nncp: Add reference to CVE-2025-60020

[Leonardo Taccari (via pkgsrc-wip) <commit-notify%pkgsrc.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Thu Oct 2 11:52:22 2025 +0200
Changeset:	acc6bb73e4ff8106dd22cf948502142aad4dffdb

Modified Files:
	nncp/TODO

Log Message:
nncp: Add reference to CVE-2025-60020

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=acc6bb73e4ff8106dd22cf948502142aad4dffdb

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 nncp/TODO | 3 +++
 1 file changed, 3 insertions(+)

diffs:
diff --git a/nncp/TODO b/nncp/TODO
index 708151ab22..dfb8958f2f 100644
--- a/nncp/TODO
+++ b/nncp/TODO
@@ -5,3 +5,6 @@ Some things that are optional but may be helpful:
 - Possibly create a uucp user and setuid the binaries to it (similar to uucp)
 
 - Create rc.d scripts for nncp-daemon, nncp-caller, maybe even nncp-toss
+
+This package has known vulnerabilities, please investigate and fix if possible:
+  CVE-2025-60020