diff --git a/sysstat/TODO b/sysstat/TODO
index 7d436161f7..93b0f2a8d8 100644
--- a/sysstat/TODO
+++ b/sysstat/TODO
@@ -9,4 +9,5 @@ is USE_PKGLOCALEDIR required?
 make this platform specific
 
 - This package has known vulnerabilities, please investigate and fix if possible:
-  CVE-2007-3852, CVE-2018-19416, CVE-2018-19517, CVE-2019-16167
+  CVE-2007-3852, CVE-2018-19416, CVE-2018-19517, CVE-2019-16167,
+  CVE-2019-19725