data/CVE/list

@@ -8981,7 +8981,9 @@ CVE-2018-10894
 CVE-2018-10893 [Insufficient encoding checks for LZ can cause different integer/buffer overflows]
 	RESERVED
 	- spice-gtk <unfixed> (bug #904161)
+	[stretch] - spice-gtk <no-dsa> (Minor issue)
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1598234
+	NOTE: Ongoing patch review: https://lists.freedesktop.org/archives/spice-devel/2018-July/044489.html
 CVE-2018-10892 (The default OCI linux spec in oci/defaults{_linux}.go in Docker/Moby ...)
 	- docker.io <unfixed>
 	NOTE: https://bugzilla.redhat.com/show_bug.cgi?id=1598581