[Git][security-tracker-team/security-tracker][master] Reserve DLA-4661-1 for jq/bullseye

Andreas Henriksson (@ah) gitlab at salsa.debian.org
Wed Jul 1 14:58:34 BST 2026



Andreas Henriksson pushed to branch master at Debian Security Tracker / security-tracker


Commits:
08760da1 by Andreas Henriksson at 2026-07-01T15:58:24+02:00
Reserve DLA-4661-1 for jq/bullseye

- - - - -


2 changed files:

- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[01 Jul 2026] DLA-4661-1 jq - security update
+	{CVE-2026-43894 CVE-2026-47770 CVE-2026-49839 CVE-2026-54679}
+	[bullseye] - jq 1.6-2.1+deb11u3
 [30 Jun 2026] DLA-4660-1 nginx - security update
 	{CVE-2026-42055 CVE-2026-48142}
 	[bullseye] - nginx 1.18.0-6.1+deb11u8


=====================================
data/dla-needed.txt
=====================================
@@ -268,8 +268,10 @@ jpeg-xl/bookworm
   NOTE: 20260619: Added by Front-Desk (charles)
   NOTE: 20260619: Follow DSA-6342-1 (charles)
 --
-jq (ah)
+jq/bookworm (ah)
   NOTE: 20260611: Added by Front-Desk (rouca)
+  NOTE: 20260701: remaining bullseye CVEs addressed in DLA-4661-1 (ah)
+  NOTE: 20260701: will do a separate DLA for bookworm for the combination of last 2 DLAs for bullseye (ah)
 --
 kamailio/bullseye
   NOTE: 20260413: Added by Front-Desk (rouca)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/08760da1b1d3c3586e8e92f66f13524bb2f303a9

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/08760da1b1d3c3586e8e92f66f13524bb2f303a9
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260701/a9be4d0e/attachment-0001.htm>


More information about the debian-security-tracker-commits mailing list