Update CVE-2018-10188 status

The changes apply at least to the stretch version partially, and while
looking back at the issue when filled #896490, "For older versions not
all will apply, and code has partially moved files, e.g. the parts in
Operations.php were moved."