RHSA-2026:49661MediumCVSS 6.2

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

Published
August 3, 2026
Last Modified
September 16, 2026

🔗 CVE IDs covered (4)

CVE-2026-40467 →CVE-2026-40468 →CVE-2026-40469 →CVE-2026-40553 →

📋 Description

CVE-2026-40467 — gawk: gawk: Denial of Service due to Use After Free vulnerability in io.c CVE-2026-40468 — gawk: gawk: Memory corruption via integer overflow CVE-2026-40469 — gawk: gawk: Denial of Service due to integer overflow CVE-2026-40553 — gawk: Gawk: Buffer overflow in ftype() routine may lead to code execution or denial of service

🎯 Affected products5

  • Red Hat Hardened Images
  • gawk-main@aarch64 as a component of Red Hat Hardened Images
  • gawk-main@noarch as a component of Red Hat Hardened Images
  • gawk-main@src as a component of Red Hat Hardened Images
  • gawk-main@x86_64 as a component of Red Hat Hardened Images

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://images.redhat.com/ Workaround: To mitigate this issue, users should avoid processing untrusted or maliciously crafted input with `gawk`. Exercise caution when executing `gawk` scripts or commands that process data from unknown or unverified sources. Workaround: Do not execute untrusted awk scripts or process untrusted inputs that could trigger oversized calculations in builtin.c. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Do not run gawk against untrusted scripts, files, or directories to prevent triggering these vulnerabilities. If an attack is attempted, Red Hat's built-in memory protections will safely crash the program, preventing malicious code execution.

🔗 References (8)