CLSA-2026-1784217178
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/almalinux9.6esu/CLSA-2026-1784217178.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1784217178
- Upstream
- Published
- 2026-07-16T15:53:25Z
- Modified
- 2026-10-26T09:43:34Z
- Summary
- gawk: Fix of 3 CVEs
- Details
-
- CVE-2026-40467: fix use-after-free in do_getline_redir() in io.c (redir_exp dereferenced after being freed)
- CVE-2026-40553: fix stack buffer overflow in ftype() in the readdir extension (unbounded path concatenation before stat())
- CVE-2026-40469: fix integer overflow in do_sub() in builtin.c (64-bit overflow check on the result-buffer size prevents heap corruption in sub/gsub/gensub replacement expansion on 32-bit builds)
- References
Affected packages
TuxCare:AlmaLinux:9.6 / gawk
Package
- Name
- gawk
- Purl
- pkg:rpm/tuxcare/gawk?distro=almalinux-9.6
TuxCare:AlmaLinux:9.6 / gawk-all-langpacks
Package
- Name
- gawk-all-langpacks
- Purl
- pkg:rpm/tuxcare/gawk-all-langpacks?distro=almalinux-9.6
TuxCare:AlmaLinux:9.6 / gawk-devel
Package
- Name
- gawk-devel
- Purl
- pkg:rpm/tuxcare/gawk-devel?distro=almalinux-9.6