tocsin

Alpine/jq: high 7.1

jq is a command-line JSON processor. Prior to 1.8.2,` jq --rawfile` can turn a handled oversized-string error into invalid-state reuse and a real heap out-of-bounds write in assertion-disabled builds.

Action: Upgrade jq to 1.8.2-r0 or later.

Affected

introducedfixedlast affected
01.8.2-r0-

Fixed versions

1.8.2-r0

Sources

published · modified · JSON