[Apollo] Advisories Statistics light light Login

RLSA-2026:65899

Security Mirrored from RHSA-2026:65899
Issued at: 2026-09-10
Updated at: 2026-09-10

Advisory content derived from Red Hat RHSA-2026:65899, © Red Hat, Inc., used under CC BY 4.0, with modifications.

Synopsis

Important: postgresql16-postgis security update



Description

PostGIS adds support for geographic objects to the PostgreSQL object-relational database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic information systems (GIS), much like ESRI's SDE or Oracle's Spatial extension. PostGIS follows the OpenGIS "Simple Features Specification for SQL" and has been certified as compliant with the "Types and Functions" profile.

Security Fix(es):

* postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer (CVE-2026-73515)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.



Affected products

Rocky Linux 10 aarch64 Rocky Linux 10 ppc64le Rocky Linux 10 riscv64 Rocky Linux 10 s390x Rocky Linux 10 x86_64

Fixes

2515434

CVEs

CVE-2026-73515

Affected packages

Rocky Linux 10 aarch64 - AppStream

postgis-client-debuginfo-0:3.5.3-4.el10_2.1.aarch64.rpm postgresql16-postgis-debuginfo-0:3.5.3-4.el10_2.1.aarch64.rpm postgresql16-postgis-debugsource-0:3.5.3-4.el10_2.1.aarch64.rpm postgis-upgrade-0:3.5.3-4.el10_2.1.aarch64.rpm postgis-upgrade-debuginfo-0:3.5.3-4.el10_2.1.aarch64.rpm postgresql16-postgis-0:3.5.3-4.el10_2.1.src.rpm postgis-0:3.5.3-4.el10_2.1.aarch64.rpm postgis-client-0:3.5.3-4.el10_2.1.aarch64.rpm postgis-docs-0:3.5.3-4.el10_2.1.aarch64.rpm postgis-utils-0:3.5.3-4.el10_2.1.aarch64.rpm postgis-debuginfo-0:3.5.3-4.el10_2.1.aarch64.rpm

Rocky Linux 10 ppc64le - AppStream

postgis-upgrade-0:3.5.3-4.el10_2.1.ppc64le.rpm postgis-0:3.5.3-4.el10_2.1.ppc64le.rpm postgis-docs-0:3.5.3-4.el10_2.1.ppc64le.rpm postgis-upgrade-debuginfo-0:3.5.3-4.el10_2.1.ppc64le.rpm postgis-debuginfo-0:3.5.3-4.el10_2.1.ppc64le.rpm postgis-client-debuginfo-0:3.5.3-4.el10_2.1.ppc64le.rpm postgresql16-postgis-debuginfo-0:3.5.3-4.el10_2.1.ppc64le.rpm postgresql16-postgis-0:3.5.3-4.el10_2.1.src.rpm postgis-utils-0:3.5.3-4.el10_2.1.ppc64le.rpm postgresql16-postgis-debugsource-0:3.5.3-4.el10_2.1.ppc64le.rpm postgis-client-0:3.5.3-4.el10_2.1.ppc64le.rpm

Rocky Linux 10 x86_64 - AppStream

postgresql16-postgis-debugsource-0:3.5.3-4.el10_2.1.x86_64.rpm postgis-client-0:3.5.3-4.el10_2.1.x86_64.rpm postgis-utils-0:3.5.3-4.el10_2.1.x86_64.rpm postgis-client-debuginfo-0:3.5.3-4.el10_2.1.x86_64.rpm postgis-upgrade-0:3.5.3-4.el10_2.1.x86_64.rpm postgis-0:3.5.3-4.el10_2.1.x86_64.rpm postgresql16-postgis-0:3.5.3-4.el10_2.1.src.rpm postgresql16-postgis-debuginfo-0:3.5.3-4.el10_2.1.x86_64.rpm postgis-docs-0:3.5.3-4.el10_2.1.x86_64.rpm postgis-debuginfo-0:3.5.3-4.el10_2.1.x86_64.rpm postgis-upgrade-debuginfo-0:3.5.3-4.el10_2.1.x86_64.rpm

Rocky Linux 10 s390x - AppStream

postgresql16-postgis-debuginfo-0:3.5.3-4.el10_2.1.s390x.rpm postgis-upgrade-0:3.5.3-4.el10_2.1.s390x.rpm postgresql16-postgis-debugsource-0:3.5.3-4.el10_2.1.s390x.rpm postgis-client-0:3.5.3-4.el10_2.1.s390x.rpm postgis-0:3.5.3-4.el10_2.1.s390x.rpm postgresql16-postgis-0:3.5.3-4.el10_2.1.src.rpm postgis-upgrade-debuginfo-0:3.5.3-4.el10_2.1.s390x.rpm postgis-docs-0:3.5.3-4.el10_2.1.s390x.rpm postgis-utils-0:3.5.3-4.el10_2.1.s390x.rpm postgis-client-debuginfo-0:3.5.3-4.el10_2.1.s390x.rpm postgis-debuginfo-0:3.5.3-4.el10_2.1.s390x.rpm

Rocky Linux 10 riscv64 - AppStream

postgresql16-postgis-0:3.5.3-4.el10_2.1.src.rpm