data/CVE/list

@@ -3447,6 +3447,8 @@ CVE-2019-15925 (An issue was discovered in the Linux kernel before 5.2.3. An out
 	NOTE: https://git.kernel.org/linus/04f25edb48c441fc278ecc154c270f16966cbb90
 CVE-2018-21010 (OpenJPEG before 2.3.1 has a heap buffer overflow in color_apply_icc_pr ...)
 	- openjpeg2 <unfixed> (bug #939553)
+	[buster] - openjpeg2 <no-dsa> (Minor issue)
+	[stretch] - openjpeg2 <no-dsa> (Minor issue)
 	NOTE: https://github.com/uclouvain/openjpeg/commit/2e5ab1d9987831c981ff05862e8ccf1381ed58ea
 CVE-2018-21009 (Poppler before 0.66.0 has an integer overflow in Parser::makeStream in ...)
 	{DLA-1939-1}

data/dla-needed.txt

@@ -13,7 +13,7 @@ https://wiki.debian.org/LTS/Development#Triage_new_security_issues
 ampache (Roberto C. Sánchez)
   NOTE: package only in Jessie
 --
-cacti
+cacti (Hugo Lefeuvre)
 --
 clamav (Hugo Lefeuvre)
   NOTE: 20191002: we are backporting 0.101.4+dfsg-0+deb9u1 to jessie, meaning