[ubuntu/jammy-security] jq 1.6-2.1ubuntu3.1 (Accepted)

[Marc Deslauriers]

jq (1.6-2.1ubuntu3.1) jammy-security; urgency=medium

  * SECURITY UPDATE: integer overflow via signed integer limit
    - debian/patches/CVE-2024-23337.patch: fix signed integer overflow in
      jvp_array_write and jvp_object_rehash in src/jv.c, src/jv_aux.c,
      tests/jq.test.
    - CVE-2024-23337
  * SECURITY UPDATE: heap buffer overflow
    - debian/patches/CVE-2025-48060.patch: fix heap buffer overflow when
      formatting an empty string in src/jv.c, tests/jq.test.
    - CVE-2025-48060

Date: 2025-07-16 16:22:18.680699+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/jq/1.6-2.1ubuntu3.1
-------------- next part --------------
Sorry, changesfile not available.