Add bug references for CVE-2018-1052{8,9}/libraw

Filled two separate bugs (though handled in same upstream bug) in case
of not commont affected versions to be tracked in BTS. Borderline in
this case because issues likely to be just no-dsa, but need
double-checking.