Mark three CVEs as pending for 4.9.82-1+deb9u1

4.9.82-1+deb9u1 is the version including the fixes in the git repository
including those fixes.

Marking as well CVE-2017-5715 as fixed following the strategy used for
sid. The upload enforces a compiler with retpoline support thus making
the mitigation effectinve.