Add two CVEs for p7zip

It is unclear if those affect p7zip, not triaged yet. In particular
CVE-2018-5996 might be not-affected and the code.

Cf. https://landave.io/2018/01/7-zip-multiple-memory-corruptions-via-rar-and-zip/#fn:2