geoserver-CVE-2023-25157

geoserver CVE-2023-25157 White Hat 3rd Cohort Class 30 Kim Jeong-woo github link - https://github.com/custiya/geoserver-CVE-2023-25157 Vulnerability Summary CVE-2023-25157 is an SQLi vulnerability that occurred in GeoServer, an open-source map data service web application. Occurs in some versions...

GeoServer jsonArrayContains CQL Filter - SQL Injection

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoTools FilterToSqlHelper.constructEquality writes the expected argument of the jsonArrayContains CQL function RAW into the SQL string while only escaping the JSON pointer. A single...

Django RasterField - SQL Injection

Django 6.0.2, 5.2.11, and 4.2.28 contains a SQL injection caused by improper sanitization of the band index parameter in RasterField on PostGIS, letting remote attackers inject SQL, exploit requires crafted input. id: CVE-2026-1207 info: name: Django RasterField - SQL Injection author: omarkurt...

GeoServer OGC Filter - SQL Injection

GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language CQL as part of the Web Feature Service WFS and Web Map Service WMS protocols. CQL is...

Updated postgis package fixes a security vulnerability

PostGIS 3.7.0beta2 Out-of-Bounds Read via FlatGeobuf Buffer. CVE-2026-73515...

MGASA-2026-0524 Updated postgis package fixes a security vulnerability

PostGIS 3.7.0beta2 Out-of-Bounds Read via FlatGeobuf Buffer. CVE-2026-73515...

postgresql:16 security update

pgaudit 16.0-1 - Update to 16.0 - Support postgresql 16 - Initial import for PG 16 module - Resolves: RHEL-3635 pgrepack 1.5.1-1 - Update to v1.5.1 1.4.8-2 - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47604 1.4.8-1 - Resolves: RHEL-3636 - Initial import for PG 16...

postgresql:18 security update

pgaudit 18.0-1 - Update to 18.0 - Initial import for postgresql18 pgrepack 1.5.3-1 - Update to 1.5.3 - Initial import for postgresql18 1.5.1-1 - Update to v1.5.1 1.4.8-2 - Add new build dependencies to fix build with lz4 enabled - Related: RHEL-47604 pgvector 0.8.7-1 - Update to 0.8.7 - Fixes...

[SECURITY] Fedora 45 Update: postgresql18-postgis-3.6.4-6.fc45

PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...

[SECURITY] Fedora 45 Update: postgresql17-postgis-3.6.4-6.fc45

PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...

[SECURITY] Fedora 45 Update: postgresql16-postgis-3.6.4-6.fc45

PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...

Rocky Linux 10.2 [CIQ] Security Update: postgresql18-postgis / postgresql18-postgis-client / etc (crlsa-2026_67166)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202667166 advisory. postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer CVE-2026-73515 Tenable has extracted the preceding description block...

Rocky Linux 10.2 [CIQ] Security Update: postgis / postgis-client / postgis-client-debuginfo / etc (crlsa-2026_65899)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202665899 advisory. postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer CVE-2026-73515 Tenable has extracted the preceding description block...

[SECURITY] Fedora 43 Update: postgresql17-postgis-3.6.4-5.fc43

PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...

[SECURITY] Fedora 43 Update: postgresql16-postgis-3.6.4-5.fc43

PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...

[SECURITY] Fedora 43 Update: postgresql18-postgis-3.6.4-5.fc43

PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...

[SECURITY] Fedora 44 Update: postgresql17-postgis-3.6.4-5.fc44

PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...

[SECURITY] Fedora 44 Update: postgresql16-postgis-3.6.4-5.fc44

PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...

[SECURITY] Fedora 44 Update: postgresql18-postgis-3.6.4-5.fc44

PostGIS adds support for geographic objects to the PostgreSQL object-relation al database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic informati on systems GIS, much like ESRI's SDE or Oracle's Spatial extension...

Fedora 43 : postgresql16-postgis / postgresql17-postgis / postgresql18-postgis (2026-bb0d483289)

The remote Fedora 43 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2026-bb0d483289 advisory. Backport fix for CVE-2026-73515. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus...