Mark fixing versions for CVE-2017-1078{8,9}