ALSA-2026:85791

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build (CVE-2026-103484) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Upstream Advisory

• View official advisory

Affected Packages

• postgis 3.5.3-6.module_el9.8.0+311+c39b793b

• postgresql-test-rpm-macros 16.15-1.module_el9.8.0+311+c39b793b

• postgis-utils 3.5.3-6.module_el9.8.0+311+c39b793b

• postgres-decoderbufs 2.4.0-1.Final.module_el9.4.0+66+eb9878bc

• postgresql-docs 16.15-1.module_el9.8.0+311+c39b793b

• postgresql 16.15-1.module_el9.8.0+311+c39b793b

• pgaudit 16.0-1.module_el9.4.0+66+eb9878bc

• postgresql-private-libs 16.15-1.module_el9.8.0+311+c39b793b

• postgis-docs 3.5.3-6.module_el9.8.0+311+c39b793b

• postgresql-contrib 16.15-1.module_el9.8.0+311+c39b793b

• postgresql-plperl 16.15-1.module_el9.8.0+311+c39b793b

• postgresql-static 16.15-1.module_el9.8.0+311+c39b793b

• pgvector 0.8.7-1.module_el9.8.0+324+0cb93d9d

• postgis-upgrade 3.5.3-6.module_el9.8.0+311+c39b793b

• postgresql-pltcl 16.15-1.module_el9.8.0+311+c39b793b

• postgresql-plpython3 16.15-1.module_el9.8.0+311+c39b793b

• postgresql-server-devel 16.15-1.module_el9.8.0+311+c39b793b

• postgresql-server 16.15-1.module_el9.8.0+311+c39b793b

• postgresql-test 16.15-1.module_el9.8.0+311+c39b793b

• postgresql-upgrade 16.15-1.module_el9.8.0+311+c39b793b

• pg_repack 1.5.1-1.module_el9.6.0+146+c54fdeca

• postgis-client 3.5.3-6.module_el9.8.0+311+c39b793b

• postgresql-private-devel 16.15-1.module_el9.8.0+311+c39b793b

• postgresql-upgrade-devel 16.15-1.module_el9.8.0+311+c39b793b