Debian Package Tracker
Register | Log in
Subscribe

postgis

Geographic objects support for PostgreSQL

Choose email to subscribe with

general
  • source: postgis (main)
  • version: 3.7.0+dfsg-1
  • maintainer: Debian GIS Project (archive) (DMD)
  • uploaders: Francesco Paolo Lovergine (DMD) – Christoph Berg (DMD) – Stephen Frost (DMD) – Markus Wanner (DMD) – Bas Couwenberg (DMD)
  • arch: all any
  • std-ver: 4.7.4
  • VCS: Git (Browse, QA)
versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]
[pool directory]
  • o-o-stable: 3.1.1+dfsg-1+deb11u2
  • oldstable: 3.3.2+dfsg-1
  • stable: 3.5.2+dfsg-1
  • testing: 3.7.0+dfsg-1
  • unstable: 3.7.0+dfsg-1
versioned links
  • 3.1.1+dfsg-1+deb11u2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 3.3.2+dfsg-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 3.5.2+dfsg-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
  • 3.7.0+dfsg-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
binaries
  • postgis
  • postgresql-18-postgis-3
  • postgresql-18-postgis-3-scripts
  • postgresql-postgis
  • postgresql-postgis-scripts
action needed
1 security issue in bullseye high

There is 1 open security issue in bullseye.

1 important issue:
  • CVE-2026-73515: PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.
Created: 2026-08-14 Last update: 2026-08-18 18:02
1 low-priority security issue in trixie low

There is 1 open security issue in trixie.

1 issue left for the package maintainer to handle:
  • CVE-2026-73515: (needs triaging) PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer. The FlatGeobuf property metadata decoder verifies that a string length field is present but fails to verify that the subsequent string body is contained within the supplied buffer before materializing it into a SQL-visible value, enabling memory disclosure or denial of service.

You can find information about how to handle this issue in the security team's documentation.

Created: 2026-08-14 Last update: 2026-11-04 01:32
Issues found with some translations low

Automatic checks made by the Debian l10n team found some issues with the translations contained in this package. You should check the l10n status report for more information.

Issues can be things such as missing translations, problematic translated strings, outdated PO files, unknown languages, etc.

Created: 2023-11-22 Last update: 2026-10-31 11:01
news
[rss feed]
  • [2026-11-03] postgis 3.7.0+dfsg-1 MIGRATED to testing (Debian testing watch)
  • [2026-10-30] Accepted postgis 3.7.0+dfsg-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
  • [2026-10-21] Accepted postgis 3.7.0~rc3+dfsg-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
  • [2026-09-09] Accepted postgis 3.7.0~rc2+dfsg-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
  • [2026-08-24] Accepted postgis 3.7.0~rc1+dfsg-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
  • [2026-08-10] Accepted postgis 3.7.0~beta2+dfsg-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
  • [2026-07-21] Accepted postgis 3.7.0~beta1+dfsg-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
  • [2026-07-07] Accepted postgis 3.7.0~alpha1+dfsg-1~exp2 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
  • [2026-07-06] Accepted postgis 3.7.0~alpha1+dfsg-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
  • [2026-06-16] postgis 3.6.4+dfsg-2 MIGRATED to testing (Debian testing watch)
  • [2026-06-14] Accepted postgis 3.6.4+dfsg-2 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
  • [2026-06-11] postgis 3.6.4+dfsg-1 MIGRATED to testing (Debian testing watch)
  • [2026-06-09] Accepted postgis 3.6.4+dfsg-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
  • [2026-04-17] postgis 3.6.3+dfsg-1 MIGRATED to testing (Debian testing watch)
  • [2026-04-15] Accepted postgis 3.6.3+dfsg-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
  • [2026-02-13] postgis 3.6.2+dfsg-1 MIGRATED to testing (Debian testing watch)
  • [2026-02-10] Accepted postgis 3.6.2+dfsg-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
  • [2025-11-18] postgis 3.6.1+dfsg-1 MIGRATED to testing (Debian testing watch)
  • [2025-11-15] Accepted postgis 3.6.1+dfsg-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
  • [2025-11-14] Accepted postgis 3.6.1+dfsg-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
  • [2025-11-05] postgis 3.6.0+dfsg-3 MIGRATED to testing (Debian testing watch)
  • [2025-11-03] Accepted postgis 3.6.0+dfsg-3 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
  • [2025-10-14] postgis 3.6.0+dfsg-2 MIGRATED to testing (Debian testing watch)
  • [2025-10-09] Accepted postgis 3.6.0+dfsg-2 (source amd64 all) into unstable (Debian FTP Masters) (signed by: Sebastiaan Couwenberg)
  • [2025-09-04] postgis 3.6.0+dfsg-1 MIGRATED to testing (Debian testing watch)
  • [2025-09-02] Accepted postgis 3.6.0+dfsg-1 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
  • [2025-08-29] postgis 3.5.3+dfsg-2 MIGRATED to testing (Debian testing watch)
  • [2025-08-25] Accepted postgis 3.6.0~rc2+dfsg-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
  • [2025-08-23] Accepted postgis 3.5.3+dfsg-2 (source) into unstable (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
  • [2025-08-19] Accepted postgis 3.6.0~rc1+dfsg-1~exp1 (source) into experimental (Bas Couwenberg) (signed by: Sebastiaan Couwenberg)
  • 1
  • 2
bugs [bug history graph]
  • all: 0
links
  • homepage
  • lintian
  • buildd: logs, reproducibility, cross
  • popcon
  • browse source code
  • other distros
  • security tracker
  • l10n (31, -)
  • debian patches
  • debci
ubuntu Ubuntu logo [Information about Ubuntu for Debian Developers]
  • version: 3.6.4+dfsg-2
  • 3 bugs

Debian Package Tracker — Copyright 2013-2025 The Distro Tracker Developers
Report problems to the tracker.debian.org pseudo-package in the Debian BTS.
Documentation — Bugs — Git Repository — Contributing