Add further notes on CVE-2004-2687/distcc

The 2.18.1-1 upload already made the --allow option mandatory for daemon
mode, thus distccd would refuse to run without an IP access control
list.

Upstream bug https://github.com/distcc/distcc/issues/155