-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 01 Jul 2026 10:47:59 +0200
Source: jq
Binary: jq jq-dbgsym libjq-dev libjq1 libjq1-dbgsym
Architecture: amd64
Version: 1.6-2.1+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) <buildd_amd64-x86-conova-01@buildd.debian.org>
Changed-By: Andreas Henriksson <andreas@fatal.se>
Description:
 jq         - lightweight and flexible command-line JSON processor
 libjq-dev  - lightweight and flexible command-line JSON processor - developmen
 libjq1     - lightweight and flexible command-line JSON processor - shared lib
Closes: 1133921 1136445
Changes:
 jq (1.6-2.1+deb12u2) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the LTS Team.
   * CVE-2026-32316 (Closes: #1133921)
   * CVE-2026-33947
   * CVE-2026-33948
   * CVE-2026-39956
   * CVE-2026-39979
   * CVE-2026-40164
   * CVE-2026-41256 (Closes: #1136445)
   * CVE-2026-41257
   * CVE-2026-43896
   * CVE-2026-43895
   * CVE-2026-44777
   * CVE-2026-43894
   * CVE-2026-47770
   * CVE-2026-49839
   * GHSA-ggc9-rpv2-xgpm and GHSA-gvwx-xj9r-3frq
   * CVE-2026-54679
Checksums-Sha1:
 d7b0dc470177506c975d62c56c1ed5ad92080823 16564 jq-dbgsym_1.6-2.1+deb12u2_amd64.deb
 9434aa0583f960167d64d497d92e427cc8ed224d 8335 jq_1.6-2.1+deb12u2_amd64-buildd.buildinfo
 93d67dbbd709419719b5771b2f38a6036837bb2f 63984 jq_1.6-2.1+deb12u2_amd64.deb
 bb6f8db7628ef8049d0e71c29d5a7c5738a4289a 23960 libjq-dev_1.6-2.1+deb12u2_amd64.deb
 8da2ec25a78ec81d91fa57e453ff1c3025818af4 295580 libjq1-dbgsym_1.6-2.1+deb12u2_amd64.deb
 2ff8e4cfe9df29831785ce1f070929fbbc7dcaf5 135656 libjq1_1.6-2.1+deb12u2_amd64.deb
Checksums-Sha256:
 4e33c9deea082798efd796e3b8e175eb6d4abe2fe7218b8d92a7e3203d681c63 16564 jq-dbgsym_1.6-2.1+deb12u2_amd64.deb
 229f4a5176ba2fd908b6ca73cf5cb447b8f9931496be4708f90d93fb209510e7 8335 jq_1.6-2.1+deb12u2_amd64-buildd.buildinfo
 f2303584378ac85f6d3a9ae8e46412196061681e81610d3b020abe4b5d389eb0 63984 jq_1.6-2.1+deb12u2_amd64.deb
 a749038f3a3cbfb35d0a502fcfa9c91db5ff9a71d49f6e8cc0ed006409677ab2 23960 libjq-dev_1.6-2.1+deb12u2_amd64.deb
 bc720232a220d42d22a0e02813641d87d7f306036719ff1584ba3f24cccd44b5 295580 libjq1-dbgsym_1.6-2.1+deb12u2_amd64.deb
 f501b6349a3c2462af59e7a598ebd71e7889de46c9ddf852eb12ebeba7df21a2 135656 libjq1_1.6-2.1+deb12u2_amd64.deb
Files:
 0a44b773e14eba0aad3d33686f928de1 16564 debug optional jq-dbgsym_1.6-2.1+deb12u2_amd64.deb
 6e13d18741ef1daacadbcd057f85b4f5 8335 utils optional jq_1.6-2.1+deb12u2_amd64-buildd.buildinfo
 b9aca00e056b5365d65597df4b338cee 63984 utils optional jq_1.6-2.1+deb12u2_amd64.deb
 8ea547e2e50e327fa964336895effe74 23960 libdevel optional libjq-dev_1.6-2.1+deb12u2_amd64.deb
 b924aef0abe20b830b38c4898fb25275 295580 debug optional libjq1-dbgsym_1.6-2.1+deb12u2_amd64.deb
 60ea2d4f3dc5c0f760769ecc3ff0a999 135656 utils optional libjq1_1.6-2.1+deb12u2_amd64.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmpFKZQACgkQPkCWRKsh
20c1OxAAonlum14J8oya1KI0fvrNvMLKrfprfC4rijOLl1G6uALF6FsUFVqDDPZP
9ly6/2EIZRHzqOW0TWUvwEV/YFGPyG6wDnTBr4zm7Efo9gXApC7jHyxbNiSOIOnC
d+cJbtXDMAECXqqCDO/jEHO+2S4QisFx6GhyZOOLoVfAHSc10ZTBsHiG13/RKvXf
eWNXOucCA/Wu00jxE5PLxJiIX3nvnpfVxtUD/qJuns6QZq3HZqhXkFgYChGBzfgC
I30oi8tdsMca0J0COOaBi9H9AzoNJ5XrTyfuhCY8BwO2Tqxei42/I2/he1EtJBMv
eAddiAsSwMzcYhTyenCVIpVWg5buBOhG10vVxxcXu7NEZysC9kn8YAKfgxJUbfhV
Mt3NjsahvvSPWMjNfGG4PlNZgnZeYHr+/maf7AlG62JogODxBxURfpAj99kEzAY3
QqDdhbf7viCziq3WCHrKPlmd94Eab4TpDhXwS4iJEQZCyU0m/27K76uyfjDF4Skg
Ky8bvyDI2IQFFVR0SD3g+zV5JruvzJSOJiS2Wobr36066Dr+kUG19LtRhII3SBcg
zik/IBO8powZybrdTx1gM68VE7/dXBl4DDNQpAYh4edj16noVieDM1pjnBarqYOp
RjVpbQxusTI3dzzzQFjSFfpDZ7dFCAd+Yy7ubjsaLStydhmIhMQ=
=Pd/g
-----END PGP SIGNATURE-----