rpms/gawk
7
0
Fork 0
Code Issues Pull Requests Releases Activity
The GNU version of the awk text processing utility
6 Commits 8 Branches 16 Tags 569 KiB
90b3b4eff9
Go to file
RHEL Packaging Agent 90b3b4eff9 Fix CVE-2026-40468: integer overflow in do_sub() and parse_escape() 
Backport fix for CVE-2026-40468 to gawk 4.2.1. The new patch
(gawk-4.2.1-CVE-2026-40468.patch) is based on two upstream
commits (062f2f25, aa7272a6) that fix integer overflow issues
in do_sub() (builtin.c) and parse_escape() (node.c). The fix
changes variable types to prevent overflow and adds explicit
64-bit overflow bounds checking before realloc in do_sub(),
providing a fatal error message instead of heap corruption.

CVE: CVE-2026-40468
Upstream patches:
 - 062f2f2581.patch
 - aa7272a6e1.patch
Resolves: RHEL-222771

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-09-04 08:39:37 +00:00
.fmf tests: migrate to tmt-based gating 2026-06-22 16:29:49 +02:00
.gitignore Import rpm: c8s 2023-02-27 13:03:24 -05:00
assign-int.patch Auto sync2gitlab import of gawk-4.2.1-4.el8.src.rpm 2022-05-26 07:14:00 -04:00
gawk-4.2.1-CVE-2026-40468.patch Fix CVE-2026-40468: integer overflow in do_sub() and parse_escape() 2026-09-04 08:39:37 +00:00
gawk.spec Fix CVE-2026-40468: integer overflow in do_sub() and parse_escape() 2026-09-04 08:39:37 +00:00
LICENSE.BSD Auto sync2gitlab import of gawk-4.2.1-4.el8.src.rpm 2022-05-26 07:14:00 -04:00
LICENSE.GPLv2 Auto sync2gitlab import of gawk-4.2.1-4.el8.src.rpm 2022-05-26 07:14:00 -04:00
LICENSE.LGPLv2 Auto sync2gitlab import of gawk-4.2.1-4.el8.src.rpm 2022-05-26 07:14:00 -04:00
plans.fmf tests: migrate to tmt-based gating 2026-06-22 16:29:49 +02:00
proc-rv.patch Auto sync2gitlab import of gawk-4.2.1-4.el8.src.rpm 2022-05-26 07:14:00 -04:00
sources Auto sync2gitlab import of gawk-4.2.1-4.el8.src.rpm 2022-05-26 07:14:00 -04:00