RLSA-2026:85791

PostgreSQL is an advanced object-relational database management system (DBMS). Security Fix(es): * pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build (CVE-2026-103484) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Upstream Advisory

• View official advisory

Affected Packages

• pgaudit 0:16.0-1.module+el9.8.0+40212+d6f50005

• pgaudit 0:16.0-1.module+el9.8.0+40159+adcaa225

• pg_repack 0:1.5.1-1.module+el9.8.0+40212+d6f50005

• pg_repack 0:1.5.1-1.module+el9.8.0+40159+adcaa225

• postgis 0:3.5.3-6.module+el9.8.0+40320+f6f9ed3c

• postgis-client 0:3.5.3-6.module+el9.8.0+40320+f6f9ed3c

• postgis-docs 0:3.5.3-6.module+el9.8.0+40320+f6f9ed3c

• postgis-upgrade 0:3.5.3-6.module+el9.8.0+40320+f6f9ed3c

• postgis-utils 0:3.5.3-6.module+el9.8.0+40320+f6f9ed3c

• postgres-decoderbufs 0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225

• postgres-decoderbufs 0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005

• postgresql-docs 0:16.15-1.module+el9.8.0+40320+f6f9ed3c

• postgresql 0:16.15-1.module+el9.8.0+40320+f6f9ed3c

• postgresql-contrib 0:16.15-1.module+el9.8.0+40320+f6f9ed3c

• postgresql-plperl 0:16.15-1.module+el9.8.0+40320+f6f9ed3c

• postgresql-plpython3 0:16.15-1.module+el9.8.0+40320+f6f9ed3c

• postgresql-pltcl 0:16.15-1.module+el9.8.0+40320+f6f9ed3c

• postgresql-private-devel 0:16.15-1.module+el9.8.0+40320+f6f9ed3c

• postgresql-private-libs 0:16.15-1.module+el9.8.0+40320+f6f9ed3c

• postgresql-server 0:16.15-1.module+el9.8.0+40320+f6f9ed3c

• postgresql-server-devel 0:16.15-1.module+el9.8.0+40320+f6f9ed3c

• postgresql-static 0:16.15-1.module+el9.8.0+40320+f6f9ed3c

• postgresql-test 0:16.15-1.module+el9.8.0+40320+f6f9ed3c

• postgresql-test-rpm-macros 0:16.15-1.module+el9.8.0+40320+f6f9ed3c

• postgresql-upgrade 0:16.15-1.module+el9.8.0+40320+f6f9ed3c

• postgresql-upgrade-devel 0:16.15-1.module+el9.8.0+40320+f6f9ed3c