From ccd06ca4d3cea9eb1845372d583b5c062421a97a Mon Sep 17 00:00:00 2001
From: Salvatore Bonaccorso <carnil@debian.org>
Date: Wed, 29 Jan 2020 22:06:18 +0100
Subject: Add CVE-2019-20421/exiv2

---
 data/CVE/2019.list | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/data/CVE/2019.list b/data/CVE/2019.list
index b058d41025..0af18df7b4 100644
--- a/data/CVE/2019.list
+++ b/data/CVE/2019.list
@@ -50,7 +50,9 @@ CVE-2019-20422 (In the Linux kernel before 5.3.4, fib6_rule_lookup in net/ipv6/i
 	- linux <not-affected> (Vulnerable code not present)
 	NOTE: https://git.kernel.org/linus/7b09c2d052db4b4ad0b27b97918b46a7746966fa
 CVE-2019-20421 (In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input  ...)
-	TODO: check
+	- exiv2 <unfixed>
+	NOTE: https://github.com/Exiv2/exiv2/commit/a82098f4f90cd86297131b5663c3dec6a34470e8
+	NOTE: https://github.com/Exiv2/exiv2/issues/1011
 CVE-2019-20420
 	RESERVED
 CVE-2019-20419
-- 
cgit v1.2.3