Add CVE-2019-10173/libxstream-java

The CVE is due to an upstream regression from CVE-2013-7285 and was ever
only present in upstream 1.4.10. 1.4.10 though was uploaded to unstable,
then fixed with the 1.4.11-1 upload.

Thus: Marking the issue as fixed in 1.4.11-1 (as there was an affected
version in unstable with 1.4.10-1) but mark the other lower suites
accordingly as not-affected.