data/CVE/list

@@ -179,8 +179,9 @@ CVE-2018-1000847 (FreshDNS version 1.0.3 and prior contains a Cross Site Scripti
 CVE-2018-1000846 (FreshDNS version 1.0.3 and earlier contains a Cross ite Request ...)
 	NOT-FOR-US: FreshDNS
 CVE-2018-1000845 (Avahi version 0.7 contains a Incorrect Access Control vulnerability in ...)
-	- avahi <unfixed> (low)
+	- avahi <unfixed> (low; bug #917047)
 	[stretch] - avahi <no-dsa> (Minor issue)
+	NOTE: https://github.com/lathiat/avahi/issues/203
 CVE-2018-1000844 (Square Open Source Retrofit version Prior to commit ...)
 	NOT-FOR-US: Square Retrofit
 CVE-2018-1000843 (Luigi version prior to version 2.8.0; after commit ...)