RHSA-2026:85814

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build (CVE-2026-103484) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Upstream Advisory

• View official advisory

Affected Packages

• pg_repack 1.5.3-1.module+el9.8.0+23739+1c42644c

• pgaudit 18.0-1.module+el9.8.0+23739+1c42644c

• pgvector 0.8.7-1.module+el9.8.0+25065+515b563e

• postgis 3.6.1-4.module+el9.8.0+24879+1364ef12

• postgis-client 3.6.1-4.module+el9.8.0+24879+1364ef12

• postgis-docs 3.6.1-4.module+el9.8.0+24879+1364ef12

• postgis-upgrade 3.6.1-4.module+el9.8.0+24879+1364ef12

• postgis-utils 3.6.1-4.module+el9.8.0+24879+1364ef12

• postgres-decoderbufs 3.3.1-1.Final.module+el9.8.0+23739+1c42644c

• postgresql 18.6-1.module+el9.8.0+24816+5c11f535

• postgresql-contrib 18.6-1.module+el9.8.0+24816+5c11f535

• postgresql-docs 18.6-1.module+el9.8.0+24816+5c11f535

• postgresql-plperl 18.6-1.module+el9.8.0+24816+5c11f535

• postgresql-plpython3 18.6-1.module+el9.8.0+24816+5c11f535

• postgresql-pltcl 18.6-1.module+el9.8.0+24816+5c11f535

• postgresql-private-devel 18.6-1.module+el9.8.0+24816+5c11f535

• postgresql-private-libs 18.6-1.module+el9.8.0+24816+5c11f535

• postgresql-server 18.6-1.module+el9.8.0+24816+5c11f535

• postgresql-server-devel 18.6-1.module+el9.8.0+24816+5c11f535

• postgresql-static 18.6-1.module+el9.8.0+24816+5c11f535

• postgresql-test 18.6-1.module+el9.8.0+24816+5c11f535

• postgresql-test-rpm-macros 18.6-1.module+el9.8.0+24816+5c11f535

• postgresql-upgrade 18.6-1.module+el9.8.0+24816+5c11f535

• postgresql-upgrade-devel 18.6-1.module+el9.8.0+24816+5c11f535