ALSA-2026:88359: Important: postgresql16-pgvector security update
Published Oct 22, 2026
·Updated
Open-source vector similarity search for Postgres. Supports L2 distance, inner product, and cosine distance
Security Fix(es):
pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build (CVE-2026-103484)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
1 affected componentFixes available
almalinux/pgvector<0.8.7-1.el10_2
0.8.7-1.el10_2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
almalinux/pgvectorto a version that resolves this vulnerability.Fixed in 0.8.7-1.el10_2
Event History
Oct 22, 2026
Advisory Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionAffected Software