Add originally reported bug for CVE-2019-11043/php7.3

This was missed when later on reporting #943764 and the 7.3.11-1~deb10u1
upload for buster-security did not close the bug either. So reference
both. On BTS side the bugs were now merged already.