data/dla-needed.txt

@@ -50,6 +50,8 @@ ghostscript (Lucas Kanashiro)
 gnutls28
 --
 graphicsmagick (Hugo Lefeuvre)
+  NOTE: 20181226: CVE-2018-20184: looks like fix involves some refactoring. not sure it's worth it unless i can come with a trimmed down version of it
+  NOTE: CVE-2018-20185, CVE-2018-20189: fix trivial, easy to test, should be worth it.
 --
 jasper (Markus Koschany)
 --
@@ -79,8 +81,8 @@ libraw (Abhijith PA)
   NOTE: the stack-based and heap-based overflow issues. (apo)
 --
 libsndfile (Hugo Lefeuvre)
-  NOTE: 20181224: CVE-2017-17456 and similar: my patch was approved, will be uploaded soon
-  NOTE: 20181219: CVE-2017-17457/6: asked for cve update as duplicates of CVE-2017-14245/CVE-2017-14246
+  NOTE: 20181226: CVE-2018-19758: currently checking
+  NOTE: 20181226: CVE-2017-17457/6: asked for cve update as duplicates of CVE-2017-14245/CVE-2017-14246, no answer yet
 --
 linux (Ben Hutchings)
 --