data/CVE/list

@@ -2269,9 +2269,12 @@ CVE-2018-19872
 CVE-2018-19871 [QImage: QTgaFile CPU exhaustion]
 	RESERVED
 	- qtimageformats-opensource-src <unfixed>
+	[jessie] - qtimageformats-opensource-src <postponed> (Minor issue)
+	- qt4-x11 <unfixed>
+	[jessie] - qt4-x11 <postponed> (Minor issue)
 	NOTE: https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
 	NOTE: https://codereview.qt-project.org/#/c/237761/
-	TODO: check for completeness, possibly as well qt4-x11
+	NOTE: qt4-x11 affected in src/plugins/imageformats/tga/qtgafile.cpp
 CVE-2018-19870 [Check for QImage allocation failure in qgifhandler]
 	RESERVED
 	[experimental] - qtbase-opensource-src 5.11.3+dfsg-1
@@ -2283,6 +2286,7 @@ CVE-2018-19869 [Fix crash when parsing malformed url reference]
 	RESERVED
 	- qtsvg-opensource-src <unfixed> (low)
 	[stretch] - qtsvg-opensource-src <no-dsa> (Minor issue)
+	[jessie] - qtsvg-opensource-src <no-dsa> (Minor issue)
 	NOTE: https://blog.qt.io/blog/2018/12/04/qt-5-11-3-released-important-security-updates/
 	NOTE: https://codereview.qt-project.org/#/c/234142/
 	TODO: check for completeness, possibly as well qt4-x11

data/dla-needed.txt

@@ -110,9 +110,6 @@ policykit-1 (Santiago)
 --
 qemu
 --
-qtsvg-opensource-src
-  NOTE: 20181210: Needs more investigation around related packages/upstream etc. (lamby)
---
 samba (Emilio Pozuelo)
   NOTE: 20181203: regression in upstream fix, waiting for confirmed regression fix
 --