-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 17 Apr 2026 17:08:56 +0800 Source: jq Binary: jq jq-dbgsym libjq-dev libjq1 libjq1-dbgsym Architecture: arm64 Version: 1.7.1-6+deb13u2 Distribution: trixie Urgency: medium Maintainer: arm64 Build Daemon (arm-ubc-04) Changed-By: ChangZhuo Chen (陳昌倬) Description: jq - lightweight and flexible command-line JSON processor libjq-dev - lightweight and flexible command-line JSON processor - developmen libjq1 - lightweight and flexible command-line JSON processor - shared lib Changes: jq (1.7.1-6+deb13u2) trixie; urgency=medium . * Cherry-pick upstream commit for the following: * CVE-2026-32316 * CVE-2026-33947 * CVE-2026-33948 * CVE-2026-39956 * CVE-2026-39979 * CVE-2026-40164 Checksums-Sha1: 08e96bd9b3e60d76de784e2e68a168df50cf56a5 19100 jq-dbgsym_1.7.1-6+deb13u2_arm64.deb cc00e3f2c4487d0a7b7670a816629478fd9a11c0 7617 jq_1.7.1-6+deb13u2_arm64-buildd.buildinfo b323ed28cf6f1f1e1e1324108f154c419ee8d9ed 77300 jq_1.7.1-6+deb13u2_arm64.deb 01006c39195add565aaabeee3a85d3338e0f8bae 24816 libjq-dev_1.7.1-6+deb13u2_arm64.deb 6a01c38373048cfd6b96d4b13be2ba8c621b757e 372360 libjq1-dbgsym_1.7.1-6+deb13u2_arm64.deb cf0d79bfe53388808e6db954cf45249f4883bf25 148432 libjq1_1.7.1-6+deb13u2_arm64.deb Checksums-Sha256: 12bfaaed8f3e4ade9ce7903c2c3fb5b35aa065672ee96cbff9aa168fb756f805 19100 jq-dbgsym_1.7.1-6+deb13u2_arm64.deb e892928bfe9e202606d2b5fcde8091915216c65b95157521215232946664b807 7617 jq_1.7.1-6+deb13u2_arm64-buildd.buildinfo 4b64a93ec70ec5639709843dbb3a8721849f84a22eb3b01dde42aec26c93e03b 77300 jq_1.7.1-6+deb13u2_arm64.deb a6d491b4ce22f7fba5395dc1ecce5ff974fdc097f697c74552256a289f681d42 24816 libjq-dev_1.7.1-6+deb13u2_arm64.deb 7621a1b48a2d954b40630b7ea923b23a1556d81eb61f088abec941898965281d 372360 libjq1-dbgsym_1.7.1-6+deb13u2_arm64.deb 8ab0ac37a8f068af4139d57e0fb856b4349403d9ed5b8005c686ffffefa08544 148432 libjq1_1.7.1-6+deb13u2_arm64.deb Files: 593efe1d0aeb534c5fbb7d76ed927b25 19100 debug optional jq-dbgsym_1.7.1-6+deb13u2_arm64.deb 4ba8575d0d7d0a6f6c1a4220738c2b4a 7617 utils optional jq_1.7.1-6+deb13u2_arm64-buildd.buildinfo 2a927c0c2a7b730e9e80db000fc04f85 77300 utils optional jq_1.7.1-6+deb13u2_arm64.deb dc89d185b41765089d546f6d9007ac95 24816 libdevel optional libjq-dev_1.7.1-6+deb13u2_arm64.deb 4ac8516e23bf5c3d3e31e8ae9881f908 372360 debug optional libjq1-dbgsym_1.7.1-6+deb13u2_arm64.deb 376ca7634b1a05b5b426373117aa3b72 148432 utils optional libjq1_1.7.1-6+deb13u2_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEUPFH3FhY8nQZGtLwVLd4YzMSDKEFAmn4al8ACgkQVLd4YzMS DKFPmRAAkiYTzXhbfbELnFwt0Fv8DsmFV/EGDqKGbdjKsKn8G5fVYRYqxXSevEd1 OFKWy/p1kl2S0GsEojfzjTy/m7QIqjpC7XNLZE4aBzgKUQKTb70c8uqnaL0aliUk V6DcbW0ASOhZGYyJeYhwUf7PvkaikW1QdSQ0wtKavisuJek6lJgp026YCRRYFi8n 9NqWywyY+CuPsBaVhqrYFPVThwobP3NEPWiGtfRGe3JDHVUsI7BdlRWCYPFFC/qL K8uucSABXHKjc+IFgZ39yprrLMJBvELnQ50tDyHVmQ0TiODO7oT8y0do6err1Q5Q G3OYviPF8+bFJ/az9YJCj9Qt9TuXiA23trfjMYBIVrRxFYhIaN/zDUrrVHabuTJZ a1uyY90VelVnqLCbve+6uvOT3pgLEZTlO+ZLpkK5AYRY1ncMsoQ4N2/YzASObRjh 0+9LwwBsidLdMUYWvt6W3NsZaNWbnVlclFU5Wfpz2iqzlPjQsrhah7kgxpss9nJ5 lTrsFDFGrStkW1LNOQg37oxO4tTu8QY/AzICYcHTCDd1JAQkFRNoYqqIBbnmGEF3 VSVl6/xnLV5vDwaL57Yeb08IaxctcVitf63scVRYOtqGoGhPbRU2xqBjt3VAWc6G SBdMIPqM5z3gdfcxMHyPrmhpnrtWolo6JXF4BZxzjkZy+lOk/xU= =Q6FD -----END PGP SIGNATURE-----