data/dla-needed.txt

@@ -62,6 +62,12 @@ libmatio (Adrian Bunk)
   NOTE: 20190428: older changes seem to also be required for them
   NOTE: 20190609: work is ongoing
 --
+libqb
+  NOTE: 20190616: Upstream patch does not apply at all, but it appears that
+  NOTE: 20190616: package is still vulnerable in ipc_posix_mq.c etc. or
+  NOTE: 20190616: wherever it uses c->pid w/NAME_MAX. (lamby)
+  NOTE: 20190619: See https://lists.debian.org/debian-lts/2019/06/msg00015.html
+--
 libsdl1.2
   NOTE: see libsdl2 entry.
 --
@@ -77,12 +83,6 @@ libspring-java (Roberto C. Sánchez)
   NOTE: 20190527: with patches available
   NOTE: 20190607: Integrated patches for approximately 50% of open CVEs. (roberto)
 --
-libqb
-  NOTE: 20190616: Upstream patch does not apply at all, but it appears that
-  NOTE: 20190616: package is still vulnerable in ipc_posix_mq.c etc. or
-  NOTE: 20190616: wherever it uses c->pid w/NAME_MAX. (lamby)
-  NOTE: 20190619: See https://lists.debian.org/debian-lts/2019/06/msg00015.html
---
 linux (Ben Hutchings)
 --
 linux-4.9 (Ben Hutchings)
@@ -107,7 +107,7 @@ qemu
 --
 rdesktop
 --
-ruby-openid
+ruby-openid (Chris Lamb)
 --
 sdl-image1.2
   NOTE: see libsdl2 entry.