[CLSA-2026:1790607732] jq: Fix of 2 CVEs
Type:
security
Severity:
Important
Release date:
2026-09-28 15:59:22 UTC
Description:
- CVE-2026-32316: heap overflow in jvp_string_append/copy_replace_bad() - CVE-2026-49839: heap out-of-bounds write in jv_load_file() (--rawfile)
CVEs fixed:
Updated packages:
  • jq-1.6-19.el9_8.2.tuxcare.els1.aarch64.rpm
    sha:d191dd176a5a9d568038b68e394020aa2f7b46c7e6f07748962d407379ad6450
  • jq-1.6-19.el9_8.2.tuxcare.els1.i686.rpm
    sha:e7834655fc323908f3ac1ae0b9b1df56444d1e9317a4189653afb9eac64b48a9
  • jq-1.6-19.el9_8.2.tuxcare.els1.x86_64.rpm
    sha:9ec6180ab9a986683c046bf919d452ec9dd1876b46f4346eed006af74dfbef36
  • jq-devel-1.6-19.el9_8.2.tuxcare.els1.aarch64.rpm
    sha:e8bd0fe92c7ec98884f9931b093965f31572f57370d30e25e854be0328dc4cdc
  • jq-devel-1.6-19.el9_8.2.tuxcare.els1.i686.rpm
    sha:6a870b02c47013714ae97a3c294fb139a9be36c7bfc642b3c5e59816925947c7
  • jq-devel-1.6-19.el9_8.2.tuxcare.els1.x86_64.rpm
    sha:bcffd33d4c52c6453de68fde36afce3c4b40033815f60b2df2d4055b71f43b0a
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.