Red Hat Product Errata RHSA-2026:44391 - Security Advisory Issued: 2026-07-23 Updated: 2026-07-23 RHSA-2026:44391 - Security Advisory Overview Updated Packages Synopsis Important: libpq security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libpq is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fix(es): postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux for x86_64 10 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 x86_64 Red Hat Enterprise Linux for IBM z Systems 10 s390x Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 s390x Red Hat Enterprise Linux for Power, little endian 10 ppc64le Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 ppc64le Red Hat Enterprise Linux for ARM 64 10 aarch64 Red Hat Enterprise Linux for ARM 64 - Extended Update Support 10.2 aarch64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 10.2 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 10.2 s390x Red Hat Enterprise Linux for Power, little endian - 4 years of support 10.2 ppc64le Red Hat Enterprise Linux for x86_64 - 4 years of updates 10.2 x86_64 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 10.2 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 10.2 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 10.2 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 10.2 s390x Fixes BZ - 2477442 - CVE-2026-6477 postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory CVEs CVE-2026-6477 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux for x86_64 10 SRPM libpq-16.14-1.el10_2.src.rpm SHA-256: 5b6500d1b6b584301ffa5fae465103483475881df71e8c95866604586601e34b x86_64 libpq-16.14-1.el10_2.x86_64.rpm SHA-256: 3d17af5d06734a065ccc7f89d4f7a6bc84eb14bdc91f4241d8615cf7f3291850 libpq-debuginfo-16.14-1.el10_2.x86_64.rpm SHA-256: 8008c5a710476e34a5534b1434de68a5caaca531b1f8e54e498330f4df76a8de libpq-debuginfo-16.14-1.el10_2.x86_64.rpm SHA-256: 8008c5a710476e34a5534b1434de68a5caaca531b1f8e54e498330f4df76a8de libpq-debugsource-16.14-1.el10_2.x86_64.rpm SHA-256: 9db47e15ac0e0056305b40d56ba76cd5edd5e57b78a71f7e03ab87517a94b17f libpq-debugsource-16.14-1.el10_2.x86_64.rpm SHA-256: 9db47e15ac0e0056305b40d56ba76cd5edd5e57b78a71f7e03ab87517a94b17f libpq-devel-16.14-1.el10_2.x86_64.rpm SHA-256: 571d3e1f86fd76506457035a93a8f2524de39a1150e6477fcf21c2b6294641eb libpq-devel-debuginfo-16.14-1.el10_2.x86_64.rpm SHA-256: 426d9cbbf920cede45b2dfa9d22364d0e8afa41f73b9c48073a355eb0f8a31c5 libpq-devel-debuginfo-16.14-1.el10_2.x86_64.rpm SHA-256: 426d9cbbf920cede45b2dfa9d22364d0e8afa41f73b9c48073a355eb0f8a31c5 Red Hat Enterprise Linux for x86_64 - Extended Update Support 10.2 SRPM libpq-16.14-1.el10_2.src.rpm SHA-256: 5b6500d1b6b584301ffa5fae465103483475881df71e8c95866604586601e34b x86_64 libpq-16.14-1.el10_2.x86_64.rpm SHA-256: 3d17af5d06734a065ccc7f89d4f7a6bc84eb14bdc91f4241d8615cf7f3291850 libpq-debuginfo-16.14-1.el10_2.x86_64.rpm SHA-256: 8008c5a710476e34a5534b1434de68a5caaca531b1f8e54e498330f4df76a8de libpq-debuginfo-16.14-1.el10_2.x86_64.rpm SHA-256: 8008c5a710476e34a5534b1434de68a5caaca531b1f8e54e498330f4df76a8de libpq-debugsource-16.14-1.el10_2.x86_64.rpm SHA-256: 9db47e15ac0e0056305b40d56ba76cd5edd5e57b78a71f7e03ab87517a94b17f libpq-debugsource-16.14-1.el10_2.x86_64.rpm SHA-256: 9db47e15ac0e0056305b40d56ba76cd5edd5e57b78a71f7e03ab87517a94b17f libpq-devel-16.14-1.el10_2.x86_64.rpm SHA-256: 571d3e1f86fd76506457035a93a8f2524de39a1150e6477fcf21c2b6294641eb libpq-devel-debuginfo-16.14-1.el10_2.x86_64.rpm SHA-256: 426d9cbbf920cede45b2dfa9d22364d0e8afa41f73b9c48073a355eb0f8a31c5 libpq-devel-debuginfo-16.14-1.el10_2.x86_64.rpm SHA-256: 426d9cbbf920cede45b2dfa9d22364d0e8afa41f73b9c48073a355eb0f8a31c5 Red Hat Enterprise Linux for IBM z Systems 10 SRPM libpq-16.14-1.el10_2.src.rpm SHA-256: 5b6500d1b6b584301ffa5fae465103483475881df71e8c95866604586601e34b s390x libpq-16.14-1.el10_2.s390x.rpm SHA-256: daee8912aa24be4c2d72e608a5cd238f64cb69c174c6a8595d13ba835939d7bf libpq-debuginfo-16.14-1.el10_2.s390x.rpm SHA-256: 1900c17f8355f608e95b2bf8c25ac59de980214536ff6b1321f5b34bf1bca8ae libpq-debuginfo-16.14-1.el10_2.s390x.rpm SHA-256: 1900c17f8355f608e95b2bf8c25ac59de980214536ff6b1321f5b34bf1bca8ae libpq-debugsource-16.14-1.el10_2.s390x.rpm SHA-256: 88076e71c482e371f56c078e7d93b1cf168083216b8a26e75e6e8014d66e223e libpq-debugsource-16.14-1.el10_2.s390x.rpm SHA-256: 88076e71c482e371f56c078e7d93b1cf168083216b8a26e75e6e8014d66e223e libpq-devel-16.14-1.el10_2.s390x.rpm SHA-256: 5c1099b3e72a88c2a82c4894ac482f45bd42f237c615338854dd3358bfdcdd49 libpq-devel-debuginfo-16.14-1.el10_2.s390x.rpm SHA-256: 0572531b4bbd9adcf4792bd5b63bde87db45756169cd3610a3598351336cb293 libpq-devel-debuginfo-16.14-1.el10_2.s390x.rpm SHA-256: 0572531b4bbd9adcf4792bd5b63bde87db45756169cd3610a3598351336cb293 Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 10.2 SRPM libpq-16.14-1.el10_2.src.rpm SHA-256: 5b6500d1b6b584301ffa5fae465103483475881df71e8c95866604586601e34b s390x libpq-16.14-1.el10_2.s390x.rpm SHA-256: daee8912aa24be4c2d72e608a5cd238f64cb69c174c6a8595d13ba835939d7bf libpq-debuginfo-16.14-1.el10_2.s390x.rpm SHA-256: 1900c17f8355f608e95b2bf8c25ac59de980214536ff6b1321f5b34bf1bca8ae libpq-debuginfo-16.14-1.el10_2.s390x.rpm SHA-256: 1900c17f8355f608e95b2bf8c25ac59de980214536ff6b1321f5b34bf1bca8ae libpq-debugsource-16.14-1.el10_2.s390x.rpm SHA-256: 88076e71c482e371f56c078e7d93b1cf168083216b8a26e75e6e8014d66e223e libpq-debugsource-16.14-1.el10_2.s390x.rpm SHA-256: 88076e71c482e371f56c078e7d93b1cf168083216b8a26e75e6e8014d66e223e libpq-devel-16.14-1.el10_2.s390x.rpm SHA-256: 5c1099b3e72a88c2a82c4894ac482f45bd42f237c615338854dd3358bfdcdd49 libpq-devel-debuginfo-16.14-1.el10_2.s390x.rpm SHA-256: 0572531b4bbd9adcf4792bd5b63bde87db45756169cd3610a3598351336cb293 libpq-devel-debuginfo-16.14-1.el10_2.s390x.rpm SHA-256: 0572531b4bbd9adcf4792bd5b63bde87db45756169cd3610a3598351336cb293 Red Hat Enterprise Linux for Power, little endian 10 SRPM libpq-16.14-1.el10_2.src.rpm SHA-256: 5b6500d1b6b584301ffa5fae465103483475881df71e8c95866604586601e34b ppc64le libpq-16.14-1.el10_2.ppc64le.rpm SHA-256: 004832162cbf2181ba4e9a194b73664c1b522ccd1f4b9e29911b432eff5f1096 libpq-debuginfo-16.14-1.el10_2.ppc64le.rpm SHA-256: 43daa73fb0e3a246f49d38b5702d51825fb0b8b44d16888c4503c540627b9b51 libpq-debuginfo-16.14-1.el10_2.ppc64le.rpm SHA-256: 43daa73fb0e3a246f49d38b5702d51825fb0b8b44d16888c4503c540627b9b51 libpq-debugsource-16.14-1.el10_2.ppc64le.rpm SHA-256: d5fd883a7ecc1fa7039503cc3cf55bd5103474cb73779eb2b104bf32a7ac3452 libpq-debugsource-16.14-1.el10_2.ppc64le.rpm SHA-256: d5fd883a7ecc1fa7039503cc3cf55bd5103474cb73779eb2b104bf32a7ac3452 libpq-devel-16.14-1.el10_2.ppc64le.rpm SHA-256: 9e4c773024f1d495bc91024d8ea0661c0376137c57eb7f7ceae56ba0f36043d1 libpq-devel-debuginfo-16.14-1.el10_2.ppc64le.rpm SHA-256: 921c0edb39b6db9633a59066b496c3511b78df6f90c3d4b49f8402470fafdeef libpq-devel-debuginfo-16.14-1.el10_2.ppc64le.rpm SHA-256: 921c0edb39b6db9633a59066b496c3511b78df6f90c3d4b49f8402470fafdeef Red Hat Enterprise Linux for Power, little endian - Extended Update Support 10.2 SRPM libpq-16.14-1.el10_2.src.rpm SHA-256: 5b6500d1b6b584301ffa5fae465103483475881df71e8c95866604586601e34b ppc64le libpq-16.14-1.el10_2.ppc64le.rpm SHA-256: 004832162cbf2181ba4e9a194b73664c1b522ccd1f4b9e29911b432eff5f1096 libpq-debuginfo-16.14-1.el10_2.ppc64le.rpm SHA-256: 43daa73fb0e3a246f49d38b5702d51825fb0b8b44d16888c4503c540627b9b51 libpq-debuginfo-16.14-1.el10_2.ppc64le.rpm SHA-256: 43daa73fb0e3a246f49d38b5702d51825fb0b8b44d16888c4503c540627b9b51 libpq-debugsource-16.14-1.el10_2.ppc64le.rpm SHA-256: d5fd883a7ecc1fa7039503cc3cf55bd5103474cb73779eb2b104bf32a7ac3452 libpq-debugsource-16.14-1.el10_2.ppc64le.rpm SHA-256: d5fd883a7ecc1fa7039503cc3cf55bd5103474cb73779eb2b104bf32a7ac3452 libpq-devel-16.14-1.el10_2.ppc64le.rpm SHA-256: 9e4c773024f1d495bc91024d8ea0661c0376137c57eb7f7ceae56ba0f36043d1 libpq-devel-debuginfo-16.14-1.el10_2.ppc64le.rpm SHA-256: 921c0edb39b6db9633a59066b496c3511b78df6f90c3d4b49f8402470fafdeef libpq-devel-debuginfo-16.14-1.el10_2.ppc64le.rpm SHA-256: 921c0edb39b6db9633a59066b496c3511b78df6f90c3d4b49f8402470fafdeef Red Hat Enterprise Linux for ARM 64 10 SRPM libpq-16.14-1.el10_2.src.rpm SHA-256: 5b6500d1b6b584301ffa5fae465103483475881df71e8c95866604586601e34b aarch64 libpq-16.14-1.el10_2.aarch64.rpm SHA-256: 0e8887e0e55d7ce4523fdd992c2b6c2c39e509c708cbe301397e27f714f0585d libpq-debuginfo-16.14-1.el10_2.aarch64.rpm SHA-256: b3e62dd9fde5189c0e529c41b5bf23b0dc029645a2d53a8b62219f32c9c07267 libpq-debuginfo-16.14-1.el10_2.aarch64.rpm SHA-256: b3e62dd9fde5189c0e529c41b5bf23b0dc029645a2d53a8b62219f32c9c07267 libpq-debugsource-16.14-1.el10_2.aarch64.rpm SHA-256: 609cb38df1d61695a10