libceph: bound get_version reply decode to front len

The publication date reported by the vendor.

We collected the advisory from the official source.

Our collector saw this advisory during a later source check.