SUSE-SU-2017:2950-1

See a problem?
Please try reporting it to the source first.

Source

Import Source

JSON Data

https://api.test.osv.dev/v1/vulns/SUSE-SU-2017:2950-1

Related

Published

2017-11-08T07:50:27Z

Modified

2017-11-08T07:50:27Z

Summary

Security update for jq

Details

This update for jq fixes the following issues:

Security issues fixed:

CVE-2016-4074: The jvdumpterm function in jq allowed remote attackers to cause a denial of service (stack consumption and application crash) via a crafted JSON file. (bsc#1014176)

Non-security issues fixed:

Update tests dependencies to increase test coverage. (bsc#1017157)
Do not run tests in qemu builds, valgrind does not work reliably in such conditions.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.5-3.5.7

{
    "binaries": [
        {
            "libjq1": "1.5-3.5.7",
            "jq": "1.5-3.5.7"
        }
    ]
}