-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Wed, 01 Jul 2026 10:47:59 +0200
Source: jq
Binary: jq jq-dbgsym libjq-dev libjq1 libjq1-dbgsym
Architecture: s390x
Version: 1.6-2.1+deb12u2
Distribution: bookworm-security
Urgency: high
Maintainer: s390x Build Daemon (zani) <buildd_s390x-zani@buildd.debian.org>
Changed-By: Andreas Henriksson <andreas@fatal.se>
Description:
 jq         - lightweight and flexible command-line JSON processor
 libjq-dev  - lightweight and flexible command-line JSON processor - developmen
 libjq1     - lightweight and flexible command-line JSON processor - shared lib
Closes: 1133921 1136445
Changes:
 jq (1.6-2.1+deb12u2) bookworm-security; urgency=high
 .
   * Non-maintainer upload by the LTS Team.
   * CVE-2026-32316 (Closes: #1133921)
   * CVE-2026-33947
   * CVE-2026-33948
   * CVE-2026-39956
   * CVE-2026-39979
   * CVE-2026-40164
   * CVE-2026-41256 (Closes: #1136445)
   * CVE-2026-41257
   * CVE-2026-43896
   * CVE-2026-43895
   * CVE-2026-44777
   * CVE-2026-43894
   * CVE-2026-47770
   * CVE-2026-49839
   * GHSA-ggc9-rpv2-xgpm and GHSA-gvwx-xj9r-3frq
   * CVE-2026-54679
Checksums-Sha1:
 130d7b1b871d84f2164b9f7ee8584d4e94f82f05 17620 jq-dbgsym_1.6-2.1+deb12u2_s390x.deb
 43deb168a9c5f9fa7ec46bc143828dfea4be247e 8164 jq_1.6-2.1+deb12u2_s390x-buildd.buildinfo
 5804509b157f7bd6380bc107a29a698c97b793ce 63940 jq_1.6-2.1+deb12u2_s390x.deb
 21be596185cc6f3bffabfff150ae052b81a38df5 23960 libjq-dev_1.6-2.1+deb12u2_s390x.deb
 f64b69b83bf1daba43cdc34548cce26548d5f906 314664 libjq1-dbgsym_1.6-2.1+deb12u2_s390x.deb
 ac0949e51ac137d2dbee1b6ff97b49721ae26e55 136176 libjq1_1.6-2.1+deb12u2_s390x.deb
Checksums-Sha256:
 5b47e00a2a3fa658709750bfbb354df90ed3f56e076fb452a76d3ee7c1942c35 17620 jq-dbgsym_1.6-2.1+deb12u2_s390x.deb
 a9149717016d8057dd827e4947010b0046cd00661746a867dc36650b6cc0c8bd 8164 jq_1.6-2.1+deb12u2_s390x-buildd.buildinfo
 9e1908c503de2e377a2263acc347c1aadd665abb522d108f25036c60c10a55e0 63940 jq_1.6-2.1+deb12u2_s390x.deb
 b06036aed9456c29d2571a016da065cfca2bdf80ca10a3c9eeb1df2343eef906 23960 libjq-dev_1.6-2.1+deb12u2_s390x.deb
 09b3be83367ca4c78a098ba42825d9e47875392ec49c9c3247909409851566f8 314664 libjq1-dbgsym_1.6-2.1+deb12u2_s390x.deb
 8d362d89f4725e5057f0b4e709b167c767fee0c4ae9f84df654d396eea1932d7 136176 libjq1_1.6-2.1+deb12u2_s390x.deb
Files:
 5f4c4ace079b0a9e8d156deb6c02091c 17620 debug optional jq-dbgsym_1.6-2.1+deb12u2_s390x.deb
 c11c6c64c3645671a8f7468621d94fdb 8164 utils optional jq_1.6-2.1+deb12u2_s390x-buildd.buildinfo
 bee87971cce185588c5dc5eaf66e1430 63940 utils optional jq_1.6-2.1+deb12u2_s390x.deb
 84109b624ded23867c8801c1a7c1dde8 23960 libdevel optional libjq-dev_1.6-2.1+deb12u2_s390x.deb
 b93be796a449d864d8891aeecdb2d025 314664 debug optional libjq1-dbgsym_1.6-2.1+deb12u2_s390x.deb
 41f424874549acad38a053e5da6022b2 136176 utils optional libjq1_1.6-2.1+deb12u2_s390x.deb

-----BEGIN PGP SIGNATURE-----
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=V+Au
-----END PGP SIGNATURE-----
