Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

rocky логотип

RLSA-2026:85814

Опубликовано: 20 окт. 2026
Источник: rocky
Оценка: Important

Описание

Important: postgresql:18 security update

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

  • pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build (CVE-2026-103484)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Затронутые продукты

  • Rocky Linux 9

НаименованиеАрхитектураРелизRPM
pgauditaarch641.module+el9.8.0+40213+f1e225a4pgaudit-18.0-1.module+el9.8.0+40213+f1e225a4.aarch64.rpm
pgauditaarch641.module+el9.8.0+40158+490b3c67pgaudit-18.0-1.module+el9.8.0+40158+490b3c67.aarch64.rpm
pg_repackaarch641.module+el9.8.0+40158+490b3c67pg_repack-1.5.3-1.module+el9.8.0+40158+490b3c67.aarch64.rpm
pg_repackaarch641.module+el9.8.0+40213+f1e225a4pg_repack-1.5.3-1.module+el9.8.0+40213+f1e225a4.aarch64.rpm
postgisaarch644.module+el9.8.0+40321+a908ab5dpostgis-3.6.1-4.module+el9.8.0+40321+a908ab5d.aarch64.rpm
postgis-clientaarch644.module+el9.8.0+40321+a908ab5dpostgis-client-3.6.1-4.module+el9.8.0+40321+a908ab5d.aarch64.rpm
postgis-docsaarch644.module+el9.8.0+40321+a908ab5dpostgis-docs-3.6.1-4.module+el9.8.0+40321+a908ab5d.aarch64.rpm
postgis-upgradeaarch644.module+el9.8.0+40321+a908ab5dpostgis-upgrade-3.6.1-4.module+el9.8.0+40321+a908ab5d.aarch64.rpm
postgis-utilsaarch644.module+el9.8.0+40321+a908ab5dpostgis-utils-3.6.1-4.module+el9.8.0+40321+a908ab5d.aarch64.rpm
postgres-decoderbufsaarch641.Final.module+el9.8.0+40213+f1e225a4postgres-decoderbufs-3.3.1-1.Final.module+el9.8.0+40213+f1e225a4.aarch64.rpm

Показывать по

Связанные CVE

Исправления

Связанные уязвимости

CVSS3: 8.8
ubuntu
25 дней назад

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.

CVSS3: 8.8
redhat
25 дней назад

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.

CVSS3: 8.8
nvd
25 дней назад

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.

CVSS3: 8.8
debian
25 дней назад

IVFFlat index build in pgvector before 0.8.7 allows a database user to ...

suse-cvrf
18 дней назад

Security update for pgvector