data/CVE/list

@@ -15811,7 +15811,8 @@ CVE-2019-1010084 (Dancer::Plugin::SimpleCRUD 1.14 and earlier is affected by: In
 	NOT-FOR-US: Dancer::Plugin::SimpleCRUD
 CVE-2019-1010083 (The Pallets Project Flask before 1.0 is affected by: unexpected memory ...)
 	- flask 1.0.2-1
-	TODO: check fixing commit(s)
+	NOTE: https://www.palletsprojects.com/blog/flask-1-0-released/
+	NOTE: https://github.com/pallets/flask/pull/2691/commits/ab4142215d836b0298fc47fa1e4b75408b9c37a0
 CVE-2019-1010082
 	RESERVED
 CVE-2019-1010081

data/dla-needed.txt

@@ -24,6 +24,8 @@ faad2 (Hugo Lefeuvre)
   NOTE: merged at some point. see https://github.com/knik0/faad2/pull/36
   NOTE: working on more patches (hle)
 --
+flask
+--
 freeimage
   NOTE: Maintainer will take care of the update.
   NOTE: https://lists.debian.org/debian-lts/2019/05/msg00079.html