Register | Log in

postgis

Geographic objects support for PostgreSQL

Choose email to subscribe with

general

source: postgis (main)
version: 3.6.4+dfsg-2
maintainer: Debian GIS Project (archive) (DMD)
uploaders: Francesco Paolo Lovergine [DMD] – Christoph Berg [DMD] – Stephen Frost [DMD] – Markus Wanner [DMD] – Bas Couwenberg [DMD]
arch: all any
std-ver: 4.7.4
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

o-o-stable: 3.1.1+dfsg-1+deb11u2
oldstable: 3.3.2+dfsg-1
stable: 3.5.2+dfsg-1
testing: 3.6.4+dfsg-2
unstable: 3.6.4+dfsg-2
exp: 3.7.0~beta2+dfsg-1~exp1

versioned links

3.1.1+dfsg-1+deb11u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.3.2+dfsg-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.5.2+dfsg-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.6.4+dfsg-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
3.7.0~beta2+dfsg-1~exp1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

postgis
postgresql-18-postgis-3
postgresql-18-postgis-3-scripts
postgresql-postgis
postgresql-postgis-scripts

action needed

A new upstream version is available: 3.7.0beta2 high

A new upstream version 3.7.0beta2 is available, you should consider packaging it.

Created: 2026-07-08 Last update: 2026-08-15 19:31

1 security issue in trixie high

There is 1 open security issue in trixie.

1 important issue:

CVE-2026-73515: PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.

Created: 2026-08-14 Last update: 2026-08-14 10:00

1 security issue in sid high

There is 1 open security issue in sid.

1 important issue:

CVE-2026-73515: PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.

Created: 2026-08-14 Last update: 2026-08-14 10:00

1 security issue in forky high

There is 1 open security issue in forky.

1 important issue:

CVE-2026-73515: PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.

Created: 2026-08-14 Last update: 2026-08-14 10:00

1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:

CVE-2026-73515: PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.

Created: 2026-08-14 Last update: 2026-08-14 10:00

1 security issue in bookworm high

There is 1 open security issue in bookworm.

1 important issue:

CVE-2026-73515: PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.

Created: 2026-08-14 Last update: 2026-08-14 10:00

2 new commits since last upload, is it time to release? normal

vcswatch reports that this package seems to have new commits in its VCS but has not yet updated debian/changelog. You should consider updating the Debian changelog and uploading this new version into the archive.

Here are the relevant commit logs:

commit 32da5b68c159a4791ef9d734050c41b2551add3f
Author: Bas Couwenberg <sebastic@xs4all.nl>
Date:   Tue Aug 11 20:23:01 2026 +0200

    Mark test-doc.patch as Applied-Upstream.

commit 129efad6a86005a7cafda95923fc05f507771eea
Author: Bas Couwenberg <sebastic@xs4all.nl>
Date:   Mon Aug 10 19:18:34 2026 +0200

    Revert control changes.

https://salsa.debian.org/api/v4/projects/debian-gis-team%2Fpostgis API request failed: 401 Unauthorized at /srv/qa.debian.org/data/vcswatch/vcswatch line 410.

Created: 2026-08-10 Last update: 2026-08-11 20:00

Issues found with some translations low

Automatic checks made by the Debian l10n team found some issues with the translations contained in this package. You should check the l10n status report for more information.

Issues can be things such as missing translations, problematic translated strings, outdated PO files, unknown languages, etc.

Created: 2023-11-22 Last update: 2025-09-04 01:01

news

[2026-08-10] Accepted postgis 3.7.0~beta2+dfsg-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2026-07-21] Accepted postgis 3.7.0~beta1+dfsg-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2026-07-07] Accepted postgis 3.7.0~alpha1+dfsg-1~exp2 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2026-07-06] Accepted postgis 3.7.0~alpha1+dfsg-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2026-06-16] postgis 3.6.4+dfsg-2 MIGRATED to testing (Debian testing watch)
[2026-06-14] Accepted postgis 3.6.4+dfsg-2 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2026-06-11] postgis 3.6.4+dfsg-1 MIGRATED to testing (Debian testing watch)
[2026-06-09] Accepted postgis 3.6.4+dfsg-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2026-04-17] postgis 3.6.3+dfsg-1 MIGRATED to testing (Debian testing watch)
[2026-04-15] Accepted postgis 3.6.3+dfsg-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2026-02-13] postgis 3.6.2+dfsg-1 MIGRATED to testing (Debian testing watch)
[2026-02-10] Accepted postgis 3.6.2+dfsg-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2025-11-18] postgis 3.6.1+dfsg-1 MIGRATED to testing (Debian testing watch)
[2025-11-15] Accepted postgis 3.6.1+dfsg-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2025-11-14] Accepted postgis 3.6.1+dfsg-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2025-11-05] postgis 3.6.0+dfsg-3 MIGRATED to testing (Debian testing watch)
[2025-11-03] Accepted postgis 3.6.0+dfsg-3 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2025-10-14] postgis 3.6.0+dfsg-2 MIGRATED to testing (Debian testing watch)
[2025-10-09] Accepted postgis 3.6.0+dfsg-2 (source amd64 all) into unstable (Debian FTP Masters) (signed by: Sebastiaan Couwenberg)
[2025-09-04] postgis 3.6.0+dfsg-1 MIGRATED to testing (Debian testing watch)
[2025-09-02] Accepted postgis 3.6.0+dfsg-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2025-08-29] postgis 3.5.3+dfsg-2 MIGRATED to testing (Debian testing watch)
[2025-08-25] Accepted postgis 3.6.0~rc2+dfsg-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2025-08-23] Accepted postgis 3.5.3+dfsg-2 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2025-08-19] Accepted postgis 3.6.0~rc1+dfsg-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2025-08-17] postgis 3.5.3+dfsg-1 MIGRATED to testing (Debian testing watch)
[2025-08-11] Accepted postgis 3.5.3+dfsg-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2025-07-20] Accepted postgis 3.6.0~beta1+dfsg-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2025-05-18] Accepted postgis 3.6.0~alpha1+dfsg-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
[2025-05-18] Accepted postgis 3.5.3+dfsg-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)

1
2

bugs [bug history graph]

all: 0

links

homepage
lintian
buildd: logs, exp, reproducibility, cross
popcon
browse source code
other distros
security tracker
l10n (37, -)
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 3.6.4+dfsg-2

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers

Report problems to the tracker.debian.org pseudo-package in the Debian BTS.

Documentation — Bugs — Git Repository — Contributing