iText: Add a note about CVE-2017-9096

[Leonardo Taccari <leot%NetBSD.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Wed Nov 8 22:27:56 2017 +0100
Changeset:	a90cd99bde380bfbd1bff069ef3f4e4bdad36d3f

Modified Files:
	iText/TODO

Log Message:
iText: Add a note about CVE-2017-9096

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=a90cd99bde380bfbd1bff069ef3f4e4bdad36d3f

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 iText/TODO | 3 +++
 1 file changed, 3 insertions(+)

diffs:
diff --git a/iText/TODO b/iText/TODO
index f2fdc572e4..2a317f52b5 100644
--- a/iText/TODO
+++ b/iText/TODO
@@ -1,2 +1,5 @@
 use autoclasspath tool (must be created :)
 rename to java-iText when importing into pkgsrc
+
+This package has known vulnerabilities, please investigate and fix if possible:
+ CVE-2017-9096