java-netty: Add references to CVE-2026-3387[01]

[Leonardo Taccari (via pkgsrc-wip) <commit-notify%pkgsrc.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Thu Apr 2 19:27:40 2026 +0200
Changeset:	9a23aa9b78062ffeebc08e434fdbe88ad8fb40ba

Modified Files:
	java-netty/TODO

Log Message:
java-netty: Add references to CVE-2026-3387[01]

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=9a23aa9b78062ffeebc08e434fdbe88ad8fb40ba

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 java-netty/TODO | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diffs:
diff --git a/java-netty/TODO b/java-netty/TODO
index 7ede9afde9..cb4ed54682 100644
--- a/java-netty/TODO
+++ b/java-netty/TODO
@@ -1,4 +1,4 @@
 This package has known vulnerabilities, please investigate and fix if possible:
   CVE-2021-21290, CVE-2021-21295, CVE-2021-21409, CVE-2021-37136,
   CVE-2021-37137, CVE-2024-29025, CVE-2025-58056, CVE-2025-58057,
-  CVE-2025-59419, CVE-2025-67735
+  CVE-2025-59419, CVE-2025-67735, CVE-2026-33870, CVE-2026-33871