GemFire: Netty Vulnerability: CVE-2025-24970

Products

• VMware Tanzu Data Suite
• Pivotal GemFire
• VMware Tanzu Gemfire

Issue/Introduction

https://nvd.nist.gov/vuln/detail/CVE-2025-24970

Environment

GemFire 10.0.6 and prior. 
GemFire 10.1.3 and prior. 

Resolution

The fix will be applied permanently in next release. 

For now, use io.netty.handler.ssl.noOpenSsl=true  as a workaround.