data/CVE/list

@@ -7656,8 +7656,9 @@ CVE-2018-13260
 	RESERVED
 CVE-2018-13259 [zsh shebang line expansion (#alphabetagamma)]
 	RESERVED
-	- zsh 5.6-1
+	- zsh 5.6-1 (bug #908000)
 	[stretch] - zsh <no-dsa> (Minor issue)
+	NOTE: https://www.zsh.org/mla/zsh-announce/136
 	NOTE: https://sourceforge.net/p/zsh/code/ci/1c4c7b6a4d17294df028322b70c53803a402233d
 CVE-2018-13258
 	RESERVED
@@ -44112,8 +44113,9 @@ CVE-2018-0503
 	RESERVED
 CVE-2018-0502 [zsh shebang line expansion (#!foo\nbar)]
 	RESERVED
-	- zsh 5.6-1
+	- zsh 5.6-1 (bug #908000)
 	[stretch] - zsh <no-dsa> (Minor issue)
+	NOTE: https://www.zsh.org/mla/zsh-announce/136
 	NOTE: https://sourceforge.net/p/zsh/code/ci/1c4c7b6a4d17294df028322b70c53803a402233d
 CVE-2018-0501 (The mirror:// method implementation in Advanced Package Tool (APT) ...)
 	- apt 1.6.4