AlmaLinux 9.2 [TuxCare] Security Update: jq / jq-devel (ALMALINUX9.2:CLSA-2026:1787781806)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1787781806 advisory. - jq is a command-line JSON processor. Prior to version 1.8.2, the strindices builtin in jq's src/builtin.c passes its arguments directly to...

Astra Linux – Vulnerability in jq

jq is a command-line JSON processor. Prior to version 1.8.2, the strindices builtin function in jq’s src/builtin.c passed its arguments directly to jvstringindexes, without verifying that they were strings. Additionally, jvstringindexes in src/jv.c relied solely on assert checks, which are remove...

AZL-82973 CVE-2026-39956 affecting package jq for versions less than 1.7.1-5

jq is a command-line JSON processor. Prior to version 1.8.2, the strindices builtin in jq's src/builtin.c passes its arguments directly to jvstringindexes without verifying they are strings, and jvstringindexes in src/jv.c relies solely on assert checks that are stripped in release builds compile...

ALPINE-CVE-2026-39956

jq is a command-line JSON processor. Prior to version 1.8.2, the strindices builtin in jq's src/builtin.c passes its arguments directly to jvstringindexes without verifying they are strings, and jvstringindexes in src/jv.c relies solely on assert checks that are stripped in release builds compile...