Add tracking Debian bug for CVE-2019-11690/u-boot

Add for tracking, the impact security wise for Debian is unclear, but
maintainer (Vagrant Cascadian) can hopefully comment.