Most recent entries from all

ALSA-2026:73429 — Moderate: gawk security update

2026-10-02T10:42:22.779460+00:00

Affected: AlmaLinux:10: gawk, AlmaLinux:10: gawk-all-langpacks

The gawk packages contain the GNU version of awk, a text processing utility. Awk interprets a special-purpose programming language to do quick and easy text pattern matching and reformatting jobs.

Security Fix(es):

* gawk: gawk: Memory corruption via integer overflow (CVE-2026-40468) * gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service (CVE-2026-40553) * gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c (CVE-2026-40467)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

BELL-CVE-2026-40467

2026-10-02T10:42:22.779522+00:00

Affected: Alpaquita:23: gawk, Alpaquita:25: gawk, Alpaquita:stream: gawk, BellSoft Hardened Containers:23: gawk, BellSoft Hardened Containers:25: gawk, BellSoft Hardened Containers:stream: gawk

EUVD-2026-335786

2026-10-02T10:42:22.779552+00:00

EUVD-2026-335786

fkie_cve-2026-40467

2026-10-02T10:42:22.779564+00:00

Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.

GHSA-wj49-xjpv-3f4m

2026-10-02T10:42:22.779586+00:00

Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.

msrc_CVE-2026-40467 — Use after free in gawk

2026-10-02T10:42:22.779601+00:00

msrc_CVE-2026-40467

OESA-2026-3160 — gawk security update

2026-10-02T10:42:22.779616+00:00

Affected: openEuler:24.03-LTS-SP3: gawk

The gawk package is the GNU implementation of awk. The awk utility interprets a special-purpose programming language that makes it possible to handle simple data-reformatting jobs with just a few lines of code. Security Fix(es):

Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.(CVE-2026-40467)

Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.(CVE-2026-40468)

Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine). This issue could be used to overwrite gawk heap metadata and objects causing the program to crash. It affects 32-bit builds of gawk in versions 5.4.0 and below.(CVE-2026-40469)

Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below.(CVE-2026-40553)

RHSA-2026:40041 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

2026-10-02T10:42:22.779648+00:00

gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c gawk: gawk: Memory corruption via integer overflow gawk: gawk: Denial of Service due to integer overflow gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service

RLSA-2026:73429 — Moderate: gawk security update

2026-10-02T10:42:22.779669+00:00

Affected: Rocky Linux:10: gawk

The gawk packages contain the GNU version of awk, a text processing utility. Awk interprets a special-purpose programming language to do quick and easy text pattern matching and reformatting jobs.

Security Fix(es):

* gawk: gawk: Memory corruption via integer overflow (CVE-2026-40468)

* gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service (CVE-2026-40553)

* gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c (CVE-2026-40467)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

UBUNTU-CVE-2026-40467

2026-10-02T10:42:22.779692+00:00

Affected: Ubuntu:Pro:14.04:LTS: gawk, Ubuntu:Pro:16.04:LTS: gawk, Ubuntu:Pro:18.04:LTS: gawk, Ubuntu:Pro:20.04:LTS: gawk, Ubuntu:22.04:LTS: gawk, Ubuntu:24.04:LTS: gawk, Ubuntu:26.04:LTS: gawk

Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.

WID-SEC-W-2026-3649 — Red Hat Enterprise Linux (gawk): Mehrere Schwachstellen

2026-10-02T10:42:22.779718+00:00

Ein lokaler Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um einen Denial of Service Angriff durchzuführen, Speicherbeschädigungen zu verursachen und möglicherweise beliebigen Code auszuführen.