Product Release Advisory - VMware Tanzu Greenplum 7.6.0

Product/Component

VMware Tanzu Data Intelligence

2 more products

Notification Id

36277

Last Updated

29 October 2025

Initial Publication Date

29 October 2025

Status

CLOSED

Severity

CRITICAL

CVSS Base Score

9.3

WorkAround

Affected CVE

Security Advisory

Advisory ID:	TNZ-2025-0130
Severity:	Critical
Issue Date:	2025-10-29
Updated on:	2025-10-29
Synopsis	VMware Tanzu Greenplum 7.6.0 addresses the following security vulnerabilities.

Product Version Release Advisory

VMware Tanzu Greenplum 7.6.0 includes the following component updates:

VMware Tanzu Greenplum 7.6.0

https://techdocs.broadcom.com/us/en/vmware-tanzu/data-solutions/tanzu-greenplum/7/greenplum-database/cve-gpdb.html

Tanzu Greenplum Disaster Recovery 1.4.0

https://techdocs.broadcom.com/us/en/vmware-tanzu/data-solutions/tanzu-greenplum-disaster-recovery/1-4/gp-disaster-recovery/cve-gpdr.html

Tanzu Greenplum Platform Extension Framework 7.1.0

https://techdocs.broadcom.com/us/en/vmware-tanzu/data-solutions/tanzu-greenplum-platform-extension-framework/7-1-0/gp-pxf/cve-pxf.html

Security Fixes

This release has the following security fixes, listed by component and area.

Component	Vulnerabilities Resolved
vmware-greenplum	GHSA-6v2p-p543-phr9 (high)
Tanzu Greenplum Extensions	GHSA-x4wf-678h-2pmq (critical) GHSA-hrfv-mqp8-q5rw (high)
Tanzu Greenplum Disaster Recovery	CVE-2025-4674 (high) CVE-2025-22874 (high) CVE-2025-47907 (high) CVE-2025-4673 (medium) CVE-2025-47906 (medium) CVE-2025-0913 (medium)
Tanzu Greenplum platform extension framework	CVE‑2024‑24786 (high) CVE‑2025‑4674 (high)

History

2025-10-29: Initial vulnerability report published.

Contact

E-mail: [email protected]

VMware Tanzu Security Advisories
https://tanzu.vmware.com/security