Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2026:4804-1

Опубликовано: 21 окт. 2026
Источник: suse-cvrf

Описание

Security update for pgvector

This update for pgvector fixes the following issue:

  • CVE-2026-103484: database users with the ability to create an IVFFlat index can write data out-of-bounds, which can lead to arbitrary code execution (bsc#1284129).

Changes for pgvector:

  • Updated to version 0.8.7

Список пакетов

Container suse/postgres:16.15
postgresql16-pgvector-0.8.7-150600.13.12.1
Container suse/postgres:17.11
postgresql17-pgvector-0.8.7-150600.13.12.1
Container suse/postgres:latest
postgresql18-pgvector-0.8.7-150600.13.12.1
SUSE Linux Enterprise Module for Server Applications 15 SP7
pgvector-devel-0.8.7-150600.13.12.1
postgresql16-pgvector-0.8.7-150600.13.12.1
postgresql17-pgvector-0.8.7-150600.13.12.1
postgresql18-pgvector-0.8.7-150600.13.12.1
SUSE Linux Enterprise Server 15 SP6-LTSS
pgvector-devel-0.8.7-150600.13.12.1
postgresql16-pgvector-0.8.7-150600.13.12.1
postgresql17-pgvector-0.8.7-150600.13.12.1
postgresql18-pgvector-0.8.7-150600.13.12.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
pgvector-devel-0.8.7-150600.13.12.1
postgresql16-pgvector-0.8.7-150600.13.12.1
postgresql17-pgvector-0.8.7-150600.13.12.1
postgresql18-pgvector-0.8.7-150600.13.12.1

Ссылки

Описание

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.

Затронутые продукты
Container suse/postgres:16.15:postgresql16-pgvector-0.8.7-150600.13.12.1
Container suse/postgres:17.11:postgresql17-pgvector-0.8.7-150600.13.12.1
Container suse/postgres:latest:postgresql18-pgvector-0.8.7-150600.13.12.1
SUSE Linux Enterprise Module for Server Applications 15 SP7:pgvector-devel-0.8.7-150600.13.12.1
Ссылки