ALT-PU-2026-3907

Высокий

ALT-PU-2026-3907: package postgresql16-pgvector update to version 0.8.2-alt1

Источник

errata.altlinux.org

Дата публикации

03.03.2026

Дата обновления

03.03.2026

Устраненные уязвимости

ALT Linux branch p10

ALT Server

ALT Virtualization Server

ALT Workstation

ALT Workstation K

ALT Education

Simply Linux

Starterkit

ALT Container

Описание

This update upgrades postgresql16-pgvector to version 0.8.2-alt1.

Устраненные уязвимости1

CVE-2026-3172

Высокий 8.1

Дата публикации: 25.02.2026

CWE-191

CWE-787

Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server.

CVSS 3.1

Высокий 8.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Attack vector: Network
Complexity: Low
Privileges: Low
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: None
Availability: High

Ссылки

CVE-2026-3172 https://nvd.nist.gov/vuln/detail/CVE-2026-3172

Ссылки1

ALT-PU-2026-3907 https://errata.altlinux.org/ALT-PU-2026-3907

Связанные уязвимости

CVE-2026-3172

CVSS3: 8.1

ubuntu

9 месяцев назад

Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server.

CVE-2026-3172

CVSS3: 6.8

redhat

9 месяцев назад

Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server.

CVE-2026-3172

CVSS3: 8.1

nvd

9 месяцев назад

Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server.

CVE-2026-3172

CVSS3: 8.1

debian

9 месяцев назад

Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through ...

openSUSE-SU-2026:20489-1

suse-cvrf

7 месяцев назад

Security update for pgvector