Document ssh injection vulnerability in devel/cvs
PR: 226088 Reported by: fk@fabiankeil.de Security: CVE-2017-12836