data/CVE/list

@@ -21019,7 +21019,7 @@ CVE-2018-19878
 CVE-2018-19877 (login.php in Adiscon LogAnalyzer before 4.1.7 has XSS via the Login ...)
 	NOT-FOR-US: Adiscon LogAnalyzer
 CVE-2018-19876 (cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would ...)
-	- cairo <unfixed> (bug #915801)
+	- cairo <unfixed> (bug #915801; bug #916389)
 	[stretch] - cairo <not-affected> (Vulnerable code introduced later)
 	[jessie] - cairo <not-affected> (Vulnerable code introduced later)
 	NOTE: https://bugs.webkit.org/show_bug.cgi?id=191595