[CLSA-2026:1792612080] gawk: Fix of 3 CVEs
Type:
security
Severity:
Critical
Release date:
2026-10-21 19:48:12 UTC
Description:
- CVE-2023-4156: builtin.c (format_tree): when collecting positional field widths or precisions, check for wrap around to negative values - CVE-2026-40469: builtin.c (sub_common): check for overflow in the result buffer size calculation using 64-bit math, failing with a fatal error instead of corrupting the heap on 32-bit builds
Updated packages:
  • gawk-3.1.7-10.el6_7.3.tuxcare.els2.i686.rpm
    sha:e6ab5a62947645098fabb6843a2df2cac9b8e0efba71fc7e375bfa5f250baa24
  • gawk-3.1.7-10.el6_7.3.tuxcare.els2.x86_64.rpm
    sha:2b90fb402bb5fd93ba565eab9560e9e9b78c497c040e6f86aaf15259edd3700b
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.