Add CVE-2019-18604/texlive-bin

Technically axohelp.c seems to be present as well in texlive-extra, but
only from texlive-bin it is build, so tracking only this source package.

To be fully correct we might want to track as well texlive-extra with
severity unimportant (as not affecting the resulting binary packages)
(after checking the there present taxohelp.c is as well from axodraw2
and affected).