data/CVE/list

@@ -3524,6 +3524,8 @@ CVE-2019-11038 [Uninitialized read in gdImageCreateFromXbm]
 	- php7.0 <removed> (unimportant)
 	- php5 <removed> (unimportant)
 	NOTE: Fixed in 7.1.30, 7.2.19, 7.3.6
+	NOTE: PHP Bug: https://bugs.php.net/bug.php?id=77973
+	NOTE: https://github.com/libgd/libgd/issues/501
 CVE-2019-11037 (In PHP imagick extension in versions between 3.3.0 and 3.4.4, writing  ...)
 	- php-imagick <unfixed> (bug #928420)
 	[jessie] - php-imagick <not-affected> (vulnerable code is not present)