CVE-2018-3977: add follow-up fix

https://hg.libsdl.org/SDL_image/rev/170d7d32e4a8 is obviously broken, ty is
sanitized instead of y which is the actual index variable.

Add follow up fix.

Also, remove no-dsa triage for jessie since this issue will be addressed in
the next upload.