PostGIS 3.7.0rc1

The PostGIS Team is pleased to release PostGIS 3.7.0rc1! Best Served with PostgreSQL 19 Beta 3 , GEOS 3.15.0rc1 , postgis_tiger_geocoder 2025.2 , and address_standardizer.

This version requires PostgreSQL 14 - 19rc1, GEOS 3.10 or higher, and Proj 6.1+. To take advantage of all features, GEOS 3.15+ is needed. To take advantage of all SFCGAL features SFCGAL 2.3.0+ is needed.

This release contains fixes since 3.7.0beta2 release.

• source download md5

• NEWS

• HTML Online en ja zh_Hans fr

• PDF docs: en ja, zh_Hans, fr

• Cheat Sheets:

  • postgis: en ja zh_Hans fr
  • postgis_raster: en ja zh_Hans fr
  • postgis_topology: en ja zh_Hans fr
  • postgis_sfcgal: en ja zh_Hans fr

This release is a release candidate of a major release, it includes bug fixes since PostGIS 3.6.4 and new features.

After installing the binaries or after running pg_upgrade:

For PostGIS 3 series do below which will upgrade all your postgis extensions.

SELECT postgis_extensions_upgrade();

For PostGIS 2 series:

ALTER EXTENSION postgis UPDATE;
SELECT postgis_extensions_upgrade();
SELECT postgis_extensions_upgrade();

• GH-1172, GH-1173, GH-1174, guard lwgeom_wrapx and raster OOM cleanup paths against NULL dereferences (Maksim Korotkov, Postgres Pro)
• Codex security scan, guard the recursive NURBSCURVE bounding box against non-finite control points to stop a backend CPU denial of service reachable from WKT input (Darafei Praliaskouski)
• GT-755, OSSFuzz 547330051, stream NURBSCURVE bounding box Bezier extraction to avoid repeated full-array knot insertion on large valid curves (Darafei Praliaskouski)
• Fix geometry input parsing to stop malformed SRID prefixes before the end of the input string (Dennis Tighe, Google)
• OSSFuzz 545658571, compare GSERIALIZED bytea fuzzer SRIDs after normalizing out-of-range values (Darafei Praliaskouski)
• OSSFuzz 5607611131822080, keep GSERIALIZED bytea fuzzer allocations consistent with hostile varlena size headers (Darafei Praliaskouski)
• #6111, Skip NEWS unit tests outside Git worktrees, fixing source package documentation checks without git (Bas Couwenberg)
• #6112, Document GMP and current build dependency requirements in README.postgis (Darafei Praliaskouski)
• OSSFuzz 544800490, reject malformed GSERIALIZED polygon rings before deserializing geometry data (Darafei Praliaskouski)
• OSSFuzz 544936363, keep GSERIALIZED LWGEOM fuzzer bbox comparisons aligned with serialized bbox flags (Darafei Praliaskouski)
• Reject truncated GSERIALIZED NURBS vector payloads before validating vector contents (Darafei Praliaskouski)
• Include detected NURBS coordinate extrema in curve bounding boxes (Darafei Praliaskouski)
• OSSFuzz 6152109301760000, reject overlong encoded polyline coordinate varints (Darafei Praliaskouski)
• OSSFuzz 4743900859006976, reject encoded polyline coordinate deltas that overflow accumulated int32 coordinates (Darafei Praliaskouski)

If you come across any issues, feel free to report via our ticket tracker or mailing list with details

View all tickets for 3.7.0rc1 milestone.