Process CVE-2018-1165{0,1}/greylog2

It's a in meanwhile closed itp bug, but we track one further CVE for
greylog2 with the itp. We might change all occurences to NFU in case it
is ever unlikely there will be another attempt for packaging.