ports/core (3.4): [notify] shadow: fix for CVE-2018-7169, closes FS#1594