data/CVE/list

@@ -95546,9 +95546,10 @@ CVE-2017-11610 (The XML-RPC server in supervisor before 3.0.1, 3.1.x before 3.1.
 CVE-2017-11609
 	RESERVED
 CVE-2017-11608 (There is a heap-based buffer over-read in the ...)
-	- libsass <unfixed> (bug #870186)
+	- libsass 3.4.6-1 (bug #870186)
 	[stretch] - libsass <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1474276
+	NOTE: https://github.com/sass/libsass/commit/648f763ede97f9a2c2c843a0a18ac18bbde3507b (3.4.6)
 CVE-2017-11607
 	RESERVED
 CVE-2017-11606