Debian LTS DLA-4840-1 jq Important Memory Issues and CVE-2026-32316

Debian LTS DLA-4840-1 jq Important Memory Issues and CVE-2026-32316

SecurityVulns
Yanac

The fix for CVE-2026-32316 in 1.6-2.1+deb12u2 stopped one string from growing past its limit, but repeating a string with * could still keep appending. A repeat that cannot fit now fails with “Repeat string result too long”. Upstream fixed this in 1.8 by adding jv_string_repeat(), which would be a new symbol in libjq1, so this updateLinuxSecurity – Security AdvisoriesRead More