Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:1068-1

Опубликовано: 26 мар. 2026
Источник: suse-cvrf

Описание

Security update for pgvector

This update for pgvector fixes the following issue:

Update to pgvector 0.8.2:

  • CVE-2026-3172: Buffer overflow in parallel HNSW index build (bsc#1258945).

Changelog:

  • Fixed Index Searches in EXPLAIN output for Postgres 18

Список пакетов

Container suse/postgres:16.14
postgresql16-pgvector-0.8.2-150600.13.9.1
Container suse/postgres:17.10
postgresql17-pgvector-0.8.2-150600.13.9.1
Container suse/postgres:latest
postgresql18-pgvector-0.8.2-150600.13.9.1
SUSE Linux Enterprise Module for Server Applications 15 SP7
pgvector-devel-0.8.2-150600.13.9.1
postgresql16-pgvector-0.8.2-150600.13.9.1
postgresql17-pgvector-0.8.2-150600.13.9.1
postgresql18-pgvector-0.8.2-150600.13.9.1
SUSE Linux Enterprise Server 15 SP6-LTSS
pgvector-devel-0.8.2-150600.13.9.1
postgresql16-pgvector-0.8.2-150600.13.9.1
postgresql17-pgvector-0.8.2-150600.13.9.1
postgresql18-pgvector-0.8.2-150600.13.9.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
pgvector-devel-0.8.2-150600.13.9.1
postgresql16-pgvector-0.8.2-150600.13.9.1
postgresql17-pgvector-0.8.2-150600.13.9.1
postgresql18-pgvector-0.8.2-150600.13.9.1
openSUSE Leap 15.6
pgvector-devel-0.8.2-150600.13.9.1
postgresql13-pgvector-0.8.2-150600.13.9.1
postgresql14-pgvector-0.8.2-150600.13.9.1
postgresql15-pgvector-0.8.2-150600.13.9.1
postgresql16-pgvector-0.8.2-150600.13.9.1
postgresql17-pgvector-0.8.2-150600.13.9.1
postgresql18-pgvector-0.8.2-150600.13.9.1

Ссылки

Описание

Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server.

Затронутые продукты
Container suse/postgres:16.14:postgresql16-pgvector-0.8.2-150600.13.9.1
Container suse/postgres:17.10:postgresql17-pgvector-0.8.2-150600.13.9.1
Container suse/postgres:latest:postgresql18-pgvector-0.8.2-150600.13.9.1
SUSE Linux Enterprise Module for Server Applications 15 SP7:pgvector-devel-0.8.2-150600.13.9.1
Ссылки