ruby-passenger: Add a reference to CVE-2017-16355

[Leonardo Taccari <leot%NetBSD.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Fri Dec 15 10:22:54 2017 +0100
Changeset:	38ee00706b123ebbf69e7eb83bee8f0d57f9ae6a

Modified Files:
	ruby-passenger/TODO

Log Message:
ruby-passenger: Add a reference to CVE-2017-16355

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=38ee00706b123ebbf69e7eb83bee8f0d57f9ae6a

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 ruby-passenger/TODO | 3 +++
 1 file changed, 3 insertions(+)

diffs:
diff --git a/ruby-passenger/TODO b/ruby-passenger/TODO
index de1e240f40..c058a43be5 100644
--- a/ruby-passenger/TODO
+++ b/ruby-passenger/TODO
@@ -1,2 +1,5 @@
 The passenger-status script doesn't work well on Illumos, possibly related
 to non-portable file locking code implemented.
+
+This package has known vulnerabilities, please investigate and fix if possible:
+ CVE-2017-16355