Add source package information for CVE-2018-383{7,8,9}