Add Debian bug reference for tracking tightvnc issues

Actually a bugreport referrring to please backport fixes from NixOS, but
we can effectively track CVE-2019-8287, CVE-2019-15678, CVE-2019-15679,
CVE-2019-15680 with this bugreport[1].

 [1]: https://bugs.debian.org/945364