Clarify note for CVE-2017-17529/abiword

Whilst abiword/3.0.2-6 added the --with-gnomevfs flag for compilation
this has no effect for abiword in Debian as it compiles with GTK+-3, and
still the fallback_open_uri() will be used.