Skip to content
OpenAdvisories
High RHSA-2026:8579 6 CVEs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

Published Apr 20, 2026 · Updated Oct 6, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Hardened Images 1 hummingbird:1 jq 0:1.8.1-3.hum1
Red Hat · Hardened Images 1 hummingbird:1 jq-devel 0:1.8.1-3.hum1

Vulnerabilities 6

  • High 8.2
    CVE-2026-32316

    jq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow

    jq is a command-line JSON processor. An integer overflow vulnerability exists through version 1.8.1 within the jvp_string_append() and jvp_string_copy_replace_bad functions, where concatenating strings with a combined length exceeding 2^31 bytes causes a 32-b…

    jqlang jq jq jq Debian Ubuntu Azure Linux Alpine Wolfi
  • High 7.5
    CVE-2026-40164

    jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed

    jq is a command-line JSON processor. Before commit 0c7d133c3c7e37c00b6d46b658a02244fdd3c784, jq used MurmurHash3 with a hardcoded, publicly visible seed (0x432A9843) for all JSON object hash table operations, which allowed an attacker to precompute key collis…

    jqlang jq jq jq Debian Ubuntu Azure Linux Alpine
  • Medium 6.9
    CVE-2026-39979

    jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers

    jq is a command-line JSON processor. In commits before 2f09060afab23fe9390cce7cb860b10416e1bf5f, the jv_parse_sized() API in libjq accepts a counted buffer with an explicit length parameter, but its error-handling path formats the input buffer using %s in jv_…

    jqlang jq jq jq Debian Ubuntu Azure Linux Alpine
  • Medium 6.2
    CVE-2026-33947

    jq: Unbounded Recursion in jv_setpath(), jv_getpath() and delpaths_sorted()

    jq is a command-line JSON processor. In versions 1.8.1 and below, functions jv_setpath(), jv_getpath(), and delpaths_sorted() in jq's src/jv_aux.c use unbounded recursion whose depth is controlled by the length of a caller-supplied path array, with no depth l…

    jqlang jq jq jq Debian Ubuntu Azure Linux Alpine
  • Medium 6.1
    CVE-2026-39956

    jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure

    jq is a command-line JSON processor. Prior to version 1.8.2, the _strindices builtin in jq's src/builtin.c passes its arguments directly to jv_string_indexes() without verifying they are strings, and jv_string_indexes() in src/jv.c relies solely on assert() c…

    jqlang jq jq jq Debian Ubuntu Azure Linux Alpine
  • Low 2.9
    CVE-2026-33948

    jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input

    jq is a command-line JSON processor. Commits before 6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b contain a vulnerability where CLI input parsing allows validation bypass via embedded NUL bytes. When reading JSON from files or stdin, jq uses strlen() to determine …

    jqlang jq jq jq Debian Ubuntu Azure Linux Alpine

References

  • article
    https://images.redhat.com/
  • report
    https://access.redhat.com/security/cve/CVE-2026-40164
  • article
    https://access.redhat.com/security/updates/classification/
  • report
    https://access.redhat.com/security/cve/CVE-2026-39979
  • report
    https://access.redhat.com/security/cve/CVE-2026-39956
  • report
    https://access.redhat.com/security/cve/CVE-2026-33948
  • report
    https://access.redhat.com/security/cve/CVE-2026-33947
  • report
    https://access.redhat.com/security/cve/CVE-2026-32316
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_8579.json
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2457929
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-32316
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-32316
  • article
    https://github.com/jqlang/jq/commit/e47e56d226519635768e6aab2f38f0ab037c09e5
  • article
    https://github.com/jqlang/jq/security/advisories/GHSA-q3h9-m34w-h76f
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2458038
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-33947
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-33947
  • article
    https://github.com/jqlang/jq/commit/fb59f1491058d58bdc3e8dd28f1773d1ac690a1f
  • article
    https://github.com/jqlang/jq/security/advisories/GHSA-xwrw-4f8h-rjvg
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2458085
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-33948
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-33948
  • article
    https://github.com/jqlang/jq/commit/6374ae0bcdfe33a18eb0ae6db28493b1f34a0a5b
  • article
    https://github.com/jqlang/jq/security/advisories/GHSA-32cx-cvvh-2wj9
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2458076
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-39956
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-39956
  • article
    https://github.com/jqlang/jq/commit/fdf8ef0f0810e3d365cdd5160de43db46f57ed03
  • article
    https://github.com/jqlang/jq/security/advisories/GHSA-6gc3-3g9p-xx28
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2458077
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-39979
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-39979
  • article
    https://github.com/jqlang/jq/commit/2f09060afab23fe9390cce7cb860b10416e1bf5f
  • article
    https://github.com/jqlang/jq/security/advisories/GHSA-2hhh-px8h-355p
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2458084
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2026-40164
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2026-40164
  • article
    https://github.com/jqlang/jq/commit/0c7d133c3c7e37c00b6d46b658a02244fdd3c784
  • article
    https://github.com/jqlang/jq/security/advisories/GHSA-wwj8-gxm6-jc29