data/DLA/list

+[27 Jan 2020] DLA-2078-1 libxmlrpc3-java - security update
+	{CVE-2019-17570}
+	[jessie] - libxmlrpc3-java 3.1.3-7+deb8u1
 [27 Jan 2020] DLA-2077-1 tomcat7 - security update
 	{CVE-2019-12418 CVE-2019-17563}
 	[jessie] - tomcat7 7.0.56-3+really7.0.99-1

data/dla-needed.txt

@@ -67,13 +67,13 @@ libmatio (Adrian Bunk)
 libsolv
   NOTE: 20200123: Mike is maintainer
 --
-libxmlrpc3-java (Markus Koschany)
---
 linux (Ben Hutchings)
 --
 linux-4.9 (Ben Hutchings)
 --
 nss (Markus Koschany)
+  NOTE: 20200127: Fix for CVE-2019-17023 requires more work and testing but
+  NOTE: release is planned for this week.
 --
 opendmarc (Thorsten Alteholz)
   NOTE: 20200119: still testing package, original patch does not seem to be enough, still ongoing