Alerts This Week
Warning Icon 1 1,149
Alerts This Week
Warning Icon 1 1,149

Ubuntu 25.10 jq Significant Denial of Service USN-8202-1 Update Release

ubuntu
Calendar Grey April 24, 2026
Dist Ubuntu Esm H88
Several security issues addressed in jq updates for Ubuntu systems to prevent potential exploits and data leaks.
Several security issues were fixed in jq.

Summary

Several security issues were fixed in jq.

Software Description:

- jq: lightweight and flexible command-line JSON processor

Details:

It was discovered that jq did not correctly handle certain string

concatenations. An attacker could possibly use this issue to cause a denial

of service or execute arbitrary code. This issue was addressed in Ubuntu

16.04 LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu

24.04 LTS and Ubuntu 25.10. (CVE-2026-32316)

It was discovered that jq did not correctly handle recursion in certain

circumstances. An attacker could possibly use this issue to cause a denial

of service. (CVE-2026-33947)

It was discovered that jq did not correctly handle improperly terminated

strings. An attacker could possibly use this issue to cause a denial of

service or execute arbitrary code. This issue was addressed in Ubuntu 16.04

LTS, Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS

and Ubuntu 25.10. (CVE-2026-33948)

It was discovered ...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service arbitrary code execution Ubuntu important jq

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  jq                              1.8.1-3ubuntu1.1
  libjq-dev                       1.8.1-3ubuntu1.1
  libjq1                          1.8.1-3ubuntu1.1

Ubuntu 24.04 LTS
  jq                              1.7.1-3ubuntu0.24.04.2
  libjq-dev                       1.7.1-3ubuntu0.24.04.2
  libjq1                          1.7.1-3ubuntu0.24.04.2

Ubuntu 22.04 LTS
  jq                              1.6-2.1ubuntu3.2
  libjq-dev                       1.6-2.1ubuntu3.2
  libjq1                          1.6-2.1ubuntu3.2

Ubuntu 20.04 LTS
  jq                              1.6-1ubuntu0.20.04.1+esm2
                                  Available with Ubuntu Pro
  libjq-dev                       1.6-1ubuntu0.20.04.1+esm2
                                  Available with Ubuntu Pro
  libjq1                          1.6-1ubuntu0.20.04.1+esm2
                                  Available with Ubuntu Pro

Ubuntu 18.04 LTS
  jq                              1.5+dfsg-2ubuntu0.1~esm2
                                  Available with Ubuntu Pro
  libjq-dev                       1.5+dfsg-2ubuntu0.1~esm2
                                  Available with Ubuntu Pro
  libjq1                          1.5+dfsg-2ubuntu0.1~esm2
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  jq                              1.5+dfsg-1ubuntu0.1+esm4
                                  Available with Ubuntu Pro

Ubuntu 14.04 LTS
  jq                              1.3-1.1ubuntu1.1+esm4
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-8202-1

CVE-2026-32316, CVE-2026-33947, CVE-2026-33948, CVE-2026-39956,

CVE-2026-39979, CVE-2026-40164

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8202-1

Topics%20covered

Topics Covered

security advisory denial of service arbitrary code execution Ubuntu important jq

Package Information

https://launchpad.net/ubuntu/+source/jq/1.8.1-3ubuntu1.1
https://launchpad.net/ubuntu/+source/jq/1.7.1-3ubuntu0.24.04.2
https://launchpad.net/ubuntu/+source/jq/1.6-2.1ubuntu3.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here