-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 01 Jul 2026 10:47:59 +0200
Source: jq
Binary: jq jq-dbgsym libjq-dev libjq1 libjq1-dbgsym
Architecture: i386
Version: 1.6-2.1+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) <buildd_amd64-x86-ubc-02@buildd.debian.org>
Changed-By: Andreas Henriksson <andreas@fatal.se>
Description:
 jq         - lightweight and flexible command-line JSON processor
 libjq-dev  - lightweight and flexible command-line JSON processor - developmen
 libjq1     - lightweight and flexible command-line JSON processor - shared lib
Closes: 1133921 1136445
Changes:
 jq (1.6-2.1+deb12u2) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the LTS Team.
   * CVE-2026-32316 (Closes: #1133921)
   * CVE-2026-33947
   * CVE-2026-33948
   * CVE-2026-39956
   * CVE-2026-39979
   * CVE-2026-40164
   * CVE-2026-41256 (Closes: #1136445)
   * CVE-2026-41257
   * CVE-2026-43896
   * CVE-2026-43895
   * CVE-2026-44777
   * CVE-2026-43894
   * CVE-2026-47770
   * CVE-2026-49839
   * GHSA-ggc9-rpv2-xgpm and GHSA-gvwx-xj9r-3frq
   * CVE-2026-54679
Checksums-Sha1:
 cdcf2459915b65340d10a56d0a3c6f9cd86e3b7d 15396 jq-dbgsym_1.6-2.1+deb12u2_i386.deb
 564f05080a5c404cd5b2deb7afb42b5cb5ef8edc 8250 jq_1.6-2.1+deb12u2_i386-buildd.buildinfo
 6c855643d975b409e310070f80daaee58dd24e18 65056 jq_1.6-2.1+deb12u2_i386.deb
 55a049b116f2bece81fe77e2617a9e6e0f9bc461 23956 libjq-dev_1.6-2.1+deb12u2_i386.deb
 5ce56c1326d64267fcb4376deff79d0a4964e225 254056 libjq1-dbgsym_1.6-2.1+deb12u2_i386.deb
 653b89dd5266f6704611f9ef4aad2e3c9f9c42bb 168384 libjq1_1.6-2.1+deb12u2_i386.deb
Checksums-Sha256:
 10a21c10f28218cd3c6ca1ada4e3c0d63c289a05825150220836f94eb9764671 15396 jq-dbgsym_1.6-2.1+deb12u2_i386.deb
 298c9683b2fc8315215cb9b835f339ccc1affe860067bad06be8a9e5949c4ebe 8250 jq_1.6-2.1+deb12u2_i386-buildd.buildinfo
 03a86af2c41e8c454fe2dde07c90d811c295d42f7285feba00d0aacabc0021db 65056 jq_1.6-2.1+deb12u2_i386.deb
 f1bc0c36951de79c07b94cd42315558a5ad875da90514a4dd31cdd740cd7cb3b 23956 libjq-dev_1.6-2.1+deb12u2_i386.deb
 0438a918ca7f381e910cfbdc0a04360138c6a64ab19948657b717f0c79eb7c4c 254056 libjq1-dbgsym_1.6-2.1+deb12u2_i386.deb
 a5b40bcc2f71af531e04c1ac238e1308d66f3af08d3abb9c3028b83c89b0fb3f 168384 libjq1_1.6-2.1+deb12u2_i386.deb
Files:
 89d512ffb9e9a03b52ab1c1d02a760a0 15396 debug optional jq-dbgsym_1.6-2.1+deb12u2_i386.deb
 3a1285b27c7d60e6ba78fb003fdc18e9 8250 utils optional jq_1.6-2.1+deb12u2_i386-buildd.buildinfo
 41bf3197b8e0fccb9c2c15603a2ea09c 65056 utils optional jq_1.6-2.1+deb12u2_i386.deb
 b0ef8d9fc919a9c84ae35713354f3580 23956 libdevel optional libjq-dev_1.6-2.1+deb12u2_i386.deb
 e94f902e202e44bf69233af5aedabd4d 254056 debug optional libjq1-dbgsym_1.6-2.1+deb12u2_i386.deb
 6a2b476396a39be61d7677e76bcd13a8 168384 utils optional libjq1_1.6-2.1+deb12u2_i386.deb

-----BEGIN PGP SIGNATURE-----
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=etY4
-----END PGP SIGNATURE-----