xar: add a reference to CVE-2017-1112[45]

[Leonardo Taccari <leot%NetBSD.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Mon Jul 10 10:51:04 2017 +0200
Changeset:	91f5adecb8e51f9c91ec58e3406621cb90615a85

Modified Files:
	xar/TODO

Log Message:
xar: add a reference to CVE-2017-1112[45]

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=91f5adecb8e51f9c91ec58e3406621cb90615a85

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 xar/TODO | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diffs:
diff --git a/xar/TODO b/xar/TODO
index ad358e1fd7..ff9381c0c4 100644
--- a/xar/TODO
+++ b/xar/TODO
@@ -5,4 +5,5 @@ There is a known security issue with [wip/xar]:
  http://code.google.com/p/xar/source/detail?r=225
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0055
  http://secunia.com/advisories/39774/
-
+ https://nvd.nist.gov/vuln/detail/CVE-2017-11124
+ https://nvd.nist.gov/vuln/detail/CVE-2017-11125