data/CVE/list

@@ -17770,7 +17770,7 @@ CVE-2017-14591 (Atlassian Fisheye and Crucible versions less than 4.4.3 and vers
 CVE-2017-14590 (Bamboo did not check that the name of a branch in a Mercurial ...)
 	NOT-FOR-US: Atlassian Bamboo
 CVE-2017-14589 (It was possible for double OGNL evaluation in FreeMarker templates ...)
-	TODO: check
+	NOT-FOR-US: Atlassian Bamboo
 CVE-2017-14588 (Various resources in Atlassian FishEye and Crucible before version ...)
 	NOT-FOR-US: Atlassian
 CVE-2017-14587 (The administration user deletion resource in Atlassian FishEye and ...)
@@ -19444,6 +19444,8 @@ CVE-2017-14051 (An integer overflow in the qla2x00_sysfs_write_optrom_ctl functi
 	NOTE: https://patchwork.kernel.org/patch/9929625/
 	NOTE: Non issue, only "exploitable" with root access
 CVE-2017-14034 (The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used ...)
+	- ffmpeg <unfixed>
+	- x265 <unfixed>
 	TODO: check
 CVE-2017-14033 (The decode method in the OpenSSL::ASN1 module in Ruby before 2.2.8, ...)
 	{DSA-4031-1 DLA-1114-1}