Update information for CVE-2019-2974 with newly upstream one

The CVE was almost sure previously listed in the respective earlier
versions, but that disparered now and instead the CVE is listed in the
10.3.19 and 10.1.42 release note pages.

Sync that up with upstream information.