OESA-2025-1809 jq security update

jq is a lightweight and flexible command-line JSON processor. you can use it to slice and filter and map and transform structured data. It is written in portable C, and it has zero runtime dependencies. it can mangle the data format that you have into the one that you want. Security Fixes: jq is ...

jq has signed integer overflow in jv.c:jvp_array_write

...

AlmaLinux 9 : jq (ALSA-2025:10585)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:10585 advisory. jq: jq has signed integer overflow in jv.c:jvparraywrite CVE-2024-23337 jq: AddressSanitizer: stack-buffer-overflow in jqfuzzexecute jvstringvfmt...

Azure Linux 3.0 Security Update: jq (CVE-2024-23337)

The version of jq installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-23337 advisory. - jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when...

CBL Mariner 2.0 Security Update: jq (CVE-2024-23337)

The version of jq installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-23337 advisory. - jq is a command-line JSON processor. In versions up to and including 1.7.1, an integer overflow arises when...

CVE-2024-23337 affecting package jq for versions less than 1.7.1-3

CVE-2024-23337 affecting package jq for versions less than 1.7.1-3. A patched version of the package is available...

CVE-2024-23337 affecting package jq for versions less than 1.6-3

CVE-2024-23337 affecting package jq for versions less than 1.6-3. A patched version of the package is available...

RHSA-2025:10622 Red Hat Security Advisory: jq security update

Bulletin has no description...

RHSA-2025:10621 Red Hat Security Advisory: jq security update

Bulletin has no description...

RHSA-2025:10620 Red Hat Security Advisory: jq security update

Bulletin has no description...

RHSA-2025:10619 Red Hat Security Advisory: jq security update

Bulletin has no description...

RHSA-2025:10618 Red Hat Security Advisory: jq security update

Bulletin has no description...

RHSA-2025:10615 Red Hat Security Advisory: jq security update

Bulletin has no description...

RHSA-2025:10616 Red Hat Security Advisory: jq security update

Bulletin has no description...

RHSA-2025:10613 Red Hat Security Advisory: jq security update

Bulletin has no description...

RHSA-2025:10585 Red Hat Security Advisory: jq security update

Bulletin has no description...

AlmaLinux 8 : jq (ALSA-2025:10618)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:10618 advisory. jq: jq has signed integer overflow in jv.c:jvparraywrite CVE-2024-23337 jq: AddressSanitizer: stack-buffer-overflow in jqfuzzexecute jvstringvfmt...

Oracle Linux 8 : jq (ELSA-2025-10618)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-10618 advisory. - Fix CVE-2025-48060 AddressSanitizer: stack-buffer-overflow in jqfuzzexecute jvstringvfmt - Fix CVE-2024-23337 jq has signed integer overflow in...

jq: AddressSanitizer: stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt)

A flaw was found in jq, a command line JSON processor. A specially crafted input can cause a heap-based buffer over-read when formatting an empty string because it was not properly null-terminated, causing a crash and resulting in a denial of service...

jq: jq has signed integer overflow in jv.c:jvp_array_write

A flaw was found in jq, a command line JSON processor. An integer overflow can occur when attempting to assign a value using an array index of 2147483647 or when creating an array with 2147483647 elements, the maximum value for a 32-bit signed integer. This issue causes out-of-bounds memory acces...