Remove reference to commit

This commit was not for CVE-2018-1000544. It was to fix another issue,
upstream issue #315, but not the CVE-2018-1000544.

The full upstream fix for CVE-2018-1000544 has furthermore not yet been
validated, cf. https://github.com/rubyzip/rubyzip/pull/371 .