data/CVE/list

@@ -6642,6 +6642,7 @@ CVE-2018-13819 (A hardcoded secret key, in CA Unified Infrastructure Management
 CVE-2018-13818 (Twig before 2.4.4 allows Server-Side Template Injection (SSTI) via the ...)
 	- twig 2.4.4-2
 	[stretch] - twig <no-dsa> (Minor issue)
+	[jessie] - twig <no-dsa> (Minor issue)
 	NOTE: Fixed upstream in 2.4.4
 CVE-2018-13817
 	RESERVED
@@ -7850,6 +7851,7 @@ CVE-2018-13260
 CVE-2018-13259 (An issue was discovered in zsh before 5.6. Shebang lines exceeding 64 ...)
 	- zsh 5.6-1 (bug #908000)
 	[stretch] - zsh <no-dsa> (Minor issue)
+	[jessie] - zsh <no-dsa> (Minor issue)
 	NOTE: https://www.zsh.org/mla/zsh-announce/136
 	NOTE: https://sourceforge.net/p/zsh/code/ci/1c4c7b6a4d17294df028322b70c53803a402233d
 CVE-2018-13258
@@ -44335,6 +44337,7 @@ CVE-2018-0503
 CVE-2018-0502 (An issue was discovered in zsh before 5.6. The beginning of a #! script ...)
 	- zsh 5.6-1 (bug #908000)
 	[stretch] - zsh <no-dsa> (Minor issue)
+	[jessie] - zsh <no-dsa> (Minor issue)
 	NOTE: https://www.zsh.org/mla/zsh-announce/136
 	NOTE: https://sourceforge.net/p/zsh/code/ci/1c4c7b6a4d17294df028322b70c53803a402233d
 CVE-2018-0501 (The mirror:// method implementation in Advanced Package Tool (APT) ...)

data/dla-needed.txt

@@ -14,6 +14,8 @@ https://wiki.debian.org/LTS/Development#Triage_new_security_issues
   NOTE: 20180901: No detailed information or a reproducer available at the
   NOTE: moment. Check. (apo)
 --
+curl (Chris Lamb)
+--
 discount (Markus Koschany)
 --
 enigmail