Astra Linux – Vulnerability in jq

jq is a command-line JSON processor. Prior to version 1.8.2, jq --rawfile could cause an invalid-state reuse and a real heap-out-of-bounds write in environments with assertion-disabled features. When jvloadfileraw=1 reads a file controlled by an attacker, it repeatedly appends file chunks to the...