Fix wrong use of CVE id for qemu issue

The correct CVE id is CVE-2019-13164 according to the main reference in
https://bugzilla.redhat.com/show_bug.cgi?id=1722559 and the oss-security
post at https://www.openwall.com/lists/oss-security/2019/07/02/2 .