Astra Linux – vulnerability in jq

jq is a command-line JSON processor. In version 1.8.1 and earlier, when decNumberFromString is given a number literal consisting of INTMAX-1 2147483646 digits, the D2U macro overflows during signed-int arithmetic. The wrapped negative value bypasses the heap-allocation size check, causing the...