xtrlock: Add reference to CVE-2016-10894

[Leonardo Taccari <leot%NetBSD.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Fri Aug 16 14:14:00 2019 +0200
Changeset:	bf10a764c6bb8cecd5f741dd9cd38d925e1e4dc4

Modified Files:
	xtrlock/TODO

Log Message:
xtrlock: Add reference to CVE-2016-10894

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=bf10a764c6bb8cecd5f741dd9cd38d925e1e4dc4

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 xtrlock/TODO | 3 +++
 1 file changed, 3 insertions(+)

diffs:
diff --git a/xtrlock/TODO b/xtrlock/TODO
index d7bd6c7471..4eae9c2b70 100644
--- a/xtrlock/TODO
+++ b/xtrlock/TODO
@@ -10,3 +10,6 @@ on Linux or other systems, just made it working on NetBSD i386
 more testing is needed.
 
 Is there a workaround for the setuid bit to lock the screen?
+
+This package has known vulnerabilities, please investigate and fix if possible:
+  CVE-2016-10894