On Wed, Nov 07, 2018 at 04:59:05PM +1100, Brian May wrote: > I see libdatetime-timezone-perl is in dla-needed.txt, but I can't see > *any* security vulnerabilies in > https://security-tracker.debian.org/tracker/source-package/libdatetime-timezone-perl
There's no security issue in libdatetime-timezone-perl, but it embeds a copy of tzdata and gets updated similar to the SUA updates for stable. Cheers, Moritz