tocsin

Alpine/jq: high 7.5

jq is a command-line JSON processor. In versions up to and including 1.7.1, a heap-buffer-overflow is present in function `jv_string_vfmt` in the jq_fuzz_execute harness from oss-fuzz. This crash happ

Action: Upgrade jq to 1.8.0-r0 or later.

Affected

introducedfixedlast affected
01.8.0-r0-

Fixed versions

1.8.0-r0

Sources

published · modified · JSON