rpms/gawk
7
0
Fork 0
Code Issues Pull Requests Releases Activity
The GNU version of the awk text processing utility
7 Commits 8 Branches 16 Tags 569 KiB
8226b4922e
Go to file
RHEL Packaging Agent 8226b4922e Fix CVE-2026-40467: use-after-free in do_getline_redir() 
Backport upstream fix (commit a2d18c74) for CVE-2026-40467,
a use-after-free vulnerability in io.c's do_getline_redir()
function. The fix moves the DEREF(redir_exp) call from one
early site to four separate locations right before each
return/fatal path, preventing the node from being freed
before it is still needed by is_non_fatal_redirect().

CVE: CVE-2026-40467
Upstream patches:
 - https://cgit.git.savannah.gnu.org/cgit/gawk.git/patch/?id=a2d18c74109e41bec29a23098eba2e00057286d8
Resolves: RHEL-222601

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-09-04 08:43:30 +00:00
.fmf tests: migrate to tmt-based gating 2026-06-22 16:29:49 +02:00
.gitignore Import rpm: c8s 2023-02-27 13:03:24 -05:00
assign-int.patch Auto sync2gitlab import of gawk-4.2.1-4.el8.src.rpm 2022-05-26 07:14:00 -04:00
gawk-4.2.1-CVE-2026-40467.patch Fix CVE-2026-40467: use-after-free in do_getline_redir() 2026-09-04 08:43:30 +00:00
gawk-4.2.1-CVE-2026-40468.patch Fix CVE-2026-40468: integer overflow in do_sub() and parse_escape() 2026-09-04 08:39:37 +00:00
gawk.spec Fix CVE-2026-40467: use-after-free in do_getline_redir() 2026-09-04 08:43:30 +00:00
LICENSE.BSD Auto sync2gitlab import of gawk-4.2.1-4.el8.src.rpm 2022-05-26 07:14:00 -04:00
LICENSE.GPLv2 Auto sync2gitlab import of gawk-4.2.1-4.el8.src.rpm 2022-05-26 07:14:00 -04:00
LICENSE.LGPLv2 Auto sync2gitlab import of gawk-4.2.1-4.el8.src.rpm 2022-05-26 07:14:00 -04:00
plans.fmf tests: migrate to tmt-based gating 2026-06-22 16:29:49 +02:00
proc-rv.patch Auto sync2gitlab import of gawk-4.2.1-4.el8.src.rpm 2022-05-26 07:14:00 -04:00
sources Auto sync2gitlab import of gawk-4.2.1-4.el8.src.rpm 2022-05-26 07:14:00 -04:00