Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE Linux Micro 6.1: jq Important Buffer Overflow Fix 2025:20591-1

suse
Calendar Grey August 29, 2025
Dist Suse Esm H88
The recent update for jq addresses several critical security vulnerabilities, notably including significant buffer overflow flaws affecting SUSE systems.
* bsc#1238078 * bsc#1243450 * bsc#1244116 Cross-References:

Summary

## This update for jq fixes the following issues: * CVE-2025-48060: Fixed stack-buffer-overflow in jq_fuzz_execute (jv_string_vfmt) (bsc#1244116) * CVE-2024-23337: Fixed signed integer overflow in jv.c:jvp_array_write (bsc#1243450) * CVE-2024-53427: Fixed stack-buffer-overflow in the decNumberCopy function in decNumber.c (bsc#1238078) ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.1 zypper in -t patch SUSE-SLE-Micro-6.1-207=1 ## Package List: * SUSE Linux Micro 6.1 (aarch64 ppc64le s390x x86_64) * jq-debugsource-1.7.1-slfo.1.1_2.1 * libjq1-debuginfo-1.7.1-slfo.1.1_2.1 * jq-debuginfo-1.7.1-slfo.1.1_2.1

Topics%20covered

Topics Covered

security advisory buffer overflow SuSE important integer overflow CVE 2024

References

* bsc#1238078

* bsc#1243450

* bsc#1244116

Cross-

* CVE-2024-23337

* CVE-2024-53427

* CVE-2025-48060

CVSS scores:

* CVE-2024-23337 ( SUSE ): 6.7

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2024-23337 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

* CVE-2024-23337 ( NVD ): 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

* CVE-2024-23337 ( NVD ): 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

* CVE-2024-53427 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

* CVE-2024-53427 ( NVD ): 8.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

* CVE-2025-48060 ( SUSE ): 6.9

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

* CVE-2025-48060 ( SUSE ): 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2025:20591-1
Release Date: 2025-08-08T10:28:13Z
Rating: important

Topics%20covered

Topics Covered

security advisory buffer overflow SuSE important integer overflow CVE 2024

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here