-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 01 Jul 2026 10:47:59 +0200
Source: jq
Binary: jq jq-dbgsym libjq-dev libjq1 libjq1-dbgsym
Architecture: armhf
Version: 1.6-2.1+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: armhf Build Daemon (arm-conova-01) <buildd_arm64-arm-conova-01@buildd.debian.org>
Changed-By: Andreas Henriksson <andreas@fatal.se>
Description:
 jq         - lightweight and flexible command-line JSON processor
 libjq-dev  - lightweight and flexible command-line JSON processor - developmen
 libjq1     - lightweight and flexible command-line JSON processor - shared lib
Closes: 1133921 1136445
Changes:
 jq (1.6-2.1+deb12u2) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the LTS Team.
   * CVE-2026-32316 (Closes: #1133921)
   * CVE-2026-33947
   * CVE-2026-33948
   * CVE-2026-39956
   * CVE-2026-39979
   * CVE-2026-40164
   * CVE-2026-41256 (Closes: #1136445)
   * CVE-2026-41257
   * CVE-2026-43896
   * CVE-2026-43895
   * CVE-2026-44777
   * CVE-2026-43894
   * CVE-2026-47770
   * CVE-2026-49839
   * GHSA-ggc9-rpv2-xgpm and GHSA-gvwx-xj9r-3frq
   * CVE-2026-54679
Checksums-Sha1:
 43f51a40e1e6466596bccbc5713bf959abd6e052 16684 jq-dbgsym_1.6-2.1+deb12u2_armhf.deb
 a6a05a7e2fc9e97d2f4794b19608c3675e5260ff 8136 jq_1.6-2.1+deb12u2_armhf-buildd.buildinfo
 64f3bc30ecfdb689f0eef03ac3259913a273d767 63772 jq_1.6-2.1+deb12u2_armhf.deb
 42d1abb286716b30def2929e11c2179d698db916 23964 libjq-dev_1.6-2.1+deb12u2_armhf.deb
 df4f806460c7b024ebae85d62ad57521b5e0dbd3 278096 libjq1-dbgsym_1.6-2.1+deb12u2_armhf.deb
 53fc895205081f76525862ae7fa8527d40a71b1f 132376 libjq1_1.6-2.1+deb12u2_armhf.deb
Checksums-Sha256:
 184dceb10849a5e2342c66bfc990bef8c067d6bbdb6e9e3ebe69af448e280f7e 16684 jq-dbgsym_1.6-2.1+deb12u2_armhf.deb
 68fa3ba636ed2a7e3dd7a1ea4b70cc2994b0141790759e1ad6bc94c1a6c4bc8c 8136 jq_1.6-2.1+deb12u2_armhf-buildd.buildinfo
 33baab7f92c8985e37dee2424d401bac1470046a9b15cfcf54bf289bedb7316c 63772 jq_1.6-2.1+deb12u2_armhf.deb
 f37ea35c6cde19269e4e78e9f7edd6597a4d3e1df7601a795096bb5b40580cea 23964 libjq-dev_1.6-2.1+deb12u2_armhf.deb
 0e063135a17517531cb0c7bb2e423de8d9a0730451025902b0998d677c9de2cd 278096 libjq1-dbgsym_1.6-2.1+deb12u2_armhf.deb
 823efcd68ab47117eab9e3c9819fd52822c180cbb1e0d519e3da121d91bd27c9 132376 libjq1_1.6-2.1+deb12u2_armhf.deb
Files:
 ba83080319fecb039b38cf0138e2163d 16684 debug optional jq-dbgsym_1.6-2.1+deb12u2_armhf.deb
 be4c520ea98845c1aa570c127bde2407 8136 utils optional jq_1.6-2.1+deb12u2_armhf-buildd.buildinfo
 f55348758346a83e7e1219adfbba1cb2 63772 utils optional jq_1.6-2.1+deb12u2_armhf.deb
 60d18e2dbf9f159e17f416729bf91640 23964 libdevel optional libjq-dev_1.6-2.1+deb12u2_armhf.deb
 8a856038fb3d435e1f930b460187c3c9 278096 debug optional libjq1-dbgsym_1.6-2.1+deb12u2_armhf.deb
 f2bfe773945ce6c720194210d84711dd 132376 utils optional libjq1_1.6-2.1+deb12u2_armhf.deb

-----BEGIN PGP SIGNATURE-----
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=nO1k
-----END PGP SIGNATURE-----