data/CVE/list

@@ -790,6 +790,7 @@ CVE-2018-20807 (An XSS issue has been found in welcome.cgi in Pulse Secure Pulse
 CVE-2018-20806 (Phamm (aka PHP LDAP Virtual Hosting Manager) 0.6.8 allows XSS via the  ...)
 	- phamm <unfixed> (low; bug #924731)
 	[stretch] - phamm <no-dsa> (Minor issue)
+	[jessie] - phamm <no-dsa> (Minor issue)
 	NOTE: https://github.com/lota/phamm/issues/24
 CVE-2019-9839
 	RESERVED
@@ -1053,6 +1054,7 @@ CVE-2019-9755
 CVE-2019-9754 (An issue was discovered in Tiny C Compiler (aka TinyCC or TCC) 0.9.27. ...)
 	- tcc <unfixed> (low; bug #925127)
 	[stretch] - tcc <no-dsa> (Minor issue)
+	[jessie] - tcc <no-dsa> (Minor issue)
 	NOTE: https://lists.nongnu.org/archive/html/tinycc-devel/2019-03/msg00038.html
 CVE-2019-9753
 	RESERVED
@@ -1235,6 +1237,7 @@ CVE-2019-9688 (sftnow through 2018-12-29 allows index.php?g=Admin&amp;m=User&amp
 CVE-2019-9687 (PoDoFo 0.9.6 has a heap-based buffer overflow in PdfString::ConvertUTF ...)
 	- libpodofo <unfixed> (bug #924430)
 	[stretch] - libpodofo <no-dsa> (Minor issue)
+	[jessie] - libpodofo <no-dsa> (Minor issue)
 	NOTE: https://sourceforge.net/p/podofo/code/1969
 CVE-2019-9686 (pacman before 5.1.3 allows directory traversal when installing a remot ...)
 	NOT-FOR-US: pacman package manager for arch, different from src:pacman
@@ -2538,6 +2541,7 @@ CVE-2009-5155 (In the GNU C Library (aka glibc or libc6) before 2.28, parse_reg_
 	[experimental] - gnulib 20180621~6979c25-1
 	- gnulib 20140202+stable-3.2 (bug #924613)
 	[stretch] - gnulib <no-dsa> (Minor issue)
+	[jessie] - gnulib <no-dsa> (Minor issue)
 	- glibc 2.28-1
 	[stretch] - glibc <no-dsa> (Minor issue)
 	[jessie] - glibc <no-dsa> (Minor issue)
@@ -45141,6 +45145,7 @@ CVE-2018-12181 [Stack buffer overflow with corrupted BMP]
 	RESERVED
 	- edk2 0~20181115.85588389-3 (bug #924615)
 	[stretch] - edk2 <no-dsa> (Minor issue, will be fixed via point update)
+	[jessie] - edk2 <end-of-life> (non-free is not supported)
 	NOTE: https://lists.01.org/pipermail/edk2-devel/2019-March/037626.html
 CVE-2018-12180 [Buffer Overflow in BlockIo service for RAM disk]
 	RESERVED

data/dla-needed.txt

@@ -64,6 +64,8 @@ libraw (Thorsten Alteholz)
 libsolv
   NOTE: 20190127: maintainer is Mike Gabriel
 --
+libssh2
+--
 linux (Ben Hutchings)
 --
 linux-4.9 (Ben Hutchings)
@@ -77,6 +79,8 @@ openssh (Mike Gabriel)
   NOTE: 20190228: CVE-2019-6111 seemingly not-yet-fixed, see https://bugs.debian.org/923486
   NOTE: 20190228: Package draft for jessie LTS locally, but the CVE-2019-6111 patch requires being fixed first before proceeding
 --
+pdns
+--
 php5 (Thorsten Alteholz)
   NOTE: 20190317: new CVEs appeared
 --