Red Hat Product Errata RHSA-2026:65899 - Security Advisory Issued: 2026-09-09 Updated: 2026-09-09 RHSA-2026:65899 - Security Advisory Overview Updated Packages Synopsis Important: postgresql16-postgis security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for postgresql16-postgis is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description PostGIS adds support for geographic objects to the PostgreSQL object-relational database. In effect, PostGIS "spatially enables" the PostgreSQL server, allowing it to be used as a backend spatial database for geographic information systems (GIS), much like ESRI's SDE or Oracle's Spatial extension. PostGIS follows the OpenGIS "Simple Features Specification for SQL" and has been certified as compliant with the "Types and Functions" profile. Security Fix(es): postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer (CVE-2026-73515) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2515434 - CVE-2026-73515 postgis: PostGIS: Memory Disclosure and Denial of Service via Malformed FlatGeobuf Buffer CVEs CVE-2026-73515 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM postgresql16-postgis-3.5.3-4.el10_2.1.src.rpm SHA-256: d9ac1c7682a9b4658f422a894f1a4d32c71a221772438aa4fa82f9a513704a0c x86_64 postgis-3.5.3-4.el10_2.1.x86_64.rpm SHA-256: e33315ffcab69623764efc170ae23f1afd2f87f7d5a332a0672fc635f500a665 postgis-client-3.5.3-4.el10_2.1.x86_64.rpm SHA-256: 0e85b40c94c895c05c780f347f822599c875899249467baa330f3abcc033023e postgis-client-debuginfo-3.5.3-4.el10_2.1.x86_64.rpm SHA-256: a1ed4f7a6ff3de2b6423ec0bcb27504c6ce2be604a685cd825d63870dd437589 postgis-debuginfo-3.5.3-4.el10_2.1.x86_64.rpm SHA-256: ee7955e3c62891ac337215823e4db80d3e54bd5bbbd5098a2592786d4cbe7da2 postgis-docs-3.5.3-4.el10_2.1.x86_64.rpm SHA-256: 0a9e1dafb52864da233f5d9d26db0e7b8961d2123477af2e000e651ee9a13612 postgis-upgrade-3.5.3-4.el10_2.1.x86_64.rpm SHA-256: 91803f685cd88bfb08ed5fed66a70bf1ad1e3fe20439945706b1ca67e8750ca5 postgis-upgrade-debuginfo-3.5.3-4.el10_2.1.x86_64.rpm SHA-256: 8ba8b8c7a524e8057f58756f50b673ef7ec0d3756c2c300cfb7f7da3ce7c52e0 postgis-utils-3.5.3-4.el10_2.1.x86_64.rpm SHA-256: 6299efeaecd790c8877438a9f58e3a68bb79e8ccb3c6e5ed608ff0ef39afee15 postgresql16-postgis-debuginfo-3.5.3-4.el10_2.1.x86_64.rpm SHA-256: b0cf61871ade1f907a937ae4b93e54afd94ae9d28b4177b3e50086f99e88816a postgresql16-postgis-debugsource-3.5.3-4.el10_2.1.x86_64.rpm SHA-256: 1369dda4a2378b7ab542800041f9a1cac3390125e70f9877ba5cb6c173546999 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM postgresql16-postgis-3.5.3-4.el10_2.1.src.rpm SHA-256: d9ac1c7682a9b4658f422a894f1a4d32c71a221772438aa4fa82f9a513704a0c x86_64 postgis-3.5.3-4.el10_2.1.x86_64.rpm SHA-256: e33315ffcab69623764efc170ae23f1afd2f87f7d5a332a0672fc635f500a665 postgis-client-3.5.3-4.el10_2.1.x86_64.rpm SHA-256: 0e85b40c94c895c05c780f347f822599c875899249467baa330f3abcc033023e postgis-client-debuginfo-3.5.3-4.el10_2.1.x86_64.rpm SHA-256: a1ed4f7a6ff3de2b6423ec0bcb27504c6ce2be604a685cd825d63870dd437589 postgis-debuginfo-3.5.3-4.el10_2.1.x86_64.rpm SHA-256: ee7955e3c62891ac337215823e4db80d3e54bd5bbbd5098a2592786d4cbe7da2 postgis-docs-3.5.3-4.el10_2.1.x86_64.rpm SHA-256: 0a9e1dafb52864da233f5d9d26db0e7b8961d2123477af2e000e651ee9a13612 postgis-upgrade-3.5.3-4.el10_2.1.x86_64.rpm SHA-256: 91803f685cd88bfb08ed5fed66a70bf1ad1e3fe20439945706b1ca67e8750ca5 postgis-upgrade-debuginfo-3.5.3-4.el10_2.1.x86_64.rpm SHA-256: 8ba8b8c7a524e8057f58756f50b673ef7ec0d3756c2c300cfb7f7da3ce7c52e0 postgis-utils-3.5.3-4.el10_2.1.x86_64.rpm SHA-256: 6299efeaecd790c8877438a9f58e3a68bb79e8ccb3c6e5ed608ff0ef39afee15 postgresql16-postgis-debuginfo-3.5.3-4.el10_2.1.x86_64.rpm SHA-256: b0cf61871ade1f907a937ae4b93e54afd94ae9d28b4177b3e50086f99e88816a postgresql16-postgis-debugsource-3.5.3-4.el10_2.1.x86_64.rpm SHA-256: 1369dda4a2378b7ab542800041f9a1cac3390125e70f9877ba5cb6c173546999 Red Hat Enterprise Linux for IBM z Systems 10 SRPM postgresql16-postgis-3.5.3-4.el10_2.1.src.rpm SHA-256: d9ac1c7682a9b4658f422a894f1a4d32c71a221772438aa4fa82f9a513704a0c s390x postgis-3.5.3-4.el10_2.1.s390x.rpm SHA-256: f8248b848a19babd79b11cf23ab1a7df896cc35beb9f15585bc043d80a7594fe postgis-client-3.5.3-4.el10_2.1.s390x.rpm SHA-256: c3419df44dfed8ed122dc468dc58bd278b3e50758217e509b5d9c720a48231ba postgis-client-debuginfo-3.5.3-4.el10_2.1.s390x.rpm SHA-256: cc38cc924eb0036f65da25fbc1f50eae256d9f978c4065b20a330446f8cc1ee9 postgis-debuginfo-3.5.3-4.el10_2.1.s390x.rpm SHA-256: 558a1a986642fa091933d61c3c574ae4b0c9e51b7604415bb87705a87cc1f780 postgis-docs-3.5.3-4.el10_2.1.s390x.rpm SHA-256: a58e8a5adfbadbe2641af3f276a55c02e72effeaf210d77ae85c3497e59fff3f postgis-upgrade-3.5.3-4.el10_2.1.s390x.rpm SHA-256: e59c0301b4691a968539ca20a6f91e12834a1f5785f5906cd8550bd80207261a postgis-upgrade-debuginfo-3.5.3-4.el10_2.1.s390x.rpm SHA-256: 4eee3cbb9a6133ac48482c0f78f3c93ec070a358ed030980c1383138ff15d692 postgis-utils-3.5.3-4.el10_2.1.s390x.rpm SHA-256: c2598945bf412fbd4ba34db3cc0d472a9acee2784db68fc7e7812d242591bd20 postgresql16-postgis-debuginfo-3.5.3-4.el10_2.1.s390x.rpm SHA-256: 813eae7ec24e26f906db1e8fa3fd2c4dc96f61042cdb364357bc630ccef333e7 postgresql16-postgis-debugsource-3.5.3-4.el10_2.1.s390x.rpm SHA-256: 583650daac71923733121131c4573892616aeec5aee1bb4a3c31dae8b0fa1ab6 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM postgresql16-postgis-3.5.3-4.el10_2.1.src.rpm SHA-256: d9ac1c7682a9b4658f422a894f1a4d32c71a221772438aa4fa82f9a513704a0c s390x postgis-3.5.3-4.el10_2.1.s390x.rpm SHA-256: f8248b848a19babd79b11cf23ab1a7df896cc35beb9f15585bc043d80a7594fe postgis-client-3.5.3-4.el10_2.1.s390x.rpm SHA-256: c3419df44dfed8ed122dc468dc58bd278b3e50758217e509b5d9c720a48231ba postgis-client-debuginfo-3.5.3-4.el10_2.1.s390x.rpm SHA-256: cc38cc924eb0036f65da25fbc1f50eae256d9f978c4065b20a330446f8cc1ee9 postgis-debuginfo-3.5.3-4.el10_2.1.s390x.rpm SHA-256: 558a1a986642fa091933d61c3c574ae4b0c9e51b7604415bb87705a87cc1f780 postgis-docs-3.5.3-4.el10_2.1.s390x.rpm SHA-256: a58e8a5adfbadbe2641af3f276a55c02e72effeaf210d77ae85c3497e59fff3f postgis-upgrade-3.5.3-4.el10_2.1.s390x.rpm SHA-256: e59c0301b4691a968539ca20a6f91e12834a1f5785f5906cd8550bd80207261a postgis-upgrade-debuginfo-3.5.3-4.el10_2.1.s390x.rpm SHA-256: 4eee3cbb9a6133ac48482c0f78f3c93ec070a358ed030980c1383138ff15d692 postgis-utils-3.5.3-4.el10_2.1.s390x.rpm SHA-256: c2598945bf412fbd4ba34db3cc0d472a9acee2784db68fc7e7812d242591bd20 postgresql16-postgis-debuginfo-3.5.3-4.el10_2.1.s390x.rpm SHA-256: 813eae7ec24e26f906db1e8fa3fd2c4dc96f61042cdb364357bc630ccef333e7 postgresql16-postgis-debugsource-3.5.3-4.el10_2.1.s390x.rpm SHA-256: 583650daac71923733121131c4573892616aeec5aee1bb4a3c31dae8b0fa1ab6 Red Hat Enterprise Linux for Power, little endian 10 SRPM postgresql16-postgis-3.5.3-4.el10_2.1.src.rpm SHA-256: d9ac1c7682a9b4658f422a894f1a4d32c71a221772438aa4fa82f9a513704a0c ppc64le postgis-3.5.3-4.el10_2.1.ppc64le.rpm SHA-256: 0b46b57e27845c6839709ed9a1ad713d4343ab2ec32ab1645bc1c94866703f5e postgis-client-3.5.3-4.el10_2.1.ppc64le.rpm SHA-256: aceed83de9d693d7ca7525c79e0a2442d7768196ed364361c697701d936ad719 postgis-client-debuginfo-3.5.3-4.el10_2.1.ppc64le.rpm SHA-256: a8f4b17221959c3e4e78b6883aca61e671a037f5ef055fbc046b5953c1ae0266 postgis-debuginfo-3.5.3-4.el10_2.1.ppc64le.rpm SHA-256: 342cb000a05b09dad197f71e077a4e179768c869ed2f68dfb2790fd3acd2eef2 postgis-docs-3.5.3-4.el10_2.1.ppc64le.rpm SHA-256: dc3719419d4534e60a772ad2a3c7415b41b85bbe9dcc8ac4e24482c195090e76 postgis-upgrade-3.5.3-4.el10_2.1.ppc64le.rpm SHA-256: bfb5d7e2938ea4b4cb1abbaeee1a98f1b7550c95497f8014df411926717cf2ef postgis-upgrade-debuginfo-3.5.3-4.el10_2.1.ppc64le.rpm SHA-256: 5ddac7d4d84a94465098165f6aaa250871c5a8f12c9168c3d1b558c719a95e87 postgis-utils-3.5.3-4.el10_2.1.ppc64le.rpm SHA-256: 4aa5ff95123891dd74a0b9986ca56260e902af677850f38dd54ad86902992db8 postgresql16-postgis-debuginfo-3.5.3-4.el10_2.1.ppc64le.rpm SHA-256: 123504bc46577824066a9849c34632e16dc8b60eb6ed559d