Red Hat Security Advisory

RHSA-2026:65899

postgresql16-postgis security update

Released 2026-09-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream (v. 10) postgis-3.5.3-4.el10_2.1, postgis-client-3.5.3-4.el10_2.1, postgis-docs-3.5.3-4.el10_2.1 +3

Fixes 1 record

TI-2026-51624 CVE-2026-73515 · GHSA-qv7r-wgc7-6mc6

PostGIS < 3.7.0beta2 Out-of-Bounds Read via FlatGeobuf Buffer

HIGH 67

PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer.

CVSS 4.0HIGH 7.2 Network Low privileges No interaction EPSS 0.00566 Published 2026-08-13 Fixed in 3.7.0beta2 CWE-125