Add bug reference for wireshark

I reported those with RC severity (although the severity per se was not
warranted) but it is now a regression from stable having those CVEs
unfixed since a DSA was released.