Every CVE Search/ Get API key

CVE-2026-73515

PostGIS < 3.7.0beta2 Out-of-Bounds Read via FlatGeobuf Buffer

7.2 HighFix available

PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
None
Availability
High

Exploit likelihood

0.57%Up 0.2 points since Aug 14, 2026
90%50%10%1%

What each source reports

CVE List Score used 7.2

PostGIS < 3.7.0beta2 Out-of-Bounds Read via FlatGeobuf Buffer

PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.

Record
CVE-2026-73515
CVSS 4.0
7.2 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
EUVDEUVD-2026-58108 7.2

PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.

Record
EUVD-2026-58108
CVSS 4.0
7.2 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
Updated
2026-11-02
GitHub AdvisoriesGHSA-qv7r-wgc7-6mc6 7.2

PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to...

PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.

Record
GHSA-qv7r-wgc7-6mc6
CVSS 4.0
7.2 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
NVD 7.2

PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.

Record
CVE-2026-73515
CVSS 4.0
7.2 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Weakness
CWE-125
Updated
2026-11-02
OSV 7.2

PostGIS < 3.7.0beta2 Out-of-Bounds Read via FlatGeobuf Buffer

PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.

Record
CVE-2026-73515
CVSS 4.0
7.2 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
Weakness
CWE-125
Updated
2026-11-02
OSVDEBIAN-CVE-2026-73515 7.2

PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.

Record
DEBIAN-CVE-2026-73515
CVSS 4.0
7.2 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Updated
2026-11-03
Show 15 moreShow less
OSVRHSA-2026:65899 8.1

Red Hat Security Advisory: postgresql16-postgis security update

Record
RHSA-2026:65899
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:67166 8.1

Red Hat Security Advisory: postgresql18-postgis security update

Record
RHSA-2026:67166
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRHSA-2026:67491 8.8

Red Hat Security Advisory: postgresql:16 security update

Record
RHSA-2026:67491
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2026:67848 8.8

Red Hat Security Advisory: postgresql:18 security update

Record
RHSA-2026:67848
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:65899 8.1

Important: postgresql16-postgis security update

PostGIS adds support for geographic objects to the PostgreSQL object-relational database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic information systems (GIS), much like ESRI's SDE or Oracle's Spatial extension. PostGIS follows the OpenGIS "Simple Features Specification for SQL" and has been certified as compliant with the "Types and Functions" profile.

Security Fix(es):

  • postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer (CVE-2026-73515)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:65899
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:67166 8.1

Important: postgresql18-postgis security update

PostGIS adds support for geographic objects to the PostgreSQL object-relational database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic information systems (GIS), much like ESRI's SDE or Oracle's Spatial extension. PostGIS follows the OpenGIS "Simple Features Specification for SQL" and has been certified as compliant with the "Types and Functions" profile.

Security Fix(es):

  • postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer (CVE-2026-73515)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:67166
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVRLSA-2026:67491 8.8

Important: postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

  • postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662)

  • postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408)

  • postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464)

  • postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471)

  • postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680)

  • postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664)

  • postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677)

  • postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742)

  • postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239)

  • postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669)

  • postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679)

  • postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671)

  • postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670)

  • postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668)

  • postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385)

  • postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741)

  • postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer (CVE-2026-73515)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:67491
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2026:67848 8.8

Important: postgresql:18 security update

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

  • postgresql: PostgreSQL: SQL injection in pg_createsubscriber allows arbitrary SQL execution as superuser (CVE-2026-6476)

  • postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662)

  • postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408)

  • postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464)

  • postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471)

  • postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680)

  • postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664)

  • postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677)

  • postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742)

  • postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239)

  • postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669)

  • postgresql: PostgreSQL: Arbitrary code execution via type confusion in pg_restore_attribute_stats() (CVE-2026-16238)

  • postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679)

  • postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671)

  • postgresql: PostgreSQL pg_stat_statements: Arbitrary code execution via heap buffer overflow (CVE-2026-14676)

  • postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670)

  • postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668)

  • postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385)

  • postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741)

  • postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer (CVE-2026-73515)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2026:67848
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2026-73515 7.2

PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.

Record
UBUNTU-CVE-2026-73515
CVSS 4.0
7.2 HighCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Updated
2026-11-02
OSVALSA-2026:65899 No score

Important: postgresql16-postgis security update

PostGIS adds support for geographic objects to the PostgreSQL object-relational database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic information systems (GIS), much like ESRI's SDE or Oracle's Spatial extension. PostGIS follows the OpenGIS "Simple Features Specification for SQL" and has been certified as compliant with the "Types and Functions" profile.

Security Fix(es):

  • postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer (CVE-2026-73515)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:65899
Updated
2026-11-02
OSVALSA-2026:67166 No score

Important: postgresql18-postgis security update

PostGIS adds support for geographic objects to the PostgreSQL object-relational database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic information systems (GIS), much like ESRI's SDE or Oracle's Spatial extension. PostGIS follows the OpenGIS "Simple Features Specification for SQL" and has been certified as compliant with the "Types and Functions" profile.

Security Fix(es):

  • postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer (CVE-2026-73515)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:67166
Updated
2026-11-02
OSVALSA-2026:67491 No score

Important: postgresql:16 security update

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

  • postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662)
  • postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408)
  • postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464)
  • postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471)
  • postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680)
  • postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664)
  • postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677)
  • postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742)
  • postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239)
  • postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669)
  • postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679)
  • postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671)
  • postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670)
  • postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668)
  • postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385)
  • postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741)
  • postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer (CVE-2026-73515)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:67491
Updated
2026-11-02
OSVALSA-2026:67848 No score

Important: postgresql:18 security update

PostgreSQL is an advanced object-relational database management system (DBMS).

Security Fix(es):

  • postgresql: PostgreSQL: SQL injection in pg_createsubscriber allows arbitrary SQL execution as superuser (CVE-2026-6476)
  • postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions (CVE-2026-14662)
  • postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump (CVE-2026-18408)
  • postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN (CVE-2026-6464)
  • postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin (CVE-2026-6471)
  • postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments (CVE-2026-14680)
  • postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp (CVE-2026-14664)
  • postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl (CVE-2026-14677)
  • postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound (CVE-2026-15742)
  • postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle (CVE-2026-16239)
  • postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation (CVE-2026-14669)
  • postgresql: PostgreSQL: Arbitrary code execution via type confusion in pg_restore_attribute_stats() (CVE-2026-16238)
  • postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation (CVE-2026-14679)
  • postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module (CVE-2026-14671)
  • postgresql: PostgreSQL pg_stat_statements: Arbitrary code execution via heap buffer overflow (CVE-2026-14676)
  • postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow (CVE-2026-14670)
  • postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator (CVE-2026-14668)
  • postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists (CVE-2026-19385)
  • postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse (CVE-2026-15741)
  • postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer (CVE-2026-73515)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2026:67848
Updated
2026-11-02
OSVBIT-postgis-2026-73515 No score

PostGIS < 3.7.0 Out-of-Bounds Read via FlatGeobuf Buffer

PostGIS before 3.7.0 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.

Record
BIT-postgis-2026-73515
Updated
2026-11-02
OSVMGASA-2026-0524 No score

Updated postgis package fixes a security vulnerability

PostGIS < 3.7.0beta2 Out-of-Bounds Read via FlatGeobuf Buffer. (CVE-2026-73515)

Record
MGASA-2026-0524
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
postgis
AlmaLinux:10
 before 3.5.3-4.el10_2.1
3.5.3-4.el10_2.1
postgis-client
AlmaLinux:10
 before 3.5.3-4.el10_2.1
3.5.3-4.el10_2.1
postgis-docs
AlmaLinux:10
 before 3.5.3-4.el10_2.1
3.5.3-4.el10_2.1
postgis-upgrade
AlmaLinux:10
 before 3.5.3-4.el10_2.1
3.5.3-4.el10_2.1
postgis-utils
AlmaLinux:10
 before 3.5.3-4.el10_2.1
3.5.3-4.el10_2.1
postgresql18-postgis
AlmaLinux:10
 before 3.5.3-1.el10_2.1
3.5.3-1.el10_2.1
postgresql18-postgis-client
AlmaLinux:10
 before 3.5.3-1.el10_2.1
3.5.3-1.el10_2.1
postgresql18-postgis-docs
AlmaLinux:10
 before 3.5.3-1.el10_2.1
3.5.3-1.el10_2.1
postgresql18-postgis-upgrade
AlmaLinux:10
 before 3.5.3-1.el10_2.1
3.5.3-1.el10_2.1
postgresql18-postgis-utils
AlmaLinux:10
 before 3.5.3-1.el10_2.1
3.5.3-1.el10_2.1
Show 196 moreShow less
Affected packages
PackageAffectedFixed
pg_repack
AlmaLinux:9
From an advisory covering 17 CVEs
 before 1.5.1-1.module_el9.6.0+146+c54fdeca
1.5.1-1.module_el9.6.0+146+c54fdeca
pgaudit
AlmaLinux:9
From an advisory covering 17 CVEs
 before 16.0-1.module_el9.4.0+66+eb9878bc
16.0-1.module_el9.4.0+66+eb9878bc
pgvector
AlmaLinux:9
From an advisory covering 17 CVEs
 before 0.6.2-2.module_el9.6.0+167+4e561146
0.6.2-2.module_el9.6.0+167+4e561146
postgis
AlmaLinux:9
From an advisory covering 17 CVEs
 before 3.5.3-6.module_el9.8.0+311+c39b793b
3.5.3-6.module_el9.8.0+311+c39b793b
postgis-client
AlmaLinux:9
From an advisory covering 17 CVEs
 before 3.5.3-6.module_el9.8.0+311+c39b793b
3.5.3-6.module_el9.8.0+311+c39b793b
postgis-docs
AlmaLinux:9
From an advisory covering 17 CVEs
 before 3.5.3-6.module_el9.8.0+311+c39b793b
3.5.3-6.module_el9.8.0+311+c39b793b
postgis-upgrade
AlmaLinux:9
From an advisory covering 17 CVEs
 before 3.5.3-6.module_el9.8.0+311+c39b793b
3.5.3-6.module_el9.8.0+311+c39b793b
postgis-utils
AlmaLinux:9
From an advisory covering 17 CVEs
 before 3.5.3-6.module_el9.8.0+311+c39b793b
3.5.3-6.module_el9.8.0+311+c39b793b
postgres-decoderbufs
AlmaLinux:9
From an advisory covering 17 CVEs
 before 2.4.0-1.Final.module_el9.4.0+66+eb9878bc
2.4.0-1.Final.module_el9.4.0+66+eb9878bc
postgresql
AlmaLinux:9
From an advisory covering 17 CVEs
 before 16.15-1.module_el9.8.0+311+c39b793b
16.15-1.module_el9.8.0+311+c39b793b
postgresql-contrib
AlmaLinux:9
From an advisory covering 17 CVEs
 before 16.15-1.module_el9.8.0+311+c39b793b
16.15-1.module_el9.8.0+311+c39b793b
postgresql-docs
AlmaLinux:9
From an advisory covering 17 CVEs
 before 16.15-1.module_el9.8.0+311+c39b793b
16.15-1.module_el9.8.0+311+c39b793b
postgresql-plperl
AlmaLinux:9
From an advisory covering 17 CVEs
 before 16.15-1.module_el9.8.0+311+c39b793b
16.15-1.module_el9.8.0+311+c39b793b
postgresql-plpython3
AlmaLinux:9
From an advisory covering 17 CVEs
 before 16.15-1.module_el9.8.0+311+c39b793b
16.15-1.module_el9.8.0+311+c39b793b
postgresql-pltcl
AlmaLinux:9
From an advisory covering 17 CVEs
 before 16.15-1.module_el9.8.0+311+c39b793b
16.15-1.module_el9.8.0+311+c39b793b
postgresql-private-devel
AlmaLinux:9
From an advisory covering 17 CVEs
 before 16.15-1.module_el9.8.0+311+c39b793b
16.15-1.module_el9.8.0+311+c39b793b
postgresql-private-libs
AlmaLinux:9
From an advisory covering 17 CVEs
 before 16.15-1.module_el9.8.0+311+c39b793b
16.15-1.module_el9.8.0+311+c39b793b
postgresql-server
AlmaLinux:9
From an advisory covering 17 CVEs
 before 16.15-1.module_el9.8.0+311+c39b793b
16.15-1.module_el9.8.0+311+c39b793b
postgresql-server-devel
AlmaLinux:9
From an advisory covering 17 CVEs
 before 16.15-1.module_el9.8.0+311+c39b793b
16.15-1.module_el9.8.0+311+c39b793b
postgresql-static
AlmaLinux:9
From an advisory covering 17 CVEs
 before 16.15-1.module_el9.8.0+311+c39b793b
16.15-1.module_el9.8.0+311+c39b793b
postgresql-test
AlmaLinux:9
From an advisory covering 17 CVEs
 before 16.15-1.module_el9.8.0+311+c39b793b
16.15-1.module_el9.8.0+311+c39b793b
postgresql-test-rpm-macros
AlmaLinux:9
From an advisory covering 17 CVEs
 before 16.15-1.module_el9.8.0+311+c39b793b
16.15-1.module_el9.8.0+311+c39b793b
postgresql-upgrade
AlmaLinux:9
From an advisory covering 17 CVEs
 before 16.15-1.module_el9.8.0+311+c39b793b
16.15-1.module_el9.8.0+311+c39b793b
postgresql-upgrade-devel
AlmaLinux:9
From an advisory covering 17 CVEs
 before 16.15-1.module_el9.8.0+311+c39b793b
16.15-1.module_el9.8.0+311+c39b793b
pg_repack
AlmaLinux:9
From an advisory covering 20 CVEs
 before 1.5.3-1.module_el9.8.0+234+5456f35d
1.5.3-1.module_el9.8.0+234+5456f35d
pgaudit
AlmaLinux:9
From an advisory covering 20 CVEs
 before 18.0-1.module_el9.8.0+234+5456f35d
18.0-1.module_el9.8.0+234+5456f35d
pgvector
AlmaLinux:9
From an advisory covering 20 CVEs
 before 0.8.1-1.module_el9.8.0+234+5456f35d
0.8.1-1.module_el9.8.0+234+5456f35d
postgis
AlmaLinux:9
From an advisory covering 20 CVEs
 before 3.6.1-4.module_el9.8.0+310+22372bcc
3.6.1-4.module_el9.8.0+310+22372bcc
postgis-client
AlmaLinux:9
From an advisory covering 20 CVEs
 before 3.6.1-4.module_el9.8.0+310+22372bcc
3.6.1-4.module_el9.8.0+310+22372bcc
postgis-docs
AlmaLinux:9
From an advisory covering 20 CVEs
 before 3.6.1-4.module_el9.8.0+310+22372bcc
3.6.1-4.module_el9.8.0+310+22372bcc
postgis-upgrade
AlmaLinux:9
From an advisory covering 20 CVEs
 before 3.6.1-4.module_el9.8.0+310+22372bcc
3.6.1-4.module_el9.8.0+310+22372bcc
postgis-utils
AlmaLinux:9
From an advisory covering 20 CVEs
 before 3.6.1-4.module_el9.8.0+310+22372bcc
3.6.1-4.module_el9.8.0+310+22372bcc
postgres-decoderbufs
AlmaLinux:9
From an advisory covering 20 CVEs
 before 3.3.1-1.Final.module_el9.8.0+234+5456f35d
3.3.1-1.Final.module_el9.8.0+234+5456f35d
postgresql
AlmaLinux:9
From an advisory covering 20 CVEs
 before 18.6-1.module_el9.8.0+310+22372bcc
18.6-1.module_el9.8.0+310+22372bcc
postgresql-contrib
AlmaLinux:9
From an advisory covering 20 CVEs
 before 18.6-1.module_el9.8.0+310+22372bcc
18.6-1.module_el9.8.0+310+22372bcc
postgresql-docs
AlmaLinux:9
From an advisory covering 20 CVEs
 before 18.6-1.module_el9.8.0+310+22372bcc
18.6-1.module_el9.8.0+310+22372bcc
postgresql-plperl
AlmaLinux:9
From an advisory covering 20 CVEs
 before 18.6-1.module_el9.8.0+310+22372bcc
18.6-1.module_el9.8.0+310+22372bcc
postgresql-plpython3
AlmaLinux:9
From an advisory covering 20 CVEs
 before 18.6-1.module_el9.8.0+310+22372bcc
18.6-1.module_el9.8.0+310+22372bcc
postgresql-pltcl
AlmaLinux:9
From an advisory covering 20 CVEs
 before 18.6-1.module_el9.8.0+310+22372bcc
18.6-1.module_el9.8.0+310+22372bcc
postgresql-private-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 18.6-1.module_el9.8.0+310+22372bcc
18.6-1.module_el9.8.0+310+22372bcc
postgresql-private-libs
AlmaLinux:9
From an advisory covering 20 CVEs
 before 18.6-1.module_el9.8.0+310+22372bcc
18.6-1.module_el9.8.0+310+22372bcc
postgresql-server
AlmaLinux:9
From an advisory covering 20 CVEs
 before 18.6-1.module_el9.8.0+310+22372bcc
18.6-1.module_el9.8.0+310+22372bcc
postgresql-server-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 18.6-1.module_el9.8.0+310+22372bcc
18.6-1.module_el9.8.0+310+22372bcc
postgresql-static
AlmaLinux:9
From an advisory covering 20 CVEs
 before 18.6-1.module_el9.8.0+310+22372bcc
18.6-1.module_el9.8.0+310+22372bcc
postgresql-test
AlmaLinux:9
From an advisory covering 20 CVEs
 before 18.6-1.module_el9.8.0+310+22372bcc
18.6-1.module_el9.8.0+310+22372bcc
postgresql-test-rpm-macros
AlmaLinux:9
From an advisory covering 20 CVEs
 before 18.6-1.module_el9.8.0+310+22372bcc
18.6-1.module_el9.8.0+310+22372bcc
postgresql-upgrade
AlmaLinux:9
From an advisory covering 20 CVEs
 before 18.6-1.module_el9.8.0+310+22372bcc
18.6-1.module_el9.8.0+310+22372bcc
postgresql-upgrade-devel
AlmaLinux:9
From an advisory covering 20 CVEs
 before 18.6-1.module_el9.8.0+310+22372bcc
18.6-1.module_el9.8.0+310+22372bcc
postgis
Bitnami
 before 3.7.0
3.7.0
postgis
Debian:12
 All versions, plus listed versions
3.3.2+dfsg-13.3.3+dfsg-13.3.3+dfsg-1~exp13.3.3+dfsg-23.3.3+dfsg-3
Show 45 moreShow less
3.3.3+dfsg-43.3.3+dfsg-53.3.4+dfsg-13.4.0+dfsg-13.4.0+dfsg-23.4.0+dfsg-2~exp13.4.0+dfsg-33.4.0+dfsg-43.4.0~beta1+dfsg-1~exp13.4.0~beta1+dfsg-1~exp23.4.0~beta1+dfsg-1~exp33.4.0~beta1+dfsg-1~exp43.4.0~beta1+dfsg-1~exp53.4.0~beta1+dfsg-1~exp63.4.0~beta1+dfsg-1~exp73.4.0~beta2+dfsg-1~exp13.4.0~rc1+dfsg-1~exp13.4.0~rc2+dfsg-1~exp13.4.0~rc2+dfsg-1~exp23.4.0~rc3+dfsg-1~exp13.4.0~rc4+dfsg-1~exp13.4.1+dfsg-13.4.1+dfsg-1~exp13.4.2+dfsg-13.4.2+dfsg-23.4.3+dfsg-13.4.3+dfsg-23.4.3+dfsg-2~exp13.5.0+dfsg-13.5.0~alpha1+dfsg-1~exp13.5.0~alpha2+dfsg-1~exp13.5.0~alpha2+dfsg-1~exp23.5.0~alpha2+dfsg-1~exp33.5.0~beta1+dfsg-1~exp13.5.0~beta1+dfsg-1~exp23.5.0~beta1+dfsg-1~exp33.5.0~beta1+dfsg-1~exp43.5.0~rc1+dfsg-1~exp13.5.1+dfsg-13.5.2+dfsg-13.5.3+dfsg-13.5.3+dfsg-1~exp13.5.3+dfsg-23.6.0+dfsg-13.6.0+dfsg-2
 None known
postgis
Debian:13
 All versions, plus listed versions
3.5.2+dfsg-13.5.3+dfsg-13.5.3+dfsg-1~exp13.5.3+dfsg-23.6.0+dfsg-1
Show 20 moreShow less
3.6.0+dfsg-23.6.0+dfsg-33.6.0~alpha1+dfsg-1~exp13.6.0~beta1+dfsg-1~exp13.6.0~rc1+dfsg-1~exp13.6.0~rc2+dfsg-1~exp13.6.1+dfsg-13.6.1+dfsg-1~exp13.6.2+dfsg-13.6.3+dfsg-13.6.4+dfsg-13.6.4+dfsg-23.7.0+dfsg-13.7.0~alpha1+dfsg-1~exp13.7.0~alpha1+dfsg-1~exp23.7.0~beta1+dfsg-1~exp13.7.0~beta2+dfsg-1~exp13.7.0~rc1+dfsg-1~exp13.7.0~rc2+dfsg-1~exp13.7.0~rc3+dfsg-1~exp1
 None known
postgis
Debian:14
 before 3.7.0+dfsg-1, plus listed versions
3.5.2+dfsg-13.5.3+dfsg-13.5.3+dfsg-1~exp13.5.3+dfsg-23.6.0+dfsg-1
Show 19 moreShow less
3.6.0+dfsg-23.6.0+dfsg-33.6.0~alpha1+dfsg-1~exp13.6.0~beta1+dfsg-1~exp13.6.0~rc1+dfsg-1~exp13.6.0~rc2+dfsg-1~exp13.6.1+dfsg-13.6.1+dfsg-1~exp13.6.2+dfsg-13.6.3+dfsg-13.6.4+dfsg-13.6.4+dfsg-23.7.0~alpha1+dfsg-1~exp13.7.0~alpha1+dfsg-1~exp23.7.0~beta1+dfsg-1~exp13.7.0~beta2+dfsg-1~exp13.7.0~rc1+dfsg-1~exp13.7.0~rc2+dfsg-1~exp13.7.0~rc3+dfsg-1~exp1
3.7.0+dfsg-1
postgis
Mageia:10
 before 3.6.4-1.mga10
3.6.4-1.mga10
postgis
Red Hat:enterprise_linux:10.2
 before 0:3.5.3-4.el10_2.1
0:3.5.3-4.el10_2.1
postgis-client
Red Hat:enterprise_linux:10.2
 before 0:3.5.3-4.el10_2.1
0:3.5.3-4.el10_2.1
postgis-client-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:3.5.3-4.el10_2.1
0:3.5.3-4.el10_2.1
postgis-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:3.5.3-4.el10_2.1
0:3.5.3-4.el10_2.1
postgis-docs
Red Hat:enterprise_linux:10.2
 before 0:3.5.3-4.el10_2.1
0:3.5.3-4.el10_2.1
postgis-upgrade
Red Hat:enterprise_linux:10.2
 before 0:3.5.3-4.el10_2.1
0:3.5.3-4.el10_2.1
postgis-upgrade-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:3.5.3-4.el10_2.1
0:3.5.3-4.el10_2.1
postgis-utils
Red Hat:enterprise_linux:10.2
 before 0:3.5.3-4.el10_2.1
0:3.5.3-4.el10_2.1
postgresql16-postgis
Red Hat:enterprise_linux:10.2
 before 0:3.5.3-4.el10_2.1
0:3.5.3-4.el10_2.1
postgresql16-postgis-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:3.5.3-4.el10_2.1
0:3.5.3-4.el10_2.1
postgresql16-postgis-debugsource
Red Hat:enterprise_linux:10.2
 before 0:3.5.3-4.el10_2.1
0:3.5.3-4.el10_2.1
postgresql18-postgis
Red Hat:enterprise_linux:10.2
 before 0:3.5.3-1.el10_2.1
0:3.5.3-1.el10_2.1
postgresql18-postgis-client
Red Hat:enterprise_linux:10.2
 before 0:3.5.3-1.el10_2.1
0:3.5.3-1.el10_2.1
postgresql18-postgis-client-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:3.5.3-1.el10_2.1
0:3.5.3-1.el10_2.1
postgresql18-postgis-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:3.5.3-1.el10_2.1
0:3.5.3-1.el10_2.1
postgresql18-postgis-debugsource
Red Hat:enterprise_linux:10.2
 before 0:3.5.3-1.el10_2.1
0:3.5.3-1.el10_2.1
postgresql18-postgis-docs
Red Hat:enterprise_linux:10.2
 before 0:3.5.3-1.el10_2.1
0:3.5.3-1.el10_2.1
postgresql18-postgis-upgrade
Red Hat:enterprise_linux:10.2
 before 0:3.5.3-1.el10_2.1
0:3.5.3-1.el10_2.1
postgresql18-postgis-upgrade-debuginfo
Red Hat:enterprise_linux:10.2
 before 0:3.5.3-1.el10_2.1
0:3.5.3-1.el10_2.1
postgresql18-postgis-utils
Red Hat:enterprise_linux:10.2
 before 0:3.5.3-1.el10_2.1
0:3.5.3-1.el10_2.1
pg_repack
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:1.5.1-1.module+el9.8.0+24090+8f0ee565
0:1.5.1-1.module+el9.8.0+24090+8f0ee565
pg_repack-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:1.5.1-1.module+el9.8.0+24090+8f0ee565
0:1.5.1-1.module+el9.8.0+24090+8f0ee565
pg_repack-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:1.5.1-1.module+el9.8.0+24090+8f0ee565
0:1.5.1-1.module+el9.8.0+24090+8f0ee565
pgaudit
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.0-1.module+el9.8.0+24090+8f0ee565
0:16.0-1.module+el9.8.0+24090+8f0ee565
pgaudit-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.0-1.module+el9.8.0+24090+8f0ee565
0:16.0-1.module+el9.8.0+24090+8f0ee565
pgaudit-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.0-1.module+el9.8.0+24090+8f0ee565
0:16.0-1.module+el9.8.0+24090+8f0ee565
pgvector
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:0.6.2-2.module+el9.8.0+24090+8f0ee565
0:0.6.2-2.module+el9.8.0+24090+8f0ee565
pgvector-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:0.6.2-2.module+el9.8.0+24090+8f0ee565
0:0.6.2-2.module+el9.8.0+24090+8f0ee565
pgvector-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:0.6.2-2.module+el9.8.0+24090+8f0ee565
0:0.6.2-2.module+el9.8.0+24090+8f0ee565
postgis
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:3.5.3-6.module+el9.8.0+24839+3a67b9ca
0:3.5.3-6.module+el9.8.0+24839+3a67b9ca
postgis-client
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:3.5.3-6.module+el9.8.0+24839+3a67b9ca
0:3.5.3-6.module+el9.8.0+24839+3a67b9ca
postgis-client-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:3.5.3-6.module+el9.8.0+24839+3a67b9ca
0:3.5.3-6.module+el9.8.0+24839+3a67b9ca
postgis-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:3.5.3-6.module+el9.8.0+24839+3a67b9ca
0:3.5.3-6.module+el9.8.0+24839+3a67b9ca
postgis-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:3.5.3-6.module+el9.8.0+24839+3a67b9ca
0:3.5.3-6.module+el9.8.0+24839+3a67b9ca
postgis-docs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:3.5.3-6.module+el9.8.0+24839+3a67b9ca
0:3.5.3-6.module+el9.8.0+24839+3a67b9ca
postgis-upgrade
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:3.5.3-6.module+el9.8.0+24839+3a67b9ca
0:3.5.3-6.module+el9.8.0+24839+3a67b9ca
postgis-upgrade-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:3.5.3-6.module+el9.8.0+24839+3a67b9ca
0:3.5.3-6.module+el9.8.0+24839+3a67b9ca
postgis-utils
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:3.5.3-6.module+el9.8.0+24839+3a67b9ca
0:3.5.3-6.module+el9.8.0+24839+3a67b9ca
postgres-decoderbufs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:2.4.0-1.Final.module+el9.8.0+24090+8f0ee565
0:2.4.0-1.Final.module+el9.8.0+24090+8f0ee565
postgres-decoderbufs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:2.4.0-1.Final.module+el9.8.0+24090+8f0ee565
0:2.4.0-1.Final.module+el9.8.0+24090+8f0ee565
postgres-decoderbufs-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:2.4.0-1.Final.module+el9.8.0+24090+8f0ee565
0:2.4.0-1.Final.module+el9.8.0+24090+8f0ee565
postgresql
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-contrib
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-contrib-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-docs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-docs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-plperl
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-plperl-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-plpython3
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-plpython3-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-pltcl
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-pltcl-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-private-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-private-libs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-private-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-server
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-server-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-server-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-server-devel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-static
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-test
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-test-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-test-rpm-macros
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-upgrade
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-upgrade-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-upgrade-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
postgresql-upgrade-devel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 17 CVEs
 before 0:16.15-1.module+el9.8.0+24803+9dca000b
0:16.15-1.module+el9.8.0+24803+9dca000b
pg_repack
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:1.5.3-1.module+el9.8.0+23739+1c42644c
0:1.5.3-1.module+el9.8.0+23739+1c42644c
pg_repack-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:1.5.3-1.module+el9.8.0+23739+1c42644c
0:1.5.3-1.module+el9.8.0+23739+1c42644c
pg_repack-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:1.5.3-1.module+el9.8.0+23739+1c42644c
0:1.5.3-1.module+el9.8.0+23739+1c42644c
pgaudit
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.0-1.module+el9.8.0+23739+1c42644c
0:18.0-1.module+el9.8.0+23739+1c42644c
pgaudit-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.0-1.module+el9.8.0+23739+1c42644c
0:18.0-1.module+el9.8.0+23739+1c42644c
pgaudit-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.0-1.module+el9.8.0+23739+1c42644c
0:18.0-1.module+el9.8.0+23739+1c42644c
pgvector
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:0.8.1-1.module+el9.8.0+23739+1c42644c
0:0.8.1-1.module+el9.8.0+23739+1c42644c
pgvector-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:0.8.1-1.module+el9.8.0+23739+1c42644c
0:0.8.1-1.module+el9.8.0+23739+1c42644c
pgvector-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:0.8.1-1.module+el9.8.0+23739+1c42644c
0:0.8.1-1.module+el9.8.0+23739+1c42644c
postgis
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:3.6.1-4.module+el9.8.0+24879+1364ef12
0:3.6.1-4.module+el9.8.0+24879+1364ef12
postgis-client
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:3.6.1-4.module+el9.8.0+24879+1364ef12
0:3.6.1-4.module+el9.8.0+24879+1364ef12
postgis-client-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:3.6.1-4.module+el9.8.0+24879+1364ef12
0:3.6.1-4.module+el9.8.0+24879+1364ef12
postgis-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:3.6.1-4.module+el9.8.0+24879+1364ef12
0:3.6.1-4.module+el9.8.0+24879+1364ef12
postgis-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:3.6.1-4.module+el9.8.0+24879+1364ef12
0:3.6.1-4.module+el9.8.0+24879+1364ef12
postgis-docs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:3.6.1-4.module+el9.8.0+24879+1364ef12
0:3.6.1-4.module+el9.8.0+24879+1364ef12
postgis-upgrade
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:3.6.1-4.module+el9.8.0+24879+1364ef12
0:3.6.1-4.module+el9.8.0+24879+1364ef12
postgis-upgrade-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:3.6.1-4.module+el9.8.0+24879+1364ef12
0:3.6.1-4.module+el9.8.0+24879+1364ef12
postgis-utils
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:3.6.1-4.module+el9.8.0+24879+1364ef12
0:3.6.1-4.module+el9.8.0+24879+1364ef12
postgres-decoderbufs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:3.3.1-1.Final.module+el9.8.0+23739+1c42644c
0:3.3.1-1.Final.module+el9.8.0+23739+1c42644c
postgres-decoderbufs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:3.3.1-1.Final.module+el9.8.0+23739+1c42644c
0:3.3.1-1.Final.module+el9.8.0+23739+1c42644c
postgres-decoderbufs-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:3.3.1-1.Final.module+el9.8.0+23739+1c42644c
0:3.3.1-1.Final.module+el9.8.0+23739+1c42644c
postgresql
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-contrib
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-contrib-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-docs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-docs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-plperl
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-plperl-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-plpython3
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-plpython3-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-pltcl
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-pltcl-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-private-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-private-libs
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-private-libs-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-server
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-server-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-server-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-server-devel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-static
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-test
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-test-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-test-rpm-macros
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-upgrade
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-upgrade-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-upgrade-devel
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql-upgrade-devel-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 20 CVEs
 before 0:18.6-1.module+el9.8.0+24816+5c11f535
0:18.6-1.module+el9.8.0+24816+5c11f535
postgresql16-postgis
Rocky Linux:10
 before 0:3.5.3-4.el10_2.1
0:3.5.3-4.el10_2.1
postgresql18-postgis
Rocky Linux:10
 before 0:3.5.3-1.el10_2.1
0:3.5.3-1.el10_2.1
pgaudit
Rocky Linux:9
From an advisory covering 17 CVEs
 before 0:16.0-1.module+el9.8.0+40159+adcaa225
0:16.0-1.module+el9.8.0+40159+adcaa225
pgaudit
Rocky Linux:9
From an advisory covering 17 CVEs
 before 0:16.0-1.module+el9.8.0+40212+d6f50005
0:16.0-1.module+el9.8.0+40212+d6f50005
pg_repack
Rocky Linux:9
From an advisory covering 17 CVEs
 before 0:1.5.1-1.module+el9.8.0+40212+d6f50005
0:1.5.1-1.module+el9.8.0+40212+d6f50005
pg_repack
Rocky Linux:9
From an advisory covering 17 CVEs
 before 0:1.5.1-1.module+el9.8.0+40159+adcaa225
0:1.5.1-1.module+el9.8.0+40159+adcaa225
pgvector
Rocky Linux:9
From an advisory covering 17 CVEs
 before 0:0.6.2-2.module+el9.8.0+40159+adcaa225
0:0.6.2-2.module+el9.8.0+40159+adcaa225
pgvector
Rocky Linux:9
From an advisory covering 17 CVEs
 before 0:0.6.2-2.module+el9.8.0+40212+d6f50005
0:0.6.2-2.module+el9.8.0+40212+d6f50005
postgres-decoderbufs
Rocky Linux:9
From an advisory covering 17 CVEs
 before 0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225
0:2.4.0-1.Final.module+el9.8.0+40159+adcaa225
postgres-decoderbufs
Rocky Linux:9
From an advisory covering 17 CVEs
 before 0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005
0:2.4.0-1.Final.module+el9.8.0+40212+d6f50005
pgaudit
Rocky Linux:9
From an advisory covering 20 CVEs
 before 0:18.0-1.module+el9.8.0+40158+490b3c67
0:18.0-1.module+el9.8.0+40158+490b3c67
pgaudit
Rocky Linux:9
From an advisory covering 20 CVEs
 before 0:18.0-1.module+el9.8.0+40213+f1e225a4
0:18.0-1.module+el9.8.0+40213+f1e225a4
pg_repack
Rocky Linux:9
From an advisory covering 20 CVEs
 before 0:1.5.3-1.module+el9.8.0+40213+f1e225a4
0:1.5.3-1.module+el9.8.0+40213+f1e225a4
pg_repack
Rocky Linux:9
From an advisory covering 20 CVEs
 before 0:1.5.3-1.module+el9.8.0+40158+490b3c67
0:1.5.3-1.module+el9.8.0+40158+490b3c67
pgvector
Rocky Linux:9
From an advisory covering 20 CVEs
 before 0:0.8.1-1.module+el9.8.0+40158+490b3c67
0:0.8.1-1.module+el9.8.0+40158+490b3c67
pgvector
Rocky Linux:9
From an advisory covering 20 CVEs
 before 0:0.8.1-1.module+el9.8.0+40213+f1e225a4
0:0.8.1-1.module+el9.8.0+40213+f1e225a4
postgres-decoderbufs
Rocky Linux:9
From an advisory covering 20 CVEs
 before 0:3.3.1-1.Final.module+el9.8.0+40213+f1e225a4
0:3.3.1-1.Final.module+el9.8.0+40213+f1e225a4
postgres-decoderbufs
Rocky Linux:9
From an advisory covering 20 CVEs
 before 0:3.3.1-1.Final.module+el9.8.0+40158+490b3c67
0:3.3.1-1.Final.module+el9.8.0+40158+490b3c67
postgis
Ubuntu:16.04:LTS
 All versions, plus listed versions
2.1.8+dfsg-42.2.0+dfsg-12.2.0+dfsg-32.2.1+dfsg-12.2.1+dfsg-22.2.1+dfsg-2ubuntu0.1
 None known
postgis
Ubuntu:18.04:LTS
 All versions, plus listed versions
2.3.3+dfsg-12.4.2+dfsg-12.4.2+dfsg-2ubuntu22.4.2+dfsg-32.4.3+dfsg-22.4.3+dfsg-32.4.3+dfsg-4
 None known
postgis
Ubuntu:20.04:LTS
 All versions, plus listed versions
2.5.3+dfsg-13.0.0+dfsg-2ubuntu13.0.0+dfsg-6ubuntu4
 None known
postgis
Ubuntu:22.04:LTS
 All versions, plus listed versions
3.1.1+dfsg-13.1.4+dfsg-3ubuntu23.2.0+dfsg-1ubuntu1
 None known
postgis
Ubuntu:24.04:LTS
 All versions, plus listed versions
3.3.3+dfsg-2ubuntu13.4.0+dfsg-4ubuntu13.4.1+dfsg-1ubuntu13.4.2+dfsg-1ubuntu13.4.2+dfsg-1ubuntu23.4.2+dfsg-1ubuntu3
 None known
postgis
Ubuntu:26.10
 All versions, plus listed versions
3.6.2+dfsg-13.6.4+dfsg-2
 None known
postgis
Ubuntu:26.04:LTS
 All versions, plus listed versions
3.5.3+dfsg-2build13.6.1+dfsg-1build13.6.2+dfsg-1
 None known

History

History
RecordedChangedSources
affected
affected, factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2026-73515 is a high vulnerability (CVSS 7.2) in Postgis, published August 13, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.57%, the 47th percentile. Fixed in postgis 3.5.3-4.el10_2.1.

References

Show 141 moreShow less
This page doesn't list everything

Left out here: 19 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open