...

• CVE-2017-5649: Apache Geode information disclosure vulnerability
• CVE-2017-9794: Apache Geode gfsh query vulnerability
• CVE-2017-9797: Apache Geode client/server authentication vulnerability
• CVE-2017-9795: Apache Geode OQL method invocation vulnerability
  
• CVE-2017-9796: Apache Geode OQL bind parameter vulnerability
  
• CVE-2017-12622: Apache Geode gfsh authorization vulnerability
  
• CVE-2017-15696 Apache Geode configuration request authorization vulnerability
• CVE-2017-15692 Apache Geode unsafe deserialization in TcpServer
• CVE-2017-15693 Apache Geode unsafe deserialization of application objects
• CVE-2017-15695 Apache Geode remote code execution vulnerability
  
• CVE-2017-15694 Apache Geode metadata modification vulnerability
• CVE-2019-10091 Apache Geode SSL endpoint verification vulnerability
• CVE-2021-34797 Apache Geode information disclosure vulnerability

Latest

1.14.4

This patch release includes a few bug fixes:

• Fixed an issue in the session state module.
• Fixed a durable client socket leak.

A full list of issues that were resolved can be found at https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12318420&version=12351226

1.14.3

This patch release includes a security fix:

...

A full list of issues that were resolved can be found at https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12318420&version=12348214

N-1

1.13.8

This patch release includes a few bug fixes:

• Fixed an issue in the session state module.
• Fixed a durable client socket leak.
• Note: Geode 1.13.8 clients are not compatible with 1.13.0 or 1.13.1 servers.

A full list of issues that were resolved can be found at https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12318420&version=12351225

1.13.7

This patch release includes a security fix:

...

A full list of issues that were resolved can be found at https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=1235120412318420&version=12351204

1.12.8

This patch release includes a security fix:

...