanzu.vmware.com: 153 CVEs resolved
- go-lite.buildpacks.tanzu.vmware.com: 5 CVEs resolved
- managed-resource-controller.apps.tanzu.vmware.com: 6 CVEs resolved
- metadata-store.apps.tanzu.vmware.com: 7 CVEs resolved
- nodejs-lite.buildpacks.tanzu.vmware.com: 6 CVEs resolved
- python-lite.buildpacks.tanzu.vmware.com: 15 CVEs resolved
- ruby-lite.buildpacks.tanzu.vmware.com: 4 CVEs resolved
- service-registry.spring.apps.tanzu.vmware.com: 17 CVEs resolved
- source.component.apps.tanzu.vmware.com: 154 CVEs resolved
- spring-cloud-gateway.tanzu.vmware.com: 18 CVEs resolved
- sso.apps.tanzu.vmware.com: 4 CVEs resolved
- supply-chain-catalog.apps.tanzu.vmware.com: 156 CVEs resolved
- supply-chain.apps.tanzu.vmware.com: 6 CVEs resolved
- TAP 1.7.10 has the following security fixes, see release notes for full CVE listing:
- amr-observer.apps.tanzu.vmware.com: 8 CVEs resolved
- base-jammy-stack-lite.buildpacks.tanzu.vmware.com: 3 CVEs resolved
- cert-manager.tanzu.vmware.com: 7 CVEs resolved
- crossplane.tanzu.vmware.com: 27 CVEs resolved
- dotnet-core-lite.buildpacks.tanzu.vmware.com: 5 CVEs resolved
- go-lite.buildpacks.tanzu.vmware.com: 19 CVEs resolved
- metadata-store.apps.tanzu.vmware.com: 32 CVEs resolved
- nodejs-lite.buildpacks.tanzu.vmware.com: 3 CVEs resolved
- python-lite.buildpacks.tanzu.vmware.com: 16 CVEs resolved
- ruby-lite.buildpacks.tanzu.vmware.com: 5 CVEs resolved
- service-registry.spring.apps.tanzu.vmware.com: 27 CVEs resolved
- spring-cloud-gateway.tanzu.vmware.com: 18 CVEs resolved
- sso.apps.tanzu.vmware.com: 5 CVEs resolved
- web-servers-lite.buildpacks.tanzu.vmware.com: 12 CVEs resolved
VMware Tanzu Data Solutions
VMware Tanzu Greenplum®
- VMware Greenplum 7.3.0 now supports viewing tables that failed to redistribute and tables that have been dropped.
- The Greenplum package utility gppkg has been updated to version 2.2.1.
- VMware Greenplum 7.3.0 is a minor release.
VMware Tanzu GemFire for Kubernetes
- The Tanzu GemFire Operator now supports zone-aware scheduling, which allows data in the GemFire cluster to be distributed across different zones using the redundancy-zone GemFire property.
- The Tanzu GemFire Operator now supports resizing of Persistent Volumes if the underlying storage class permits it.
VMware Tanzu Platform Spring Essentials
Spring Cloud Services for VMware Tanzu
- The following dependencies are upgraded in this release.
- Spring Boot to 3.3.2
- Spring Cloud to 2023.0.3
- Spring Cloud Open Service Broker to 4.3.0
- Spring Cloud App Broker to 2.3.0
- Spring CredHub to 3.3.0
- Cloud Foundry Java Client to 5.12.2
- PXC (MySQL) to 1.0.30
- Routing to 0.301.0
- Backup and Restore SDK to 1.19.22
- BPM to 1.2.23
- OpenJDK to 17.0.11
- Git to 2.45.2
Check out the troubleshooting Tips and Resolutions on various Tanzu Products. This section is a great resource for you to bookmark and quickly prevent issues before pushing applications to Production.
VMware Tanzu Platform for Cloud Foundry
VMware Tanzu Application Service (TAS)
Telemetry Tile v2.1.4 Upgrade Bug: Usage Service Data Collection Issue and Resolution - In this article, we address a critical bug in the Telemetry for VMware Tanzu [VMs] v2.1.4 that affects the collection of Usage Service data. This bug impacts customers who have upgraded to version 2.1.4 and have opted into collecting Operational Data.
How to Obtain pcap For Windows Diego Cell Container - This article describes the "how to" for capturing network traffic for a container located on a Windows Diego Cell.
Org Quota Usage appears incorrect for a space in Apps Manager - This article provides awareness of what is using org memory and disk resources in TAS. This article also provides methods and tools to locate the spaces and applications to which these processes and tasks belong.
VMware Tanzu Platform
Analyzing the ‘State of Cloud Native App Platforms’ report with the Tanzu Vanguards - (Blog) Rita Manachi and Darin Zook This report (and its State of Kubernetes predecessor) annually helps readers understand what their peers are doing, what they’re most challenged by and how they’re addressing their most demanding needs.
Cloud Foundry in Action: Real Customers Stories from Cloud Foundry Day - (Blog) Mia Villarreal Provisioning your applications in less than 10 minutes might seem like a fantasy, but this is a reality our customers experience consistently using Tanzu Platform. Live Recording of the podcast here.
Cloud Foundry Weeklies Series - Subscribe | RSS Feed
Cloud Foundry Weekly: tPCF Hidden Superpowers, Save $$ with java native images : Ep 21 - (Video) Nicky Pike, Nick Kuh, Mark Fynes joins the show to explore how to save money and resources with hidden superpowers within the Tanzu Platform for Cloud Foundry and java native images and droplets!
Cloud Foundry Weekly: Into the DMZ: Crowdstrike Edition: Ep 22 - (Video) Nicky Pike, Nick Kuhn, David Zendzian (aka DMZ) will join the show to continue our mini-series on security, now titled "Into the DMZ." Based on the popular chat from episode 20, we will deep-dive into the Crowdstrike incident and other security-related topics.
VMware Tanzu Spring Essentials
VMware Tanzu Spring
Unleashing the Power of Spring and AI at SpringOne 2024 - (Blog) Josh Long Checkout a cool trick to create an instant blog and exciting updates on SpringOne 2024.
Other Tanzu Platform Services
VMware Tanzu CloudHealth
The New CloudHealth Experience & the Operate Phase of the FinOps Framework - (Blog) TJ March This week, I am jumping into how the new user experience aligns with the modern FinOps Practitioner during the Operate Phase.
Upcoming Events and Webinars sorted in Date order below for your convenience with relevant links and information for you to not miss these key happenings.
VMware Tanzu Platform for Cloud Foundry
Aug 20 - Sneak Peek of VMware Explore feat. Tanzu Platform for Cloud Foundry - Join us for an exclusive webinar as we dive into the latest advancements in Tanzu Platform for Cloud Foundry, the exciting launch of our GenAI Beta, and a sneak peek into the upcoming VMware Explore sessions and tutorials.
VMware Tanzu Platform
Aug 21 - AI FOMO? Don’t miss a thing with Spring and GenAI on Tanzu Platform - Join us for an insightful discussion with experts covering perspectives across platform engineering, app dev, and line of business. We'll share the latest trends and essential considerations to help you execute on a comprehensive AI strategy quickly, without having to learn new skills and patterns.
VMware Explore 2024 AUGUST 26 – 29, 2024
Aug 26 -VMware Explore 2024 - Map your next move at the industry’s essential cloud event. Don’t delay. FAQ , Agenda, Content Catalog Spring One In person event at Explore 2024
Don't miss these VMware Tanzu sessions at Explore 2024 (Blog) with session highlights
Spring One Virtual Event AUGUST 26 – 28, 2024 (Virtual)
Spring One in person at VMware Explore details mentioned above. Or Register to Join Virtual Live Stream here Check Spring Session listed above. We're bringing the cool of Spring to everyone! It's a celebration of Spring's power in simplifying your production experience. Don’t miss the opening KeyNote
Tanzu What's New Series - Weekly Tanzu digest on Tanzu product Releases, KB Articles, Success Stories, Updates, Blogs, Videos & More. RSS feed is also available. You can also Subscribe for this weekly update on the official VMWare Tanzu Linked In Newsletter Now!!!! We now have 10k+ subscribers.
Tanzu Academy - An on-demand, comprehensive learning hub for platform and application operators to become experts at achieving meaningful outcomes with Tanzu products. Checkout the Academy account management changes and Broadcom login required information in the Blog section.
Spring Academy - The new Spring Academy Pro FREE is live! Check out the details here
Tanzu Fundamentals (Videos)
Tanzu Documentation
Tanzu Courses
Note: Sign in to Tanzu TechZone to browse between editions, pin content, rate content, build favorites lists, etc.
Thanks and Regards,
Aruna Srinivasan (She/Her)
Client Services Consultant - Tanzu Customer Success
|
From the action bar MORE button.