From 34a9864a6b7d0db0449828d7c9cb9f2ab1cf4cf2 Mon Sep 17 00:00:00 2001
From: Salvatore Bonaccorso <carnil@debian.org>
Date: Wed, 29 Jan 2020 22:06:18 +0100
Subject: Add CVE-2019-20421/exiv2

---
 data/CVE/list | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'data/CVE/list')

diff --git a/data/CVE/list b/data/CVE/list
index ab623fece9..ad828b065c 100644
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -960,7 +960,9 @@ CVE-2019-20422 (In the Linux kernel before 5.3.4, fib6_rule_lookup in net/ipv6/i
 	- linux <not-affected> (Vulnerable code not present)
 	NOTE: https://git.kernel.org/linus/7b09c2d052db4b4ad0b27b97918b46a7746966fa
 CVE-2019-20421 (In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2, an input  ...)
-	TODO: check
+	- exiv2 <unfixed>
+	NOTE: https://github.com/Exiv2/exiv2/commit/a82098f4f90cd86297131b5663c3dec6a34470e8
+	NOTE: https://github.com/Exiv2/exiv2/issues/1011
 CVE-2020-7982
 	RESERVED
 CVE-2020-7981 (sql.rb in Geocoder before 1.6.1 allows Boolean-based SQL injection whe ...)
-- 
cgit v1.2.3