An update for gawk is now available for openEuler-20.03-LTS-SP4 Security Advisory openeuler-security@openeuler.org openEuler security committee openEuler-SA-2026-3162 Final 1.0 1.0 2026-07-24 Initial 2026-07-24 2026-07-24 openEuler SA Tool V1.0 2026-07-24 gawk security update An update for gawk is now available for openEuler-20.03-LTS-SP4 The gawk package is the GNU implementation of awk. The awk utility interprets a special-purpose programming language that makes it possible to handle simple data-reformatting jobs with just a few lines of code. Security Fix(es): Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below.(CVE-2026-40467) Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below.(CVE-2026-40468) Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below.(CVE-2026-40553) An update for gawk is now available for openEuler-20.03-LTS-SP4. openEuler Security has rated this update as having a security impact of critical. A Common Vunlnerability Scoring System(CVSS)base score,which gives a detailed severity rating, is available for each vulnerability from the CVElink(s) in the References section. Critical gawk https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3162 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-40467 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-40468 https://www.openeuler.org/en/security/cve/detail/?cveId=CVE-2026-40553 https://nvd.nist.gov/vuln/detail/CVE-2026-40467 https://nvd.nist.gov/vuln/detail/CVE-2026-40468 https://nvd.nist.gov/vuln/detail/CVE-2026-40553 openEuler-20.03-LTS-SP4 gawk-5.0.1-6.oe2003sp4.aarch64.rpm gawk-debuginfo-5.0.1-6.oe2003sp4.aarch64.rpm gawk-debugsource-5.0.1-6.oe2003sp4.aarch64.rpm gawk-devel-5.0.1-6.oe2003sp4.aarch64.rpm gawk-lang-5.0.1-6.oe2003sp4.aarch64.rpm gawk-5.0.1-6.oe2003sp4.src.rpm gawk-5.0.1-6.oe2003sp4.x86_64.rpm gawk-debuginfo-5.0.1-6.oe2003sp4.x86_64.rpm gawk-debugsource-5.0.1-6.oe2003sp4.x86_64.rpm gawk-devel-5.0.1-6.oe2003sp4.x86_64.rpm gawk-lang-5.0.1-6.oe2003sp4.x86_64.rpm gawk-help-5.0.1-6.oe2003sp4.noarch.rpm Use After Free vulnerability has been found in "io.c" program file of gawk (do_getline_redir() routine). This issue may lead to a crash. It affects gawk in versions 5.4.0 and below. 2026-07-24 CVE-2026-40467 openEuler-20.03-LTS-SP4 High 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H gawk security update 2026-07-24 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3162 Integer overflow vulnerability has been found in "builtin.c" program file of gawk. This issue may lead to memory exhaustion on the hosting operating system and could be used to overwrite gawk heap metadata and objects with attacker-controlled bytes. It affects gawk in versions 5.4.0 and below. 2026-07-24 CVE-2026-40468 openEuler-20.03-LTS-SP4 Critical 9.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H gawk security update 2026-07-24 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3162 Buffer overflow vulnerability has been found in "extension/readdir.c" program file of gawk (ftype() routine). This issue could be used to crash the program and potentially to achieve code execution, although the latter has not been confirmed to be feasible. It affects gawk in versions 5.4.0 and below. 2026-07-24 CVE-2026-40553 openEuler-20.03-LTS-SP4 High 7.5 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H gawk security update 2026-07-24 https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-3162