data/CVE/list

@@ -21452,6 +21452,7 @@ CVE-2019-17570 [untrusted deserialization]
 	RESERVED
 	- libxmlrpc3-java <unfixed> (bug #949089)
 	NOTE: https://www.openwall.com/lists/oss-security/2020/01/16/1
+	NOTE: Proposed patch: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-17570
 CVE-2019-17569
 	RESERVED
 CVE-2019-17568

data/dla-needed.txt

@@ -61,6 +61,8 @@ libmatio (Adrian Bunk)
   NOTE: 20190428: older changes seem to also be required for them
   NOTE: 20200112: work is ongoing
 --
+libxmlrpc3-java (Markus Koschany)
+--
 linux (Ben Hutchings)
 --
 linux-4.9 (Ben Hutchings)