data/CVE/list

@@ -4965,12 +4965,14 @@ CVE-2018-20679 (An issue was discovered in BusyBox before 1.30.0. An out of boun
 CVE-2018-20678
 	RESERVED
 CVE-2019-5736 (runc through 1.0-rc6, as used in Docker before 18.09.2 and other ...)
-	- runc <unfixed> (bug #922050)
+	- flatpak 1.2.3-1 (bug #922059)
 	- lxc <unfixed> (unimportant)
+	- runc <unfixed> (bug #922050)
 	NOTE: https://www.openwall.com/lists/oss-security/2019/02/11/2
 	NOTE: runc: Fixed by: https://github.com/opencontainers/runc/commit/0a8e4117e7f715d5fbeef398405813ce8e88558b
-	NOTE: lxc: Fixed by https://github.com/lxc/lxc/commit/6400238d08cdf1ca20d49bafb85f4e224348bf9d
+	NOTE: lxc: Fixed by: https://github.com/lxc/lxc/commit/6400238d08cdf1ca20d49bafb85f4e224348bf9d
 	NOTE: Not considered a security issue by LXC upstream
+	TODO: flatpak (and lxc) probably would need a separate CVE as the issue is similar but they do not share respective code.
 CVE-2019-5735
 	RESERVED
 CVE-2019-5734