CVE-2019-14856/ansible assigned

The CVE is not affecting Debian as we never landed a fix for
CVE-2019-10206 itself (and CVE-2019-14856 is assigned for an incomplete
fix).

Annotate entry for CVE-2019-10206 to make sure the fix will be made
complete and not open CVE-2019-14856.