{"id":"CLSA-2026-1784623908","summary":"gawk: Fix of CVE-2026-40468","details":"- CVE-2026-40467: fix use-after-free in do_getline_redir() in io.c (redir_exp dereferenced after being freed)\n- CVE-2026-40553: fix stack buffer overflow in ftype() in the readdir extension (unbounded path concatenation before stat())\n- CVE-2026-40469: fix integer overflow in do_sub() in builtin.c (64-bit overflow check on the result-buffer size prevents heap corruption in sub/gsub/gensub replacement expansion on 32-bit builds)","modified":"2026-10-26T09:43:38.554458356Z","published":"2026-07-21T08:52:12Z","upstream":["CVE-2026-40467","CVE-2026-40468","CVE-2026-40469","CVE-2026-40553"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1784623908.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-40468"}],"affected":[{"package":{"name":"gawk","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/gawk?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-6.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1784623908.json"}},{"package":{"name":"gawk-all-langpacks","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/gawk-all-langpacks?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-6.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1784623908.json"}},{"package":{"name":"gawk-devel","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/gawk-devel?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-6.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1784623908.json"}},{"package":{"name":"gawk-doc","ecosystem":"TuxCare:AlmaLinux:9.6","purl":"pkg:rpm/tuxcare/gawk-doc?distro=almalinux-9.6"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.0-6.el9_6.tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1784623908.json"}}],"schema_version":"1.9.0"}