...

• CVE-2017-5649: Apache Geode information disclosure vulnerability
• CVE-2017-9794: Apache Geode gfsh query vulnerability
• CVE-2017-9797: Apache Geode client/server authentication vulnerability
• CVE-2017-9795: Apache Geode OQL method invocation vulnerability
  
• CVE-2017-9796: Apache Geode OQL bind parameter vulnerability
  
• CVE-2017-12622: Apache Geode gfsh authorization vulnerability
  
• CVE-2017-15696 Apache Geode configuration request authorization vulnerability
• CVE-2017-15692 Apache Geode unsafe deserialization in TcpServer
• CVE-2017-15693 Apache Geode unsafe deserialization of application objects
• CVE-2017-15695 Apache Geode remote code execution vulnerability
  
• CVE-2017-15694 Apache Geode metadata modification vulnerability
• CVE-2019-10091 Apache Geode SSL endpoint verification vulnerability
• CVE-2021-34797 Apache Geode information disclosure vulnerability

Latest

1.15.1

This patch release includes a few bug fixes:

• Bumped jetty to 9.4.47.v20220610
• Fixed data inconsistency in the replicated region with  3 or more servers, and one server is down
• Fixed clearing the region related expired tombstones when the region is destroyed
• Improve handling WAN events when interrupted

A full list of issues that were resolved can be found a https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12318420&version=12351801

Previous Releases

1.15.0

This release contains a number of improvements and bug fixes, including:

• Support for running on JDK17.
• Support for authentication expiration and re-authorization.
• The default value of conserve-sockets has been changed from true to false.

A full list of issues that were resolved can be found at https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12318420&version=12349678

...

1.14.4

This patch release includes a few bug fixes:

...