data/CVE/list

@@ -503,6 +503,7 @@ CVE-2018-18444 (makeMultiView.cpp in exrmultiview in OpenEXR 2.3.0 has an out-of
 CVE-2018-18443 (OpenEXR 2.3.0 has a memory leak in ThreadPool in ...)
 	- openexr <unfixed>
 	[stretch] - openexr <no-dsa> (Minor issue)
+	[jessie] - openexr <no-dsa> (Minor issue)
 	NOTE: https://github.com/openexr/openexr/issues/350
 CVE-2018-18442
 	RESERVED

data/dla-needed.txt

@@ -78,6 +78,8 @@ poppler (Mike Gabriel)
   NOTE: 20180928: Consider fixing no-dsa/ignored bugs as well since this is
   NOTE: 20180928: frequently used package.
 --
+qemu
+--
 salt (Antoine Beaupre)
   NOTE: 20180921: CVE-2017-7893 is not crucial since the managed system must be
   NOTE: 20180921: compromised first. But the security escalation effect can cause