Add bug references for CVE-2018-16396/{ruby-openssl,ruby2.5}