[Git][security-tracker-team/security-tracker][master] Reserve DLA-4661-1 for jq/bullseye
Andreas Henriksson (@ah)
gitlab at salsa.debian.org
Wed Jul 1 14:58:34 BST 2026
Andreas Henriksson pushed to branch master at Debian Security Tracker / security-tracker
Commits:
08760da1 by Andreas Henriksson at 2026-07-01T15:58:24+02:00
Reserve DLA-4661-1 for jq/bullseye
- - - - -
2 changed files:
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[01 Jul 2026] DLA-4661-1 jq - security update
+ {CVE-2026-43894 CVE-2026-47770 CVE-2026-49839 CVE-2026-54679}
+ [bullseye] - jq 1.6-2.1+deb11u3
[30 Jun 2026] DLA-4660-1 nginx - security update
{CVE-2026-42055 CVE-2026-48142}
[bullseye] - nginx 1.18.0-6.1+deb11u8
=====================================
data/dla-needed.txt
=====================================
@@ -268,8 +268,10 @@ jpeg-xl/bookworm
NOTE: 20260619: Added by Front-Desk (charles)
NOTE: 20260619: Follow DSA-6342-1 (charles)
--
-jq (ah)
+jq/bookworm (ah)
NOTE: 20260611: Added by Front-Desk (rouca)
+ NOTE: 20260701: remaining bullseye CVEs addressed in DLA-4661-1 (ah)
+ NOTE: 20260701: will do a separate DLA for bookworm for the combination of last 2 DLAs for bullseye (ah)
--
kamailio/bullseye
NOTE: 20260413: Added by Front-Desk (rouca)
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/08760da1b1d3c3586e8e92f66f13524bb2f303a9
--
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/08760da1b1d3c3586e8e92f66f13524bb2f303a9
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260701/a9be4d0e/attachment-0001.htm>
More information about the debian-security-tracker-commits
mailing list