[vlc-commits] Update NEWS

[Jean-Baptiste Kempf]

vlc/vlc-2.2 | branch: master | Jean-Baptiste Kempf <jb at videolan.org> | Thu Nov 16 18:21:39 2017 +0100| [6e32381286e2f8322e77861bf3e2aed46801b7a9] | committer: Jean-Baptiste Kempf

Update NEWS

> http://git.videolan.org/gitweb.cgi/vlc/vlc-2.2.git/?a=commit;h=6e32381286e2f8322e77861bf3e2aed46801b7a9
---

 NEWS | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/NEWS b/NEWS
index 39c751fbf4..3060a52eae 100644
--- a/NEWS
+++ b/NEWS
@@ -3,7 +3,8 @@ Changes between 2.2.6 and 2.2.7:
 
 Decoders:
  * Fix flac heap write overflow on format change
- * Fix crash in libavcodec module (heap write out-of band) CVE-10699
+ * Fix crash in libavcodec module (heap write out-of band) (CVE-2017-10699)
+ * Fix AVI read/write overflow
  * Fix infinite loop in sami subtitle
  * Fix AAC 7.1 channels detection
  * Fix potential crash in ASX parser
@@ -32,7 +33,7 @@ Video output:
  * Fix direct3d SPU texture offsets handling
 
 Demuxer:
- * Fix heap buffer overflows
+ * Fix heap buffer overflows (CVE-2017-8310, 8311, 8312, 8313)
 
 Changes between 2.2.5 and 2.2.5.1:
 ----------------------------------