Releases · apache/geode

27 Mar 19:52

rel/v2.0.1

22b9997

Apache Geode 2.0.1 Latest

Latest

Apache Geode version 2.0.1 focuses on critical security vulnerability remediations and dependency updates to ensure the ongoing stability and security of the platform.

Highlights

Critical Security Patches: Remediated CVE-2024-12798, CVE-2024-12801, CVE-2025-11226, and CVE-2026-1225 (GEODE-10555 #7982)
Vulnerability Remediation: Addressed CVE-2025-68161 to protect against a man-in-the-middle attack (GEODE-10543 #7975)
Security Remediation: Resolved CVE-2026-23903 to remediate Authentication Bypass (GEODE-10559 #7986)
Denial of Service Remediation: Fixed Allocation of Resources Without Limits or Throttling (GEODE-10565 #7990)
Security by-pass and DoS Remediation: Resolved CVE-2026-1605 and CVE-2025-11143 (GEODE-10568 #7992)
EndpointRequest Security Fix: Remediated CVE-2025-22235 (GEODE-10572 #7993)

See full release notes at https://cwiki.apache.org/confluence/display/GEODE/Release+Notes#ReleaseNotes-2.0.1

Assets 3

18 Dec 10:53

JinwooHwang

rel/v2.0.0

ada3219

Apache Geode 2.0.0

Apache Geode 2.0.0 – Major Modernization Highlights

Enhanced Security – Application-level HTTP session management improvements, full Java Module System compliance, and removal of unsafe reflection usage.
Modern Java Support – Requires Java 17 LTS for long-term stability and compatibility.
Jakarta EE 10 Ready – Complete migration from javax.* to jakarta.*, with support for Apache Tomcat 10.1/11 and Eclipse Jetty 12.
Updated Spring Stack – Spring Framework 6.x and Spring Security 6.x modernization.
HTTP & CLI Improvements – Apache HttpComponents 5.x with HTTP/2 support; Spring Shell 3.x modernization for GFSH with improved command completion.
Build System Upgrade – Gradle 7.3.3 for consistent builds and Java 17 + Jakarta EE 10 support.

See release notes at https://cwiki.apache.org/confluence/display/GEODE/Release+Notes#ReleaseNotes-2.0.0

Assets 3

20 Sep 14:42

JinwooHwang

rel/v1.15.2

b9feb9a

Apache Geode 1.15.2

Highlights

New: Generational ZGC support (GEODE-7483)
Remediation of major security vulnerabilities
Test Coverage: New ObjectSizer-related JUnit tests expanding memory sizing validation
Security Upgrades: Upgraded dependencies to address security vulnerabilities and deprecated APIs. Jetty, Jackson, Shiro, JGroups, Snappy, commons-beanutils, commons-logging
Documentation Updates: Improved in-code documentation and external guides

sha256 for apache-geode-1.15.2.tgz is a20ec6873356ca930c7ff26d618807f75f240dba015fbb877017b9e6f5475ccd

See full release notes at: https://cwiki.apache.org/confluence/display/GEODE/Release+Notes#ReleaseNotes-1.15.2

Assets 3