39 matches found
Rocky Linux 10.2 [CIQ] Security Update: postgresql18-postgis / postgresql18-postgis-client / etc (crlsa-2026_67166)
The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202667166 advisory. postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer CVE-2026-73515 Tenable has extracted the preceding description block...
BIT-POSTGIS-2026-73515 PostGIS < 3.7.0 Out-of-Bounds Read via FlatGeobuf Buffer
PostGIS before 3.7.0 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the...
PT-2026-99013
PostGIS before 3.7.0 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the...
AlmaLinux 10 : postgresql18-postgis (ALSA-2026:67166)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:67166 advisory. postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer CVE-2026-73515 Tenable has extracted the preceding description block...
Oracle Linux 10 : ELSA-2026-67166-0: / postgresql18-postgis (ELSA-2026-671660)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-671660 advisory. 3.5.3-1.1 - Fix CVE-2026-73515: validate FlatGeobuf input buffers before decoding Tenable has extracted the preceding description block directly from the...
postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer
A flaw was found in PostGIS. This out-of-bounds read vulnerability allows a remote attacker to cause memory disclosure or a server crash. This occurs when a malformed FlatGeobuf buffer is supplied, as the FlatGeobuf property metadata decoder fails to verify that the string body is contained withi...
postgresql18-postgis security update
An update is available for postgresql18-postgis. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list PostGIS adds support for geographic objects to the PostgreSQL...
RLSA-2026:67166 Important: postgresql18-postgis security update
PostGIS adds support for geographic objects to the PostgreSQL object-relational database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic information systems GIS, much like ESRI's SDE or Oracle's Spatial extension...
postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer
A flaw was found in PostGIS. This out-of-bounds read vulnerability allows a remote attacker to cause memory disclosure or a server crash. This occurs when a malformed FlatGeobuf buffer is supplied, as the FlatGeobuf property metadata decoder fails to verify that the string body is contained withi...
RockyLinux 10 : postgresql18-postgis (RLSA-2026:67166)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67166 advisory. postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer CVE-2026-73515 Tenable has extracted the preceding description block...
Important: Red Hat Security Advisory: postgresql18-postgis security update
An update for postgresql18-postgis is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer
A flaw was found in PostGIS. This out-of-bounds read vulnerability allows a remote attacker to cause memory disclosure or a server crash. This occurs when a malformed FlatGeobuf buffer is supplied, as the FlatGeobuf property metadata decoder fails to verify that the string body is contained withi...
ALSA-2026:67166 Important: postgresql18-postgis security update
PostGIS adds support for geographic objects to the PostgreSQL object-relational database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic information systems GIS, much like ESRI's SDE or Oracle's Spatial extension...
RHEL 10 : postgresql18-postgis (RHSA-2026:67166)
The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67166 advisory. PostGIS adds support for geographic objects to the PostgreSQL object-relational database. In effect, PostGIS spatially enables the PostgreSQL serve...
AlmaLinux 10 : postgresql16-postgis (ALSA-2026:65899)
The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:65899 advisory. postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer CVE-2026-73515 Tenable has extracted the preceding description block...
Oracle Linux 10 : ELSA-2026-65899-0: / postgresql16-postgis (ELSA-2026-658990)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-658990 advisory. 3.5.3-4.1 - Fix CVE-2026-73515: validate flatgeobuf input buffers before decoding Tenable has extracted the preceding description block directly from the...
postgresql16-postgis security update
An update is available for postgresql16-postgis. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list PostGIS adds support for geographic objects to the PostgreSQL...
RLSA-2026:65899 Important: postgresql16-postgis security update
PostGIS adds support for geographic objects to the PostgreSQL object-relational database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic information systems GIS, much like ESRI's SDE or Oracle's Spatial extension...
RockyLinux 10 : postgresql16-postgis (RLSA-2026:65899)
The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:65899 advisory. postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer CVE-2026-73515 Tenable has extracted the preceding description block...
