Add further Debian bug reference for CVE-2018-1000073/jruby

This one issue was not closed while adressing #895778 which was
collecting multiple CVEs, whilst it was corrected in the DSA covered by
DSA-4219-1 itself and adressed in 1.7.26-1+deb9u1 in stable.

New bug  was filled to cover this CVE specifically.