From 42514206bc6dcfed6d33e6c528bcc62d02836eeb Mon Sep 17 00:00:00 2001
From: Moritz Muehlenhoff <jmm@debian.org>
Date: Mon, 4 Sep 2023 13:21:00 +0200
Subject: old, bogus xz-utils issue

---
 data/CVE/list | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'data')

diff --git a/data/CVE/list b/data/CVE/list
index ab76ca5bae..0a0826ce1b 100644
--- a/data/CVE/list
+++ b/data/CVE/list
@@ -219598,7 +219598,7 @@ CVE-2020-22918
 CVE-2020-22917
 	RESERVED
 CVE-2020-22916 (An issue discovered in XZ 5.2.5 allows attackers to cause a denial of  ...)
-	TODO: check
+	NOTE: Bogus CVE, original URL is gone and resource limits are a natural constraint for any unpacker
 CVE-2020-22915
 	RESERVED
 CVE-2020-22914
-- 
cgit v1.2.3