Red Hat Security Advisory

RHSA-2026:40041

Red Hat Hardened Images RPMs Security Update

Released 2026-07-15 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Hardened Images gawk-5.4.0-3.1.hum1@aarch64, gawk-5.4.0-3.1.hum1@src, gawk-5.4.0-3.1.hum1@x86_64 +6

TI-2026-29299 CVE-2026-40553 · GHSA-3j4c-7g5m-7rg5

LOW 23

Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine).

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00291 Published 2026-07-13 Partial fix CWE-121

TI-2026-29221 CVE-2026-40469 · GHSA-5x2x-26c9-4q5x

LOW 23

Integer overflow vulnerability has been found in "builtin.c" program file of gawk (do_sub() routine).

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00213 Published 2026-07-13 Partial fix CWE-190

TI-2026-29219 CVE-2026-40467 · GHSA-wj49-xjpv-3f4m

LOW 23

Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine).

CVSS 4.0MEDIUM 5.1 Local No auth No interaction EPSS 0.00213 Published 2026-07-13 Partial fix CWE-416

TI-2026-29220 CVE-2026-40468 · GHSA-c5xj-c73w-hcgm

LOW 11

Integer overflow vulnerability has been found in "builtin.c" program file of gawk.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00201 Published 2026-07-13 Partial fix CWE-190