Mark CVE-2018-11798/thrift as unimportant

unimportant as the source is affected, but the binary packages are
configured via debian/rules --without-nodejs and thus not including the
nodejs module.