data/CVE/list

@@ -19728,6 +19728,7 @@ CVE-2018-1297 (When using Distributed Test only (RMI based), Apache JMeter 2.x a
 	- jakarta-jmeter <unfixed> (low)
 	[stretch] - jakarta-jmeter <no-dsa> (Minor issue)
 	[jessie] - jakarta-jmeter <no-dsa> (Minor issue)
+	[wheezy] - jakarta-jmeter <no-dsa> (Minor issue)
 	NOTE: http://www.openwall.com/lists/oss-security/2018/02/11/1
 	NOTE: https://bz.apache.org/bugzilla/show_bug.cgi?id=62039
 CVE-2018-1296
@@ -19755,6 +19756,7 @@ CVE-2018-1287 (In Apache JMeter 2.X and 3.X, when using Distributed Test only (R
 	- jakarta-jmeter <unfixed> (low)
 	[stretch] - jakarta-jmeter <no-dsa> (Minor issue)
 	[jessie] - jakarta-jmeter <no-dsa> (Minor issue)
+	[wheezy] - jakarta-jmeter <no-dsa> (Minor issue)
 	NOTE: http://www.openwall.com/lists/oss-security/2018/02/11/2
 	NOTE: https://bz.apache.org/bugzilla/show_bug.cgi?id=62039
 CVE-2018-1286 (In Apache OpenMeetings 3.0.0 - 4.0.1, CRUD operations on privileged ...)

data/dla-needed.txt

@@ -72,6 +72,8 @@ libvorbis (Guido Günther)
 --
 linux
 --
+mercurial
+--
 ming (Hugo Lefeuvre)
   NOTE: 20180311: wip, currently working on it with upstream, might take a while
 --

data/packages/lts-do-not-call

@@ -18,6 +18,7 @@ jbig2dec https://lists.debian.org/debian-lts/2017/04/msg00101.html
 libarchive https://lists.debian.org/debian-lts/2017/04/msg00015.html
 libgcrypt11 removed from Jessie, latest uploads only made by the security teams
 libtomcrypt https://lists.debian.org/debian-lts/2016/09/msg00044.html
+mercurial https://lists.debian.org/debian-lts/2017/12/msg00058.html
 nspr https://lists.debian.org/debian-lts/2016/09/msg00192.html
 nss https://lists.debian.org/debian-lts/2016/09/msg00192.html
 opencv no answer to https://lists.debian.org/debian-lts/2017/09/msg00028.html, all LTS uploads by LTS team