Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 454
Alerts This Week
Warning Icon 1 454

SUSE Linux Micro Moderate jq Security Issues 2026-22705-1

suse
Calendar Grey July 22, 2026
Scroller Suse
SUSE Linux Micro 6.0 fixes seven issues in jq with moderate severity, including buffer overflows and resource exhaustion.
SUSE has released a security update for jq addressing seven vulnerabilities, including buffer overflows and improper input handling, requiring installation through recommended meth...

Summary

## This update for jq fixes the following issues Security issues fixed: * CVE-2025-9403: reacheable assertion in `run_jq_tests` can lead to program termination when processing malformed JSON input containing invalid Unicode escape sequences (bsc#1248600). * CVE-2026-32316: integer overflow within the `jvp_string_append()` and `jvp_string_copy_replace_bad` functions can lead to heap buffer overflow when evaluating untrusted jq queries (bsc#1262044). * CVE-2026-33947: unbounded recursion in functions `jv_setpath()`, `jv_getpath()`, and `delpaths_sorted()` can lead to excessive resource consumption when processing crafted JSON input (bsc#1262069). * CVE-2026-33948: improper handling of buffer sizes via `strlen()` instead of

Topics%20covered

Topics Covered

security advisory moderate denial of service buffer overflow SuSE jq

References

* bsc#1248600

* bsc#1262043

* bsc#1262044

* bsc#1262069

* bsc#1262070

* bsc#1262071

* bsc#1262072

Cross-

* CVE-2025-9403

* CVE-2026-32316

* CVE-2026-33947

* CVE-2026-33948

* CVE-2026-39956

* CVE-2026-39979

* CVE-2026-40164

CVSS scores:

* CVE-2025-9403 ( SUSE ): 1.9

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

* CVE-2025-9403 ( SUSE ): 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

* CVE-2025-9403 ( NVD ): 1.9

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Severity
moderate
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2026:22705-1
Release Date: 2026-07-08T11:04:34Z
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate denial of service buffer overflow SuSE jq

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.