data/CVE/list

@@ -40994,6 +40994,7 @@ CVE-2017-17688 (** DISPUTED ** The OpenPGP specification allows a Cipher Feedbac
 	[stretch] - enigmail <ignored> (Package broken in stable, can be fixed along when updated for ESR60)
 	NOTE: vulnerability is in the clients handling, not in OpenPGP
 	NOTE: https://efail.de
+	NOTE: possibly https://sourceforge.net/p/enigmail/source/ci/f6c111 and https://sourceforge.net/p/enigmail/source/ci/d2a83a
 CVE-2017-17687
 	RESERVED
 CVE-2017-17686

data/dla-needed.txt

@@ -21,8 +21,7 @@ dnsmasq (Santiago)
   NOTE: 2010920: main reason for a DLA is to update dns trust anchors (Santiago)
 --
 enigmail
-  NOTE: 20180603: Commits between https://sourceforge.net/p/enigmail/source/ci/f6c111 (abhijith)
-  NOTE: 20180603: and https://sourceforge.net/p/enigmail/source/ci/d2a83a might be useful. (abhijith)
+  NOTE: 20180926: see 871s9fps8e.fsf@curie.anarc.at before working on this (anarcat)
 --
 exiv2 (Roberto C. Sánchez)
 --
@@ -86,5 +85,5 @@ symfony (Thorsten Alteholz)
 --
 thunderbird
 --
-xen
+xen (Antoine Beaupre)
 --