Add tracking for CVE-2018-15132

The isuse is only specific releant when php running on windows, as such
we might as well change it to <not-affected> since there is no Debian
GNU/Win32.