[Git][security-tracker-team/security-tracker][master] Add reference for CVE-2024-53427/jq

Salvatore Bonaccorso (@carnil) carnil at debian.org
Fri Apr 11 21:15:03 BST 2025



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
fa8cf55e by Salvatore Bonaccorso at 2025-04-11T22:14:27+02:00
Add reference for CVE-2024-53427/jq

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -15181,7 +15181,9 @@ CVE-2024-53427 (decNumberCopy in decNumber.c in jq through 1.7.1 does not proper
 	- jq <unfixed>
 	[bookworm] - jq <no-dsa> (Minor issue)
 	[bullseye] - jq <postponed> (Minor issue, wait until it's fixed upstream)
+	NOTE: https://github.com/jqlang/jq/security/advisories/GHSA-x6c3-qv5r-7q22
 	NOTE: https://github.com/jqlang/jq/issues/3196
+	NOTE: https://github.com/jqlang/jq/commit/b86ff49f46a4a37e5a8e75a140cb5fd6e1331384
 	NOTE: https://github.com/jqlang/jq/commit/a09a4dfd55e6c24d04b35062ccfe4509748b1dd3
 CVE-2024-52925 (In OPSWAT MetaDefender Kiosk before 4.7.0, arbitrary code execution ca ...)
 	NOT-FOR-US: OPSWAT MetaDefender Kiosk



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fa8cf55e540f5893e3725b704a1be82511d2ed5f

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/fa8cf55e540f5893e3725b704a1be82511d2ed5f
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20250411/084bbe04/attachment.htm>


More information about the debian-security-tracker-commits mailing list