jython: Add a note to CVE-2016-4000 in TODO

[Leonardo Taccari <leot%NetBSD.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Thu Jun 22 18:05:02 2017 +0200
Changeset:	684debd8a8f79ab652055a3b31b8a190460f90e5

Added Files:
	jython/TODO

Log Message:
jython: Add a note to CVE-2016-4000 in TODO

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=684debd8a8f79ab652055a3b31b8a190460f90e5

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 jython/TODO | 2 ++
 1 file changed, 2 insertions(+)

diffs:
diff --git a/jython/TODO b/jython/TODO
new file mode 100644
index 0000000000..5b70891606
--- /dev/null
+++ b/jython/TODO
@@ -0,0 +1,2 @@
+- This package has known vulnerabilities, please investigate and fix if possible:
+   CVE-2016-4000