data/CVE/list

@@ -23605,6 +23605,8 @@ CVE-2018-17199 [mod_session_cookie does not respect expiry time]
 	RESERVED
 	- apache2 <unfixed> (bug #920303)
 	NOTE: https://www.openwall.com/lists/oss-security/2019/01/22/3
+	NOTE: 2.4.x http://svn.apache.org/r1851409
+	NOTE: 2.5.x http://svn.apache.org/r1850947
 CVE-2018-17198
 	RESERVED
 	NOT-FOR-US: Apache Roller

data/dla-needed.txt

@@ -9,6 +9,8 @@ To pick an issue, simply add your name behind it. To learn more about how
 this list is updated have a look at
 https://wiki.debian.org/LTS/Development#Triage_new_security_issues
 
+--
+apache2 (Thorsten Alteholz)
 --
 cairo
   NOTE: 20190109: No fix available yet. (ola)