[CLSA-2026:1790785222] gawk: Fix of 2 CVEs
Type:
security
Severity:
Critical
Release date:
2026-09-30 16:20:37 UTC
Description:
- CVE-2026-40468: fix integer overflow of the result-buffer offset in do_sub() - CVE-2026-40469: fix integer overflow of the result-buffer size in do_sub() on 32-bit builds
CVEs fixed:
Updated packages:
  • gawk-5.1.0-6.el9.tuxcare.els1.aarch64.rpm
    sha:cf90172bad1abbd67f8922bc58d484147c40dab2e445d22a79429f1ab4ab4def
  • gawk-5.1.0-6.el9.tuxcare.els1.i686.rpm
    sha:c8b53a766e467760262b7ca06f0225be6402b6d3b0b009dabbaead9b27a5ceed
  • gawk-5.1.0-6.el9.tuxcare.els1.x86_64.rpm
    sha:7e0fbd5d661452376f221330ef1e14b20c24b4cad8db3428b3160b3d796539b4
  • gawk-all-langpacks-5.1.0-6.el9.tuxcare.els1.aarch64.rpm
    sha:f8cd505cad7528d5ce725e5f42f45deb3c3693607c6b91a6be4cefcf3926d4ee
  • gawk-all-langpacks-5.1.0-6.el9.tuxcare.els1.i686.rpm
    sha:c558e38e9815f0a701a568a9064ad41216ac7c02d5ae60b57d4919903544075b
  • gawk-all-langpacks-5.1.0-6.el9.tuxcare.els1.x86_64.rpm
    sha:916dfd8a985b1fd7de7f4de678cc7b6db3c349361f4953f768bb8fcaed590fc8
  • gawk-devel-5.1.0-6.el9.tuxcare.els1.aarch64.rpm
    sha:1dc38044bf2d42a20f54348fb977df0835424df7a69f90cbcec0b63e922e0c71
  • gawk-devel-5.1.0-6.el9.tuxcare.els1.i686.rpm
    sha:e4ed138040c366a2a0730c496686c6a0d50a2791d574dd9d1a15ebe5200c5709
  • gawk-devel-5.1.0-6.el9.tuxcare.els1.x86_64.rpm
    sha:05d0f9c725206c393fc028f80723f33b9a7696cdcd013d8ef63d22680140872f
  • gawk-doc-5.1.0-6.el9.tuxcare.els1.noarch.rpm
    sha:fe0648bf008968f24130d15d59e960c8470491d44a33f06c27dd824b75e6eb7a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.