shadow: Add a note about CVE-2017-12424

[Leonardo Taccari <leot%NetBSD.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Fri Aug 4 22:29:24 2017 +0200
Changeset:	996479b196a9b100d29451493ca4f10e3365dcb5

Modified Files:
	shadow/TODO

Log Message:
shadow: Add a note about CVE-2017-12424

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=996479b196a9b100d29451493ca4f10e3365dcb5

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 shadow/TODO | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diffs:
diff --git a/shadow/TODO b/shadow/TODO
index 3583b91a0f..3595c67bf4 100644
--- a/shadow/TODO
+++ b/shadow/TODO
@@ -31,4 +31,4 @@ so provide that file
 but the manpage says: no longer used by programs ... handled by PAM now
 
 - This package has known vulnerabilities, please investigate and fix
-  if possible. (see: CVE-2011-0721, CVE-2016-6252)
+  if possible. (see: CVE-2011-0721, CVE-2016-6252, CVE-2017-12424)