data/CVE/list

@@ -60,6 +60,7 @@ CVE-2018-19761 (There is an illegal address access at fromsixel.c (function: ...
 CVE-2018-19760 (cfg_init in confuse.c in libConfuse 3.2.2 has a memory leak. ...)
 	- confuse <unfixed> (low)
 	[stretch] - confuse <no-dsa> (Minor issue)
+	[jessie] - confuse <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1649152
 CVE-2018-19759 (There is a heap-based buffer over-read at stb_image_write.h (function: ...)
 	TODO: check

data/dla-needed.txt

@@ -16,6 +16,14 @@ cairo
 enigmail
   NOTE: 20181113: depends on gnupg2 updates, see 87r2fqnja0.fsf@curie.anarc.at (anarcat)
 --
+exiv2 (Thorsten Alteholz)
+  NOTE: also recheck other CVEs
+--
+freerdp
+  NOTE: 20181202: Mike is uploader, so he should probably take this
+--
+jasper
+--
 libapache-mod-jk (Roberto C. Sánchez)
   NOTE: 20181123: Packages ready, testing complete, waiting on security team feedback,
   NOTE: 20181123: as this work includes an updated package for stretch.  (roberto)