ELSA-2026-73511

ELSA-2026-73511 - gawk security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2026-09-30

Description

[4.2.1-5]
- Fix use-after-free in do_getline_redir() (CVE-2026-40467)
Resolves: RHEL-222601

[4.2.1-4.1]
- Fix integer overflow in do_sub() and parse_escape() (CVE-2026-40468)
Resolves: RHEL-222771

Related CVEs

CVE-2026-40467

CVE-2026-40468

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	gawk-4.2.1-5.el8_10.src.rpm	dde22b94b874f969b5472c60b5a4b16c77d2ad114f9b2d316f282573aec4d7b4	-	ol8_aarch64_baseos_latest
	gawk-4.2.1-5.el8_10.src.rpm	dde22b94b874f969b5472c60b5a4b16c77d2ad114f9b2d316f282573aec4d7b4	-	ol8_aarch64_u10_baseos_patch
	gawk-4.2.1-5.el8_10.aarch64.rpm	7d4b9825deba28391a31c7773ea4b90b5b0c3c832d11b07c1e8e7f70f31bc421	-	ol8_aarch64_baseos_latest
	gawk-4.2.1-5.el8_10.aarch64.rpm	7d4b9825deba28391a31c7773ea4b90b5b0c3c832d11b07c1e8e7f70f31bc421	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	gawk-4.2.1-5.el8_10.src.rpm	dde22b94b874f969b5472c60b5a4b16c77d2ad114f9b2d316f282573aec4d7b4	-	ol8_x86_64_baseos_latest
	gawk-4.2.1-5.el8_10.src.rpm	dde22b94b874f969b5472c60b5a4b16c77d2ad114f9b2d316f282573aec4d7b4	-	ol8_x86_64_u10_baseos_patch
	gawk-4.2.1-5.el8_10.x86_64.rpm	4df6911276ee0ac824090b5176d265307bf25a439565d3e1689a04ae781a1da9	-	ol8_x86_64_baseos_latest
	gawk-4.2.1-5.el8_10.x86_64.rpm	4df6911276ee0ac824090b5176d265307bf25a439565d3e1689a04ae781a1da9	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team