More NEWS.

NEWS

@@ -5,12 +5,15 @@ Changes between 0.8.6d and 0.8.6e (not yet released):
 
 Various bugfixes:
  * Resume playback for viewing content over FTP
+ * Fix XShm detection with remote X11
 
 Security updates:
  * Subtitle demuxers overflow (CVE-2007-6681)
  * HTTP listener format string injection (CVE-2007-6682)
  * Fixed buffer overflow in the SDL_image library (CVE-2006-4484)
- * Real RTSP overflows (CVE-2008-0295, CVE-2008-0296)
+ * Real RTSP overflows (CVE-2008-0295, CVE-2008-0296, VideoLAN-SA-0801)
+ * Arbitrary memory overwrite in the MP4 demuxer (CORE-2008-0130, VideoLAN-SA-0803)
+ * FLAC issues (CVE-2007-4619)
  --- FIXME: THE FOLLOWING ISSUES HAVE NOT BEEN FIXED YET ---
  * Mozilla and ActiveX plugins (VideoLAN-0802, CVE-2007-6683)
 
@@ -20,6 +23,9 @@ Audio filter:
 Audio output:
  * Fixed 5.1 audio on ALSA
 
+Access:
+ * Fix some RTSP hanging and user/password passing through RTSP URLs
+
 Stream output:
  * Fixed waiting for SPS/PPS problem in H.264 packetizer