data/CVE/list

@@ -387,6 +387,7 @@ CVE-2019-17135
 CVE-2019-17134 [agent doesn't check for client certificate]
 	RESERVED
 	- octavia 4.0.0-6 (bug #941897)
+	[buster] - octavia <no-dsa> (Minor issue in regular setups, can be fixed via point release)
 CVE-2019-17132 (vBulletin through 5.5.4 mishandles custom avatars. ...)
 	NOT-FOR-US: vBulletin
 CVE-2019-17131 (vBulletin before 5.5.4 allows clickjacking. ...)

data/next-point-update.txt

@@ -38,3 +38,5 @@ CVE-2019-10747
 	[buster] - node-set-value 0.4.0-1+deb10u1
 CVE-2019-5448
 	[buster] - node-yarnpkg 1.13.0-1+deb10u1
+CVE-2019-17134
+	[buster] - octavia 3.0.0-3+deb10u1