Update status for CVE-2018-11407/symfony

The fix was completely applied for stretch, as it used directly the
https://github.com/symfony/symfony/commit/2f5bd18d82f4a8911d549d14c72bf935602834a9
based fix and casting to string the $password variiable. Thus stretch
never really affected by CVE-2018-11407.