AlmaLinux 9.2 [TuxCare] Security Update: jq / jq-devel (ALMALINUX9.2:CLSA-2026:1777322146)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1777322146 advisory. - jq is a command-line JSON processor. An integer overflow vulnerability exists through version 1.8.1 within the jvpstringappend and...

SUSE CVE-2026-54679

jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvpstringappend has a chance of integer/multiple overflowing and then causing a massive buffer overrun. This vulnerability is fixed in 1.8.2...

ALPINE-CVE-2026-54679

jq is a command-line JSON processor. Prior to 1.8.2, on 32bit system, jvpstringappend has a chance of integer/multiple overflowing and then causing a massive buffer overrun. This vulnerability is fixed in 1.8.2...

CVE-2026-32316: Heap-based Buffer Overflow

jq is a command-line JSON processor. An integer overflow vulnerability exists through version 1.8.1 within the jvpstringappend and jvpstringcopyreplacebad functions, where concatenating strings with a combined length exceeding 2^31 bytes causes a 32-bit unsigned integer overflow in the buffer...

jq:jq_fuzz_compile: Crash in jvp_string_append

Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=4520013211172864 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzcompile Job Type: libfuzzerubsanjq Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x563213056000 Crash State:...

jq:jq_fuzz_compile: Heap-buffer-overflow in jvp_string_append

Project: https://github.com/jqlang/jq.git Detailed Report: https://oss-fuzz.com/testcase?key=5819063130718208 Project: jq Fuzzing Engine: libFuzzer Fuzz Target: jqfuzzcompile Job Type: libfuzzerasanjq Platform Id: linux Crash Type: Heap-buffer-overflow WRITE Crash Address: 0x7ce57e6ff0a5 Crash...