data/CVE/list

@@ -5,9 +5,11 @@ CVE-2018-5311 (The Easy Custom Auto Excerpt plugin 2.4.6 for WordPress has XSS v
 CVE-2018-5310 (In the "Media from FTP" plugin before 9.85 for WordPress, Directory ...)
 	NOT-FOR-US: "Media from FTP" plugin for WordPress
 CVE-2018-5309 (In PoDoFo 0.9.5, there is an integer overflow in the ...)
-	TODO: check
+	- libpodofo <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1532381
 CVE-2018-5308 (PoDoFo 0.9.5 does not properly validate memcpy arguments in the ...)
-	TODO: check
+	- libpodofo <unfixed>
+	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1532390
 CVE-2018-5307
 	RESERVED
 CVE-2018-5306