ALSA-2026:65899
- Source
- https://errata.almalinux.org/10/ALSA-2026-65899.html
- Import Source
- https://github.com/AlmaLinux/osv-database/blob/master/advisories/almalinux10/ALSA-2026:65899.json
- JSON Data
- https://api.osv.dev/v1/vulns/ALSA-2026:65899
- Related
- Published
- 2026-09-09T00:00:00Z
- Modified
- 2026-09-11T17:15:03Z
- Summary
- Important: postgresql16-postgis security update
- Details
-
PostGIS adds support for geographic objects to the PostgreSQL object-relational database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic information systems (GIS), much like ESRI's SDE or Oracle's Spatial extension. PostGIS follows the OpenGIS "Simple Features Specification for SQL" and has been certified as compliant with the "Types and Functions" profile.
Security Fix(es):
- postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer (CVE-2026-73515)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- References
Affected packages
AlmaLinux:10 / postgis
Package
- Name
- postgis
- Purl
- pkg:rpm/almalinux/postgis
AlmaLinux:10 / postgis-client
Package
- Name
- postgis-client
- Purl
- pkg:rpm/almalinux/postgis-client
AlmaLinux:10 / postgis-docs
Package
- Name
- postgis-docs
- Purl
- pkg:rpm/almalinux/postgis-docs
AlmaLinux:10 / postgis-upgrade
Package
- Name
- postgis-upgrade
- Purl
- pkg:rpm/almalinux/postgis-upgrade