Add Debian bug reference for xen issues

Decided to fill one bug for all the CVEs although there might be not
overlapping affected versions.