Update information on CVE-2018-1000773 and CVE-2017-1000600

According to the available information CVE-2017-1000600 has been fixed
(but without upstream details) in 4.9. As such we mark the first version
in unstable in the 4.9 series as fixed.