data/CVE/list

@@ -44295,6 +44295,7 @@ CVE-2017-9272 (The Bi-directional driver in IDM 4.5 before 4.0.3.0 could be ...)
 	NOT-FOR-US: IDM
 CVE-2017-9271 (The commandline package update tool zypper writes HTTP proxy ...)
 	- zypper <unfixed> (low)
+	[jessie] - zypper <ignored> (Minor issue)
 	NOTE: https://bugzilla.suse.com/show_bug.cgi?id=1050625
 CVE-2017-9270 (In cryptctl before version 2.0 a malicious server could send RPC ...)
 	NOT-FOR-US: SuSE cryptctl
@@ -57894,6 +57895,7 @@ CVE-2017-5189 (NetIQ iManager before 3.0.3 delivered a SSL private key in a Java
 	NOT-FOR-US: NetIQ iManager
 CVE-2017-5188 (The bs_worker code in open build service before 20170320 followed ...)
 	- open-build-service <unfixed> (low)
+	[stretch] - open-build-service <no-dsa> (Minor issue)
 CVE-2017-5187 (A Cross-Site Request Forgery (CWE-352) vulnerability in Directory ...)
 	NOT-FOR-US: Micro Focus
 CVE-2017-5186 (Novell iManager 2.7 before SP7 Patch 9, NetIQ iManager 3.x before ...)

data/dsa-needed.txt

@@ -57,6 +57,12 @@ openjpeg2 (luciano)
 --
 passenger/stable
 --
+php5/oldstable
+  wait for 5.6.34 release
+--
+php7.0/stable
+  wait for 7.0.28 release 
+--
 php-horde-image
 --
 phpmyadmin/oldstable