The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgresql-upgrade-develUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-staticUpgrade postgresql-test-rpm-macrosUpgrade postgresql-plpython3Upgrade postgis-upgradeUpgrade postgres-decoderbufsUpgrade postgisUpgrade postgresql-upgradeUpgrade pgvectorUpgrade postgresql-pltclUpgrade pg_repackUpgrade postgis-clientUpgrade pgauditUpgrade postgresqlUpgrade postgis-utilsUpgrade postgresql-server-develUpgrade postgresql-private-develUpgrade postgis-docsUpgrade postgresql-private-libsUpgrade postgresql-plperlUpgrade postgresql-serverUpgrade postgresql-test | Oct 20, 2026 | Oct 20, 2026 |
| Oracle_linux | — | Upgrade pgvectorUpgrade postgresql-server-develUpgrade postgresql-plpython3Upgrade postgis-upgradeUpgrade postgresql-upgradeUpgrade postgis-docsUpgrade postgresql-testUpgrade postgisUpgrade postgresql18-pgvectorUpgrade postgis-utilsUpgrade postgresql-private-libsUpgrade postgresql-upgrade-develUpgrade postgresqlUpgrade postgresql-staticUpgrade postgresql-test-rpm-macrosUpgrade pg_repackUpgrade postgresql-private-develUpgrade postgis-clientUpgrade postgresql-plperlUpgrade pgauditUpgrade postgres-decoderbufsUpgrade postgresql-serverUpgrade postgresql-docsUpgrade postgresql-contribUpgrade postgresql-pltcl | Oct 22, 2026 | Oct 1, 2026 |
| Redhat_linux | — | Upgrade postgresql-upgrade-develUpgrade postgresql-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-private-develUpgrade postgresql-plpython3Upgrade postgresql-debuginfoUpgrade postgres-decoderbufsUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-private-libs-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade pg_repack-debugsourceUpgrade postgisUpgrade postgresql-docsUpgrade postgresql-private-libsUpgrade postgis-clientUpgrade postgresql-upgradeUpgrade postgresql-test-debuginfoUpgrade postgis-docsUpgrade postgresql-staticUpgrade pgauditUpgrade pgvector-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-pltclUpgrade postgresql-server-develUpgrade postgis-debugsourceUpgrade pgaudit-debuginfoUpgrade postgresql-contribUpgrade postgresql18-pgvector-debuginfoUpgrade pg_repack-debuginfoUpgrade postgresql-serverUpgrade postgresql18-pgvectorUpgrade postgresqlUpgrade postgresql-plperl-debuginfoUpgrade postgresql-server-debuginfoUpgrade postgresql-plperlUpgrade pgvectorUpgrade pgvector-debuginfoUpgrade postgresql-docs-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgis-client-debuginfoUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-debuginfoUpgrade pg_repackUpgrade pgaudit-debugsourceUpgrade postgresql-testUpgrade postgis-upgrade-debuginfoUpgrade postgis-debuginfoUpgrade postgresql18-pgvector-debugsourceUpgrade postgresql16-pgvector-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgis-upgradeUpgrade postgis-utils | Oct 5, 2026 | Oct 1, 2026 |
| Rocky_linux | — | Upgrade postgresql18-pgvectorUpgrade pgvector-debugsourceUpgrade postgres-decoderbufs-debuginfoUpgrade pgauditUpgrade postgresql-server-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-upgrade-develUpgrade postgresql-private-develUpgrade postgresql-pltcl-debuginfoUpgrade postgresql-testUpgrade postgresql18-pgvector-debugsourceUpgrade postgres-decoderbufsUpgrade postgresql-debugsourceUpgrade postgresql-staticUpgrade postgresql-docsUpgrade postgresql-test-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-server-devel-debuginfoUpgrade pg_repackUpgrade postgis-clientUpgrade postgresql-contribUpgrade postgresql-private-libsUpgrade postgresql-debuginfoUpgrade postgresql-plperlUpgrade postgis-docsUpgrade postgresql-docs-debuginfoUpgrade postgis-utilsUpgrade pgaudit-debuginfoUpgrade pgvector-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgis-client-debuginfoUpgrade postgresql16-pgvector-debugsourceUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgis-upgradeUpgrade postgisUpgrade postgresql18-pgvector-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-serverUpgrade pg_repack-debuginfoUpgrade postgis-debugsourceUpgrade postgres-decoderbufs-debugsourceUpgrade postgis-debuginfoUpgrade pgvectorUpgrade postgresql-server-develUpgrade postgis-upgrade-debuginfoUpgrade postgresql-pltclUpgrade postgresql-plpython3Upgrade postgresql | Oct 22, 2026 | Oct 20, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub