data/CVE/list

@@ -85087,6 +85087,16 @@ CVE-2018-1000183 (A exposure of sensitive information vulnerability exists in Je
 	NOT-FOR-US: Jenkins plugin
 CVE-2018-1000182 (A server-side request forgery vulnerability exists in Jenkins Git Plug ...)
 	NOT-FOR-US: Jenkins plugin
+CVE-2019-19920
+	- sa-exim <unfixed> (bug #947198)
+	[buster] - sa-exim <no-dsa> (Minor issue; can be fixed via point release)
+	[stretch] - sa-exim <no-dsa> (Minor issue; can be fixed via point release)
+	NOTE: https://bugs.debian.org/946829#24
+	NOTE: https://marc.info/?l=spamassassin-users&m=157668107325768&w=2
+	NOTE: https://marc.info/?l=spamassassin-users&m=157668305026635&w=2
+	NOTE: The issue is "effectively" mitigating due to the CVE-2018-11805 fix in
+	NOTE: spamassassin, making the Greylisting.pm non-functional (and so a functional
+	NOTE: regression as well as tracked in #946829)
 CVE-2018-11805 (In Apache SpamAssassin before 3.4.3, nefarious CF files can be configu ...)
 	{DSA-4584-1 DLA-2037-1}
 	- spamassassin 3.4.3~rc6-1 (bug #946652)