From 42ac03991c2a555dfd127cd6d7f28c1752ff8425 Mon Sep 17 00:00:00 2001
From: Salvatore Bonaccorso <carnil@debian.org>
Date: Thu, 23 Jun 2022 08:36:40 +0200
Subject: Add CVE-2022-33067/lrzip

---
 data/CVE/list | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/data/CVE/list b/data/CVE/list
index d64777093a..54ca4245f2 100644
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -2975,7 +2975,8 @@ CVE-2022-33068 (An integer overflow in the component hb-ot-shape-fallback.cc of
 	NOTE: https://github.com/harfbuzz/harfbuzz/issues/3557
 	NOTE: https://github.com/harfbuzz/harfbuzz/commit/62e803b36173fd096d7ad460dd1d1db9be542593
 CVE-2022-33067 (Lrzip v0.651 was discovered to contain multiple invalid arithmetic shi ...)
-	TODO: check
+	- lrzip <unfixed>
+	NOTE: https://github.com/ckolivas/lrzip/issues/224
 CVE-2022-33066
 	RESERVED
 CVE-2022-33065
-- 
cgit v1.2.3