pjproject: Add a reference to CVE-2017-9359 and CVE-2017-9372

[Leonardo Taccari <leot%NetBSD.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Fri Aug 11 10:28:01 2017 +0200
Changeset:	e28ad5c99d0a85cc88e2f67a911d620008072b31

Modified Files:
	pjproject/TODO

Log Message:
pjproject: Add a reference to CVE-2017-9359 and CVE-2017-9372

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=e28ad5c99d0a85cc88e2f67a911d620008072b31

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 pjproject/TODO | 3 +++
 1 file changed, 3 insertions(+)

diffs:
diff --git a/pjproject/TODO b/pjproject/TODO
index f41bf9366c..3b03dfd026 100644
--- a/pjproject/TODO
+++ b/pjproject/TODO
@@ -1,3 +1,6 @@
 Split into PJSUA and PJMEDIA # XXX Why?
 Shared libraries # XXX Does the package support it?
 NetBSD patches, tweak OSS emulation compatibility
+
+This package has known vulnerabilities, please investigate and fix if possible:
+ CVE-2017-9359 CVE-2017-9372