Well, first of all, a .deb package does not have to be open-source. There are binary-only packages as well.
Secondly, it is up to developer to determine a way how he is going to handle bug reports, if at all. The GPL says nothing about handling bug reports, so developers using GPL are not legally bound to do any bug report handling.