-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 30 Jun 2026 22:41:52 +0200 Source: jq Architecture: source Version: 1.6-2.1+deb11u3 Distribution: bullseye-security Urgency: medium Maintainer: ChangZhuo Chen (陳昌倬) <czchen@debian.org> Changed-By: Andreas Henriksson <andreas@fatal.se> Closes: 1136445 Changes: jq (1.6-2.1+deb11u3) bullseye-security; urgency=medium . * Non-maintainer upload by the LTS Team. * CVE-2026-43894 (Closes: #1136445) * CVE-2026-47770 * CVE-2026-49839 * GHSA-ggc9-rpv2-xgpm and GHSA-gvwx-xj9r-3frq * CVE-2026-54679 Checksums-Sha1: 76118fcb0d8c19a0459a825a1b1e832a74f79658 1973 jq_1.6-2.1+deb11u3.dsc 2fdbf962ec939eafb2c37427adcd7fab94293cd4 419859 jq_1.6.orig.tar.gz f346329b9a36edba8b8bbf799a6bf277742ea225 28408 jq_1.6-2.1+deb11u3.debian.tar.xz 80161c30b0c44734e63a21e2d5f9de65883e742b 6849 jq_1.6-2.1+deb11u3_source.buildinfo Checksums-Sha256: 25c4ae3b0dcb00564d5cbff7e5262c767bc10b44f7cd0de4e104909bb228ba4c 1973 jq_1.6-2.1+deb11u3.dsc 3ba940b97571c866923f0409678033d33b5a98758dfc174fad8397ed908bc4d9 419859 jq_1.6.orig.tar.gz 9e51413a6c7e2ec1111c4f59d896752b6e318936cd42a5c4736d028d9be7b934 28408 jq_1.6-2.1+deb11u3.debian.tar.xz 043c535b5d0c8a2acd3e0dcdc9b3d78db36ad9fd2281001bd2762b5a27c8f671 6849 jq_1.6-2.1+deb11u3_source.buildinfo Files: 27ae98c0446c54971c77e6c21a314985 1973 utils optional jq_1.6-2.1+deb11u3.dsc 430dd5b73f36db64fd7c128a0313e98e 419859 utils optional jq_1.6.orig.tar.gz 1bc5e30c170c816997955c4f582f1c66 28408 utils optional jq_1.6-2.1+deb11u3.debian.tar.xz 88fe49e42f198bf7c143659a27650d6c 6849 utils optional jq_1.6-2.1+deb11u3_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE+uHltkZSvnmOJ4zCC8R9xk0TUwYFAmpFG5gACgkQC8R9xk0T UwaUjRAAocNeAe2MY9WSO+ej0N6ABiHVC3FgqhnrcFqj2YgqNuMnmryBO0aIc9kY 3Z5RqpBICqLYnHtFQZXxcE8DDYWwwkhhueBv6aHg/K86g2iksWupyU90LFc1p0cW QsY7TfQAk+4v0XeFEXrV52JDDmzha894XdXYyqzzcYnPFMDThk/Zm0BbeT6doPXQ 9FkQDkX7nWSobpJUAsA230GA0cvXkG2/UbAWZHApgCTwq1POmrAgMyo8tkU6xkms 66RZ2V1ix7raS3a7c3owdUrZ+Cp1N/dcgldS8G0FII+2n9cEcDs4/QlNCNRY+18r UngndDxBnt19gL5WhfaxSqONrOxVJ53UnAjPJYA52NBAeoPY2xRAyh4DtNXOBjgv uLg524pOLHElKAtzyrrfhXwCXwLsSeWOVfjcrk+HfkL/KKkG5Z9CSn4p1P2tM/yO jswgWWsIJoQlEA2PF65JKJEFI0tTaqBQQ5j5+g45GOeR1iKz1SJzEO/cfoVdkdFV eyPb4aBEpOxbE4G4VGmXdZY96fm8P/UH+abS3SoH7k/rNh8lo4sUcoblXCbIrFcV VFioMEq+lK1axrqtZHiFrWL3h95LbUkk3BhWFhpOWC3KkwGD7rz43aKLHInVYm4T clIsNvmYWNDfUXS6jBtEWRTghmx1muqjMeGnXsU1pMbUqXC9Iic= =OoEK -----END PGP SIGNATURE-----