-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 01 Jul 2026 10:47:59 +0200
Source: jq
Binary: jq jq-dbgsym libjq-dev libjq1 libjq1-dbgsym
Architecture: arm64
Version: 1.6-2.1+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: arm64 Build Daemon (arm-conova-03) <buildd_arm64-arm-conova-03@buildd.debian.org>
Changed-By: Andreas Henriksson <andreas@fatal.se>
Description:
 jq         - lightweight and flexible command-line JSON processor
 libjq-dev  - lightweight and flexible command-line JSON processor - developmen
 libjq1     - lightweight and flexible command-line JSON processor - shared lib
Closes: 1133921 1136445
Changes:
 jq (1.6-2.1+deb12u2) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the LTS Team.
   * CVE-2026-32316 (Closes: #1133921)
   * CVE-2026-33947
   * CVE-2026-33948
   * CVE-2026-39956
   * CVE-2026-39979
   * CVE-2026-40164
   * CVE-2026-41256 (Closes: #1136445)
   * CVE-2026-41257
   * CVE-2026-43896
   * CVE-2026-43895
   * CVE-2026-44777
   * CVE-2026-43894
   * CVE-2026-47770
   * CVE-2026-49839
   * GHSA-ggc9-rpv2-xgpm and GHSA-gvwx-xj9r-3frq
   * CVE-2026-54679
Checksums-Sha1:
 2832ec96c4227bdae9b95a808b628532c081aed3 16976 jq-dbgsym_1.6-2.1+deb12u2_arm64.deb
 69d0ed5ff71ef2c04eb02d998a9bc55217f74c12 8292 jq_1.6-2.1+deb12u2_arm64-buildd.buildinfo
 d4838871a40b869a7c87d55516bf141579ac662b 63560 jq_1.6-2.1+deb12u2_arm64.deb
 795292bd81d7c1b70200508e42f2fa7fc1d030d7 23964 libjq-dev_1.6-2.1+deb12u2_arm64.deb
 7f80c83dea45a4f8d32ccd25196afdc6aa5070d2 281552 libjq1-dbgsym_1.6-2.1+deb12u2_arm64.deb
 4c33962926e30def3619da9c75cb07bd547f42fa 121540 libjq1_1.6-2.1+deb12u2_arm64.deb
Checksums-Sha256:
 ad66082ea4656a5aa0894432eb7177c7162a2355c7343d0c881131d2ea1b1bc4 16976 jq-dbgsym_1.6-2.1+deb12u2_arm64.deb
 82b596173cfe101ccdb139ee7913374f0e7eae779f8362ffe0aceba0984495fc 8292 jq_1.6-2.1+deb12u2_arm64-buildd.buildinfo
 c232e9407e0f47006dd6077804c1274fd2e4f8be02efc78822db748ed65bea99 63560 jq_1.6-2.1+deb12u2_arm64.deb
 897fb5aaedd55c760e1d512c3d5dd8fa687f35b33bb458d8f28747bae77b4321 23964 libjq-dev_1.6-2.1+deb12u2_arm64.deb
 96e21340afc0c149b68503215539678629be76b306a8144d8e66a84003e5d99b 281552 libjq1-dbgsym_1.6-2.1+deb12u2_arm64.deb
 2f5b9f70fd6d954123c3c8d0a1b306fe3703dc88c6362ccbe28713e55e7a730b 121540 libjq1_1.6-2.1+deb12u2_arm64.deb
Files:
 8c4afc939ac2634fc24084d4fd6a6018 16976 debug optional jq-dbgsym_1.6-2.1+deb12u2_arm64.deb
 51efee98f3955001d4ce901290f2070e 8292 utils optional jq_1.6-2.1+deb12u2_arm64-buildd.buildinfo
 398d4c609c2892dedfe1ccc18d7234bb 63560 utils optional jq_1.6-2.1+deb12u2_arm64.deb
 8ffe23e9f52933e2430e1a016af19808 23964 libdevel optional libjq-dev_1.6-2.1+deb12u2_arm64.deb
 f47bc4aefc80b08c873e0b7586ba4621 281552 debug optional libjq1-dbgsym_1.6-2.1+deb12u2_arm64.deb
 7e5f34833943da064ed6c54da54ce127 121540 utils optional libjq1_1.6-2.1+deb12u2_arm64.deb

-----BEGIN PGP SIGNATURE-----
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=0v3q
-----END PGP SIGNATURE-----