Mark CVE-2016-9318 as ignored for stretch and jessie

Document new attempt from upstream bug

https://bugzilla.gnome.org/show_bug.cgi?id=772726

to fix the issue via

https://git.gnome.org/browse/libxml2/commit/?id=ad88b54f1a28a8565964a370b5d387927b633c0d