data/CVE/list

@@ -13167,6 +13167,9 @@ CVE-2018-0487
 	RESERVED
 CVE-2018-0486
 	RESERVED
+	- xmltooling <unfixed>
+	[stretch] - xmltooling <not-affected> (Xerces is configured to disallow DTD use)
+	NOTE: https://shibboleth.net/community/advisories/secadv_20180112.txt
 CVE-2017-17026
 	RESERVED
 CVE-2017-17025

data/DSA/list

+[12 Jan 2018] DSA-4085-1 xmltooling - security update
+	{CVE-2018-0486}
+	[jessie] - xmltooling 1.5.3-2+deb8u2
 [12 Jan 2018] DSA-4084-1 gifsicle - security update
 	{CVE-2017-1000421}
 	[jessie] - gifsicle 1.86-1+deb8u1