data/dla-needed.txt

@@ -52,7 +52,7 @@ imapfilter
 --
 jackson-databind (Markus Koschany)
 --
-libav
+libav (Mike Gabriel)
   NOTE: 20190831: There are currently 19 CVE issues known for libav in jessie,
   NOTE: 20190831: 11 tagged as <no-dsa>. These issues have been triaged, no patch
   NOTE: 20190831: has been found, so far. If you pick libav, be prepared to work
@@ -100,6 +100,9 @@ nfs-utils (Sylvain Beucler)
   NOTE: 20190930: asked plans to package maintainer
 --
 nghttp2 (Mike Gabriel)
+  NOTE: 20190930: nghttp2 in jessie is likely not affected by CVE-2019-95{11,13}.
+  NOTE: 20190930: waiting for feedback from Thorsten and Abhijith as they put
+  NOTE: 20190930: work into the pkg triaging, too. (sunweaver)
 --
 opendmarc (Thorsten Alteholz)
   NOTE: 20190929: testing package