Critical Security Update for postgresql18-postgis: CVE-2026-73515
Summary
RHSA-2026:67166: Red Hat Security Advisory: postgresql18-postgis security update. Affects postgresql18-postgis versions < 0:3.5.3-1.el10_2.1. Fixed in 0:3.5.3-1.el10_2.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The postgresql18-postgis package is an extension for PostgreSQL that adds support for geographic objects, allowing location queries to be run in the database. It is widely used in applications that require spatial data processing. The package is crucial for developers and organizations that rely on geospatial data, making its security paramount. This vulnerability affects versions prior to 3.5.3-1.el10_2.1, potentially exposing systems to security risks.
Vulnerability Detail
CVE-2026-73515 is a critical vulnerability in the postgresql18-postgis package that could allow an attacker to exploit the system through specially crafted requests. The vulnerability arises from insufficient validation of input data, which could lead to unauthorized access or data manipulation. If exploited, this could result in significant data breaches or service disruptions, making it essential for users to address this issue promptly.
How To Fix
Minimum fixed version
0:3.5.3-1.el10_2.1
This is the first release that contains the fix.
sudo dnf update postgresql18-postgisTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not feasible, consider restricting access to the database or implementing additional network security measures to minimize exposure until the patch can be applied.
Conclusion
The postgresql18-postgis package has a critical vulnerability (CVE-2026-73515) that requires immediate attention. Users are advised to update to the patched version to secure their systems. For those unable to update right away, implementing temporary security measures is recommended.
See every vulnerability recorded for postgresql18-postgis →
FAQ
CVE-2026-73515 is a critical vulnerability in the postgresql18-postgis package that could allow attackers to exploit the system through crafted requests.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploitation of this vulnerability could lead to unauthorized access, data manipulation, and significant data breaches.
Yes, a patched version 0:3.5.3-1.el10_2.1 is available. Users should update their packages to this version.
If you cannot update immediately, consider restricting database access and enhancing network security to mitigate risks.
Related vulnerabilities
Recent vulnerabilities recorded for postgresql18-postgis.
