[ALSA-2026:88359] Important: postgresql16-pgvector security update
Type:
security
Severity:
important
Release date:
2026-10-24
Description:
Open-source vector similarity search for Postgres. Supports L2 distance, inner product, and cosine distance Security Fix(es): * pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build (CVE-2026-103484) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Updated packages listed below:
Architecture Package Checksum
aarch64 pgvector-0.8.7-1.el10_2.aarch64.rpm 934826b43ae9e96ce11c555bba129f5b12f7bb700dfc30bacfaa13a48aaf6f6e
ppc64le pgvector-0.8.7-1.el10_2.ppc64le.rpm 35837181be80798318f3401dd9a3b8196203b1bd1b4daacb3369616fb8504a45
s390x pgvector-0.8.7-1.el10_2.s390x.rpm 606a21a8aa1c9ec342a1cd8783495319b67db16270c1c1d0912d31c503943929
x86_64 pgvector-0.8.7-1.el10_2.x86_64.rpm 14d9daa00a092f22b8c04852983975a972efb817927a9aea5d50a1e93655f7fc
x86_64_v2 pgvector-0.8.7-1.el10_2.x86_64_v2.rpm f4a8f28a08baefb8f163d42f869cddb665f01bf84f6ce20c0d80172edc56d142
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.