data/CVE/list

@@ -25,7 +25,7 @@ CVE-2018-20745 (Yii 2.x through 2.0.15.1 actively converts a wildcard CORS polic
 CVE-2018-20744 (The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a ...)
 	TODO: check
 CVE-2019-6978 (The GD Graphics Library (aka LibGD) 2.2.5 has a double free in the ...)
-	- libgd2 <unfixed>
+	- libgd2 <unfixed> (bug #920728)
 	NOTE: https://github.com/libgd/libgd/issues/492
 	NOTE: https://github.com/libgd/libgd/commit/553702980ae89c83f2d6e254d62cf82e204956d0
 CVE-2019-XXXX [DoS due to changing # of allowed users in root channel]