Alerts This Week
Warning Icon 1 1,394
Alerts This Week
Warning Icon 1 1,394

Debian LTS DLA-4662-1 jq Important Memory Corruption DoS Fix

debian lts
Calendar Grey July 1, 2026
Dist Debian Esm H88
Multiple memory corruption issues in jq could lead to denial-of-service and remote code execution. Update recommended.
It was found that jq, a lightweight and flexible command-line JSON parser, was vulnerable to multiple memory corruption attacks, which could lead to application crashes, denial-of-...
Topics%20covered

Topics Covered

security advisory denial of service debian memory corruption important jq

Summary

For Debian 12 bookworm, these problems have been fixed in version
1.6-2.1+deb12u2.

For Debian 11 bullseye, these issues have been addressed in DLA-4599-1 and
DLA-4661-1.

We recommend that you upgrade your jq packages.

For the detailed security status of jq please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/jq

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
important
Lowest
Low
Medium
High
Critical

Package: jq
Version: 1.6-2.1+deb12u2
CVE ID: CVE-2026-32316 CVE-2026-33947 CVE-2026-33948 CVE-2026-39956
Debian Bug: 1133921 1136445

Topics%20covered

Topics Covered

security advisory denial of service debian memory corruption important jq

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here