Add CVE-2017-18189 for DLA-1197-1

Reason: The cross reference to DLA's is build from data/DLA/list as
master reference. Adding only to data/CVE/list will invalidate the entry
on next automatic build of references.

This ensures the cross-reference is properly build.

Alternatively, if one does not want a later finding of a CVE be directly
associated with a DLA/DSA, one can add

	[wheezy] - sox 14.4.0-3+deb7u2

to data/CVE/list, marking the fix as well in the given version, but not
associating it to the DLA.