data/CVE/list

@@ -23037,7 +23037,7 @@ CVE-2018-17200
 	RESERVED
 CVE-2018-17199 [mod_session_cookie does not respect expiry time]
 	RESERVED
-	- apache2 <unfixed>
+	- apache2 <unfixed> (bug #920303)
 	NOTE: https://www.openwall.com/lists/oss-security/2019/01/22/3
 CVE-2018-17198
 	RESERVED
@@ -23064,7 +23064,7 @@ CVE-2018-17190 (In all versions of Apache Spark, its standalone resource manager
 	NOT-FOR-US: Apache Spark
 CVE-2018-17189 [mod_http2, DoS via slow, unneeded request bodies]
 	RESERVED
-	- apache2 <unfixed>
+	- apache2 <unfixed> (bug #920302)
 	[jessie] - apache2 <not-affected> (Vulnerable code not present)
 	NOTE: HTTP/2 support introduced in 2.4.17
 	NOTE: https://www.openwall.com/lists/oss-security/2019/01/22/2