Red Hat Product Errata RHSA-2026:49909 - Security Advisory Issued: 2026-08-04 Updated: 2026-08-04 RHSA-2026:49909 - Security Advisory Overview Updated Packages Synopsis Important: libpq security update Type/Severity Security Advisory: Important Red Hat Lightspeed patch analysis Identify and remediate systems affected by this advisory. View affected systems Topic An update for libpq is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Description The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fix(es): postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Solution For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Affected Products Red Hat Enterprise Linux Server - AUS 9.4 x86_64 Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 ppc64le Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 aarch64 Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 s390x Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 x86_64 Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 aarch64 Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 ppc64le Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 9.4 s390x Fixes BZ - 2477442 - CVE-2026-6477 postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory CVEs CVE-2026-6477 References https://access.redhat.com/security/updates/classification/#important Note: More recent versions of these packages may be available. Click a package name for more details. Red Hat Enterprise Linux Server - AUS 9.4 SRPM libpq-13.23-1.el9_4.1.src.rpm SHA-256: 30741d989783051ec28dbd7182eb008a81d3bb0715a65da6067261155a1c9246 x86_64 libpq-13.23-1.el9_4.1.i686.rpm SHA-256: 04be4172cc74c1cd006f24689eaaaea791766bc84912b5f2542d2060b5962a72 libpq-13.23-1.el9_4.1.x86_64.rpm SHA-256: e71ebcf626b55df0ee92e5608db2eca7bcfd2de00212d4a454f44aa3e327eea9 libpq-debuginfo-13.23-1.el9_4.1.i686.rpm SHA-256: 0d7d2692d3f378e36d24097cb89a0051a0b693f0c5407ad5f7e9d7b2c366a0ea libpq-debuginfo-13.23-1.el9_4.1.x86_64.rpm SHA-256: c4c91e2bb491b98c29fa9ae8cc4e52098fd24249a72d4c2015f1da54c020cc38 libpq-debugsource-13.23-1.el9_4.1.i686.rpm SHA-256: 4288ced428680403ca426092d74e75825b5ae828d6f9de4b89dfdfc1a9cb25ea libpq-debugsource-13.23-1.el9_4.1.x86_64.rpm SHA-256: e6d21c823da6ad965f62f5eec04ba82ee06152b59269b1dc9fc3ad95ef0a803f libpq-devel-13.23-1.el9_4.1.i686.rpm SHA-256: 261096cc2fe3eb58cc57daddc9c5354769262670ff5dd16a417da7eeb0ceb5b2 libpq-devel-13.23-1.el9_4.1.x86_64.rpm SHA-256: 3b72cb1597c88d4e447ef17026836fa0388fddcd9e8e3d8b96fb92e95c1e9589 libpq-devel-debuginfo-13.23-1.el9_4.1.i686.rpm SHA-256: 3a0378305ed1d7cb21de5845d8e231f5b455de4e018a709d7d1df2258e7ab115 libpq-devel-debuginfo-13.23-1.el9_4.1.x86_64.rpm SHA-256: c43af6a9051383ab5ac709d7372d2e6af770bb4929b642b425dd63413b22c80a Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 9.4 SRPM libpq-13.23-1.el9_4.1.src.rpm SHA-256: 30741d989783051ec28dbd7182eb008a81d3bb0715a65da6067261155a1c9246 ppc64le libpq-13.23-1.el9_4.1.ppc64le.rpm SHA-256: 6585fa145291678702ea536139f7edbc437e6787e641b510c0e7f570e46cdc11 libpq-debuginfo-13.23-1.el9_4.1.ppc64le.rpm SHA-256: f83312230f09742e856292f3d50c3acf8cc1d838c57a3d259cc17bfb2cb8ff5e libpq-debugsource-13.23-1.el9_4.1.ppc64le.rpm SHA-256: ad22fd5caa1fd2cdde539c9219faae0ae5aad89a611c961a44e59284d28582ef libpq-devel-13.23-1.el9_4.1.ppc64le.rpm SHA-256: ccdf65af8bd4199563d58f73fe8a086fb1ce8a3ac3037baf0c27a8d80653367e libpq-devel-debuginfo-13.23-1.el9_4.1.ppc64le.rpm SHA-256: 8821275456ae5501d140a08949641d3819e90a263f3e62ac0a50be0edb1ca810 Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 9.4 SRPM libpq-13.23-1.el9_4.1.src.rpm SHA-256: 30741d989783051ec28dbd7182eb008a81d3bb0715a65da6067261155a1c9246 x86_64 libpq-13.23-1.el9_4.1.i686.rpm SHA-256: 04be4172cc74c1cd006f24689eaaaea791766bc84912b5f2542d2060b5962a72 libpq-13.23-1.el9_4.1.x86_64.rpm SHA-256: e71ebcf626b55df0ee92e5608db2eca7bcfd2de00212d4a454f44aa3e327eea9 libpq-debuginfo-13.23-1.el9_4.1.i686.rpm SHA-256: 0d7d2692d3f378e36d24097cb89a0051a0b693f0c5407ad5f7e9d7b2c366a0ea libpq-debuginfo-13.23-1.el9_4.1.x86_64.rpm SHA-256: c4c91e2bb491b98c29fa9ae8cc4e52098fd24249a72d4c2015f1da54c020cc38 libpq-debugsource-13.23-1.el9_4.1.i686.rpm SHA-256: 4288ced428680403ca426092d74e75825b5ae828d6f9de4b89dfdfc1a9cb25ea libpq-debugsource-13.23-1.el9_4.1.x86_64.rpm SHA-256: e6d21c823da6ad965f62f5eec04ba82ee06152b59269b1dc9fc3ad95ef0a803f libpq-devel-13.23-1.el9_4.1.i686.rpm SHA-256: 261096cc2fe3eb58cc57daddc9c5354769262670ff5dd16a417da7eeb0ceb5b2 libpq-devel-13.23-1.el9_4.1.x86_64.rpm SHA-256: 3b72cb1597c88d4e447ef17026836fa0388fddcd9e8e3d8b96fb92e95c1e9589 libpq-devel-debuginfo-13.23-1.el9_4.1.i686.rpm SHA-256: 3a0378305ed1d7cb21de5845d8e231f5b455de4e018a709d7d1df2258e7ab115 libpq-devel-debuginfo-13.23-1.el9_4.1.x86_64.rpm SHA-256: c43af6a9051383ab5ac709d7372d2e6af770bb4929b642b425dd63413b22c80a Red Hat Enterprise Linux for ARM 64 - 4 years of updates 9.4 SRPM libpq-13.23-1.el9_4.1.src.rpm SHA-256: 30741d989783051ec28dbd7182eb008a81d3bb0715a65da6067261155a1c9246 aarch64 libpq-13.23-1.el9_4.1.aarch64.rpm SHA-256: dfe182cccf12f27a2b642d12c97d5361ada689665009992032d6431e979afc77 libpq-debuginfo-13.23-1.el9_4.1.aarch64.rpm SHA-256: f236c162e90aeecbd1b8cc8d43332406866242b7b62be003e950c3cf34d176bd libpq-debugsource-13.23-1.el9_4.1.aarch64.rpm SHA-256: e85ef0ad9c96389dfd3d2fba2ccbc3ec4c72aa0eb57c901f5c819e4f695a1001 libpq-devel-13.23-1.el9_4.1.aarch64.rpm SHA-256: 14731623be9f4b781156eb9cc42338a918265ba9a76fd4aa3bf372cd52793c59 libpq-devel-debuginfo-13.23-1.el9_4.1.aarch64.rpm SHA-256: c5843435a0357932bc0408c8240860ad0a602c5c015bdb8d833992425ca47b1e Red Hat Enterprise Linux for IBM z Systems - 4 years of updates 9.4 SRPM libpq-13.23-1.el9_4.1.src.rpm SHA-256: 30741d989783051ec28dbd7182eb008a81d3bb0715a65da6067261155a1c9246 s390x libpq-13.23-1.el9_4.1.s390x.rpm SHA-256: c1dfef552850dc9ccef240ddf313072c9c9713c8bdb35d4bcf74cd43af12189f libpq-debuginfo-13.23-1.el9_4.1.s390x.rpm SHA-256: e91158648a33f7f1d85c6b38809cb0fcf019f1dd66f673208738e9f1b9b029f1 libpq-debugsource-13.23-1.el9_4.1.s390x.rpm SHA-256: 1843a625114c0d1ee61609464c1475d51071cba93d946123764bde1bb124be08 libpq-devel-13.23-1.el9_4.1.s390x.rpm SHA-256: ddf36128c144cb30b777acb7244306e21a5931ccbb22cae89757acd54891258b libpq-devel-debuginfo-13.23-1.el9_4.1.s390x.rpm SHA-256: 7c758e593670574cff6b3953abf8e96583a018c877100c61fb6ccdf1e77ec465 Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 9.4 SRPM libpq-13.23-1.el9_4.1.src.rpm SHA-256: 30741d989783051ec28dbd7182eb008a81d3bb0715a65da6067261155a1c9246 x86_64 libpq-13.23-1.el9_4.1.i686.rpm SHA-256: 04be4172cc74c1cd006f24689eaaaea791766bc84912b5f2542d2060b5962a72 libpq-13.23-1.el9_4.1.x86_64.rpm SHA-256: e71ebcf626b55df0ee92e5608db2eca7bcfd2de00212d4a454f44aa3e327eea9 libpq-debuginfo-13.23-1.el9_4.1.i686.rpm SHA-256: 0d7d2692d3f378e36d24097cb89a0051a0b693f0c5407ad5f7e9d7b2c366a0ea libpq-debuginfo-13.23-1.el9_4.1.x86_64.rpm SHA-256: c4c91e2bb491b98c29fa9ae8cc4e52098fd24249a72d4c2015f1da54c020cc38 libpq-debugsource-13.23-1.el9_4.1.i686.rpm SHA-256: 4288ced428680403ca426092d74e75825b5ae828d6f9de4b89dfdfc1a9cb25ea libpq-debugsource-13.23-1.el9_4.1.x86_64.rpm SHA-256: e6d21c823da6ad965f62f5eec04ba82ee06152b59269b1dc9fc3ad95ef0a803f libpq-devel-13.23-1.el9_4.1.i686.rpm SHA-256: 261096cc2fe3eb58cc57daddc9c5354769262670ff5dd16a417da7eeb0ceb5b2 libpq-devel-13.23-1.el9_4.1.x86_64.rpm SHA-256: 3b72cb1597c88d4e447ef17026836fa0388fddcd9e8e3d8b96fb92e95c1e9589 libpq-devel-debuginfo-13.23-1.el9_4.1.i686.rpm SHA-256: 3a0378305ed1d7cb21de5845d8e231f5b455de4e018a709d7d1df2258e7ab115 libpq-devel-debuginfo-13.23-1.el9_4.1.x86_64.rpm SHA-256: c43af6a9051383ab5ac709d7372d2e6af770bb4929b642b425dd63413b22c80a Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 9.4 SRPM libpq-13.23-1.el9_4.1.src.rpm SHA-256: 30741d989783051ec28dbd7182eb008a81d3bb0715a65da6067261155a1c9246 aarch64 libpq-13.23-1.el9_4.1.aarch64.rpm SHA-256: dfe182cccf12f27a2b642d12c97d5361ada689665009992032d6431e979afc77 libpq-debuginfo-13.23-1.el9_4.1.aarch64.rpm SHA-256: f236c162e90aeecbd1b8cc8d43332406866242b7b62be003e950c3cf34d176bd libpq-debugsource-13.23-1.el9_4.1.aarch64.rpm SHA-256: e85ef0ad9c96389dfd3d2fba2ccbc3ec4c72aa0eb57c901f5c819e4f695a1001 libpq-devel-13.23-1.el9_4.1.aarch64.rpm SHA-256: 14731623be9f4b781156eb9cc42338a918265ba9a76fd4aa3bf372cd52793c59 libpq-devel-debuginfo-13.23-1.el9_4.1.aarch64.rpm SHA-256: c5843435a0357932bc0408c8240860ad0a602c5c015bdb8d833992425ca47b1e Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 9.4 SRPM libpq-13.23-1.el9_4.1.src.rpm SHA-256: 30741d989783051ec28dbd7182eb008a81d3bb0715a65da6067261155a1c9246 ppc64le libpq-13.23-1.el9_4.1.ppc64le.rpm SHA-256: 6585fa145291678702ea536139f7edbc437e6787e641b510c0e7f570e46cdc11 libpq-debuginfo-13.23-1.el9_4.1.ppc64le.rpm SHA-256: f83312230f09742e856292f3d50c3acf8cc1d838c57a3d259cc17bfb2cb8ff5e libpq-debugsource-13.23-1.el9_4.1.ppc64le.rpm SHA-256: ad22fd5caa1fd2cdde539c9219faae0ae5aad89a611c961a44e59284d28582ef libpq-devel-13.23-1.el9_4.1.ppc64le.rpm SHA