Add references for CVE-2018-768{8,9}