Mark CVE-2019-8341/jinja2

For now mark it as unimportant with no real security imact. Upstream
indicates this is no real issue at al, so the next step would be to
properly ask for a REJECT of the invalid CVE.

Cf. https://bugzilla.redhat.com/show_bug.cgi?id=1677653#c4