Add CVE-2018-17196, fix some links. (#223)

Fix some links that were pointing to 2.2.

Add CVE-2018-17196 to the cve-list page.

Reviewers: Matthias J. Sax <mjsax@apache.org>
5 files changed