Back Linuxsecurity

Oracle Linux 10 ELSA-2026-65899

Linuxsecurity •LinuxSecurity Advisories • September 14, 2026

Artifactory Alert: Chained flaws let attackers gain admin control. Check your version now ×

[3.5.3-4.1] - Fix CVE-2026-73515: validate flatgeobuf input buffers before decoding

postgis-3.5.3-4.el10_2.1.x86_64.rpm postgis-client-3.5.3-4.el10_2.1.x86_64.rpm postgis-docs-3.5.3-4.el10_2.1.x86_64.rpm postgis-upgrade-3.5.3-4.el10_2.1.x86_64.rpm postgis-utils-3.5.3-4.el10_2.1.x86_64.rpm

postgis-3.5.3-4.el10_2.1.aarch64.rpm postgis-client-3.5.3-4.el10_2.1.aarch64.rpm postgis-docs-3.5.3-4.el10_2.1.aarch64.rpm postgis-upgrade-3.5.3-4.el10_2.1.aarch64.rpm postgis-utils-3.5.3-4.el10_2.1.aarch64.rpm

Related CVEs: CVE-2026-73515

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Oracle Linux 10 Affecting Admin Control Oracle has issued advisories for two critical vulnerabilities in Linux 10 affecting PostgreSQL and perl-DBI. CVE-2026-73515 allows attackers to gain admin control through chained flaws in PostGIS, while CVE-2026-19546 addresses an incomplete fix for CVE-2026-14380 in DBI::Profile. Both vulnerabilities were published in August 2026, with the PostgreSQL issue being a significant concern due to its potential for exploitation. Affected systems include various RPM packages for both x86_64 and aarch64 architectures. Administrators are urged to check their versions and apply the necessary patches to mitigate risks. The advisories emphasize the urgency of addressing these vulnerabilities to prevent unauthorized access. 2 sources 61

Extracted Entities

CVEs (1)

CVE-2026-73515

Platforms (1)

Linux