Synopsis
Moderate: gawk security update
Description
The gawk packages contain the GNU version of awk, a text processing utility. Awk interprets a special-purpose programming language to do quick and easy text pattern matching and reformatting jobs.
Security Fix(es):
* gawk: gawk: Memory corruption via integer overflow (CVE-2026-40468)
* gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service (CVE-2026-40553)
* gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c (CVE-2026-40467)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected products
Rocky Linux 9 aarch64
Rocky Linux 9 ppc64le
Rocky Linux 9 s390x
Rocky Linux 9 x86_64
Fixes
2499655
2499657
2499658
CVEs
CVE-2026-40467
CVE-2026-40468
CVE-2026-40553
Affected packages
Rocky Linux 9 aarch64 - BaseOS
gawk-0:5.1.0-6.el9_8.1.aarch64.rpm
gawk-0:5.1.0-6.el9_8.1.src.rpm
gawk-debuginfo-0:5.1.0-6.el9_8.1.aarch64.rpm
gawk-debugsource-0:5.1.0-6.el9_8.1.aarch64.rpm
Rocky Linux 9 ppc64le - BaseOS
gawk-0:5.1.0-6.el9_8.1.ppc64le.rpm
gawk-0:5.1.0-6.el9_8.1.src.rpm
gawk-debuginfo-0:5.1.0-6.el9_8.1.ppc64le.rpm
gawk-debugsource-0:5.1.0-6.el9_8.1.ppc64le.rpm
Rocky Linux 9 s390x - BaseOS
gawk-0:5.1.0-6.el9_8.1.s390x.rpm
gawk-0:5.1.0-6.el9_8.1.src.rpm
gawk-debuginfo-0:5.1.0-6.el9_8.1.s390x.rpm
gawk-debugsource-0:5.1.0-6.el9_8.1.s390x.rpm
Rocky Linux 9 x86_64 - BaseOS
gawk-0:5.1.0-6.el9_8.1.src.rpm
gawk-0:5.1.0-6.el9_8.1.x86_64.rpm
gawk-debuginfo-0:5.1.0-6.el9_8.1.x86_64.rpm
gawk-debugsource-0:5.1.0-6.el9_8.1.x86_64.rpm
Rocky Linux 9 aarch64 - AppStream
gawk-all-langpacks-0:5.1.0-6.el9_8.1.aarch64.rpm
Rocky Linux 9 ppc64le - AppStream
gawk-all-langpacks-0:5.1.0-6.el9_8.1.ppc64le.rpm
Rocky Linux 9 s390x - AppStream
gawk-all-langpacks-0:5.1.0-6.el9_8.1.s390x.rpm
Rocky Linux 9 x86_64 - AppStream
gawk-all-langpacks-0:5.1.0-6.el9_8.1.x86_64.rpm