data/dla-needed.txt

@@ -64,6 +64,9 @@ libvorbis (Guido Günther)
   NOTE: Underlying reason for CVE-2017-14160 yet unclear, no upstream feedback on this issue.
   NOTE: Fixes for other CVEs applied upstream and in sid.
 --
+libvpx
+  NOTE: 20180220: Second hunk of upstream patch will not cleanly appli. (lamby)
+--
 linux
 --
 ming (Hugo Lefeuvre)