In 505ea485 used the wrong source package name to mark the no-dsa entry for stretch and buster. Fixes: 505ea485 ("Mark CVE-2019-3866 as no-dsa for buster and stretch")