data/CVE/list

@@ -4403,15 +4403,19 @@ CVE-2019-9088
 CVE-2019-9087
 	RESERVED
 	- hoteldruid 2.3.2-1
+	[jessie] - hoteldruid <no-dsa> (low popcon, not used by any sponsor)
 CVE-2019-9086
 	RESERVED
 	- hoteldruid 2.3.2-1
+	[jessie] - hoteldruid <no-dsa> (low popcon, not used by any sponsor)
 CVE-2019-9085
 	RESERVED
 	- hoteldruid 2.3.2-1
+	[jessie] - hoteldruid <no-dsa> (low popcon, not used by any sponsor)
 CVE-2019-9084
 	RESERVED
 	- hoteldruid 2.3.2-1
+	[jessie] - hoteldruid <no-dsa> (low popcon, not used by any sponsor)
 CVE-2019-9083 (SQLiteManager 1.20 and 1.24 allows SQL injection via the /sqlitemanage ...)
 	NOT-FOR-US: SQLiteManager
 CVE-2018-20795 (tecrail Responsive FileManager 9.13.4 allows remote attackers to read  ...)

data/dla-needed.txt

@@ -46,6 +46,10 @@ imagemagick (Roberto C. Sánchez)
 --
 jruby (Abhijith PA)
 --
+libclamunrar
+  NOTE: 20190331: Package is non-free and not used by sponsors but maybe it can be fixed
+  NOTE: nonetheless together with clamav? (apo)
+--
 libdatetime-timezone-perl (Emilio)
 --
 liblivemedia