xar: Add reference to CVE-2018-17093 and CVE-2018-17094

[Leonardo Taccari <leot%NetBSD.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Mon Sep 17 10:37:24 2018 +0200
Changeset:	f797dd2fb17b877cb284f92774962850278aa176

Modified Files:
	xar/TODO

Log Message:
xar: Add reference to CVE-2018-17093 and CVE-2018-17094

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=f797dd2fb17b877cb284f92774962850278aa176

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 xar/TODO | 2 ++
 1 file changed, 2 insertions(+)

diffs:
diff --git a/xar/TODO b/xar/TODO
index ff9381c0c4..7e993f64fb 100644
--- a/xar/TODO
+++ b/xar/TODO
@@ -7,3 +7,5 @@ There is a known security issue with [wip/xar]:
  http://secunia.com/advisories/39774/
  https://nvd.nist.gov/vuln/detail/CVE-2017-11124
  https://nvd.nist.gov/vuln/detail/CVE-2017-11125
+ https://nvd.nist.gov/vuln/detail/CVE-2018-17093
+ https://nvd.nist.gov/vuln/detail/CVE-2018-17094