Golang vulnerabilities CVE-2023-39320 and CVE-2024-24790 resolved in Greenplum Backup and Restore 1.31.0

Products

• VMware Tanzu Greenplum
• Greenplum

Issue/Introduction

There were an number of golang vulnerabilities identified by the National Institute of Standards and Technology that impacted Greenplum Backup and Restore. 

CVE-2023-39320
CVE-2024-24790
GHSA-v778-237x-gjrc
CVE-2025-22866
CVE-2023-39323
CVE-2023-39325
CVE-2023-45288
CVE-2023-45285
CVE-2023-44487
CVE-2024-24791
CVE-2024-24784
CVE-2023-39321
CVE-2024-34158
CVE-2023-45283
CVE-2024-34156
CVE-2023-39322
CVE-2023-45290
CVE-2024-24787
CVE-2023-39319
CVE-2024-45341
CVE-2023-39318
CVE-2024-45336
CVE-2024-24783
CVE-2024-24789
CVE-2024-24785
CVE-2023-39326
CVE-2023-45284
CVE-2024-34155
CVE-2023-45289

 

 

Environment

Greenplum Backup and Restore 1.30 and older 

Cause

National Institute of Standards and Technology identified a number of vulnerabilities that impact Greenplum Backup and Restore. 

Resolution

The following vulnerabilities are resolved in Greenplum Backup and Restore 1.31.0 

CVE-2023-39320
CVE-2024-24790
GHSA-v778-237x-gjrc
CVE-2025-22866
CVE-2023-39323
CVE-2023-39325
CVE-2023-45288
CVE-2023-45285
CVE-2023-44487
CVE-2024-24791
CVE-2024-24784
CVE-2023-39321
CVE-2024-34158
CVE-2023-45283
CVE-2024-34156
CVE-2023-39322
CVE-2023-45290
CVE-2024-24787
CVE-2023-39319
CVE-2024-45341
CVE-2023-39318
CVE-2024-45336
CVE-2024-24783
CVE-2024-24789
CVE-2024-24785
CVE-2023-39326
CVE-2023-45284
CVE-2024-34155
CVE-2023-45289