[CLSA-2026:1786762772] jq: Fix of CVE-2026-39956
Type:
security
Severity:
Moderate
Release date:
2026-08-15 02:59:42 UTC
Description:
- CVE-2026-39956: add runtime type checks to _strindices to prevent abort and pointer dereference on non-string arguments
CVEs fixed:
Updated packages:
  • jq-1.6-17.el9_6.2.tuxcare.els7.i686.rpm
    sha:48154fb96dee8c898fc8dd6dafa50c621a3c1b4a0e64a459e0b018b32a050d83
  • jq-1.6-17.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:cd3d9341d2673cb246d6e1a2a220fdca99f0dcdb3445cb26d1f5341e21bf74c6
  • jq-devel-1.6-17.el9_6.2.tuxcare.els7.i686.rpm
    sha:20c9d1f1e00f0d1368e0906df43fa87d797c2a71eedd0392adf4d5a93e083953
  • jq-devel-1.6-17.el9_6.2.tuxcare.els7.x86_64.rpm
    sha:1c267b690281fc0e137784a3c1a26c948edb2913eea84deec938203c613cdbd7
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.