The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade postgres-decoderbufsUpgrade postgresql-contribUpgrade postgisUpgrade postgis-upgradeUpgrade postgresql-upgradeUpgrade postgresql-staticUpgrade postgresql-private-libsUpgrade pg_repackUpgrade postgresql-pltclUpgrade postgresql-plperlUpgrade postgresqlUpgrade postgresql-private-develUpgrade postgresql-server-develUpgrade postgis-utilsUpgrade postgresql-testUpgrade postgresql-serverUpgrade postgis-docsUpgrade postgis-clientUpgrade pgauditUpgrade postgresql-plpython3Upgrade pgvectorUpgrade postgresql-test-rpm-macrosUpgrade postgresql-upgrade-develUpgrade postgresql-docs | Oct 20, 2026 | Oct 20, 2026 |
| Oracle_linux | — | Upgrade postgis-docsUpgrade postgresql-upgrade-develUpgrade postgresql-server-develUpgrade postgis-utilsUpgrade pgvectorUpgrade postgresql-testUpgrade postgresql-upgradeUpgrade postgresql-private-libsUpgrade postgis-upgradeUpgrade postgresql-plpython3Upgrade postgisUpgrade postgresql-staticUpgrade postgresqlUpgrade postgresql-pltclUpgrade pg_repackUpgrade pgauditUpgrade postgresql-serverUpgrade postgresql-test-rpm-macrosUpgrade postgres-decoderbufsUpgrade postgresql-docsUpgrade postgresql-plperlUpgrade postgis-clientUpgrade postgresql-private-develUpgrade postgresql-contrib | Oct 22, 2026 | Oct 1, 2026 |
| Redhat_linux | — | Upgrade postgresql-staticUpgrade postgresql-test-debuginfoUpgrade postgresql-contrib-debuginfoUpgrade postgresql-upgradeUpgrade pgvector-debugsourceUpgrade postgresql-plpython3Upgrade postgres-decoderbufsUpgrade postgis-clientUpgrade pgauditUpgrade postgresql-debuginfoUpgrade postgresql-upgrade-develUpgrade postgis-docsUpgrade postgresql-private-develUpgrade postgresql-private-libsUpgrade postgresql-debugsourceUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-docsUpgrade postgresql-private-libs-debuginfoUpgrade postgresql-pltcl-debuginfoUpgrade pg_repack-debugsourceUpgrade postgisUpgrade postgresql-server-devel-debuginfoUpgrade postgres-decoderbufs-debuginfoUpgrade pgaudit-debugsourceUpgrade postgresql-testUpgrade postgis-upgradeUpgrade postgis-debuginfoUpgrade postgresql-plperlUpgrade postgis-client-debuginfoUpgrade postgis-utilsUpgrade postgresql-test-rpm-macrosUpgrade postgis-debugsourceUpgrade postgresql-plperl-debuginfoUpgrade pg_repackUpgrade postgresql-serverUpgrade postgresqlUpgrade postgis-upgrade-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-server-develUpgrade postgresql-server-debuginfoUpgrade postgresql-contribUpgrade pg_repack-debuginfoUpgrade pgvectorUpgrade pgvector-debuginfoUpgrade pgaudit-debuginfoUpgrade postgresql-pltclUpgrade postgresql-docs-debuginfoUpgrade postgres-decoderbufs-debugsource | Oct 5, 2026 | Oct 1, 2026 |
| Rocky_linux | — | Upgrade postgis-upgrade-debuginfoUpgrade postgis-upgradeUpgrade postgresql-contrib-debuginfoUpgrade postgresql-contribUpgrade postgresql-serverUpgrade postgresqlUpgrade pgaudit-debugsourceUpgrade pgvector-debuginfoUpgrade postgresql-upgradeUpgrade postgresql-private-libs-debuginfoUpgrade postgis-debugsourceUpgrade postgresql-upgrade-debuginfoUpgrade postgresql-plpython3-debuginfoUpgrade postgis-client-debuginfoUpgrade postgres-decoderbufs-debugsourceUpgrade postgresql-plperlUpgrade pg_repack-debuginfoUpgrade postgresql-upgrade-devel-debuginfoUpgrade postgresql-server-develUpgrade postgresql-docs-debuginfoUpgrade postgresql-private-libsUpgrade pgaudit-debuginfoUpgrade postgisUpgrade postgresql-debuginfoUpgrade postgis-utilsUpgrade pgvectorUpgrade postgresql-pltclUpgrade postgis-debuginfoUpgrade postgis-docsUpgrade postgresql-plpython3Upgrade postgresql-private-develUpgrade postgis-clientUpgrade pg_repackUpgrade pgvector-debugsourceUpgrade postgresql-server-devel-debuginfoUpgrade postgresql-staticUpgrade postgresql-server-debuginfoUpgrade pgauditUpgrade postgresql-upgrade-develUpgrade postgres-decoderbufs-debuginfoUpgrade postgresql-debugsourceUpgrade postgresql-testUpgrade postgres-decoderbufsUpgrade postgresql-pltcl-debuginfoUpgrade pg_repack-debugsourceUpgrade postgresql-test-debuginfoUpgrade postgresql-plperl-debuginfoUpgrade postgresql-docs | Oct 22, 2026 | Oct 20, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub