diff --git a/main/sudo/APKBUILD b/main/sudo/APKBUILD
index 65f940a5685..fe5197ec968 100644
--- a/main/sudo/APKBUILD
+++ b/main/sudo/APKBUILD
@@ -23,6 +23,10 @@ source="https://www.sudo.ws/dist/sudo-${_realver}.tar.gz
 	"
 options="suid"
 
+# secfixes:
+#   1.8.20_p2-r0:
+#   - CVE-2017-1000368
+
 builddir="$srcdir"/$pkgname-$_realver
 build() {
 	cd "$builddir"