mozjpeg: Add a reference to CVE-2018-14498

[Leonardo Taccari <leot%NetBSD.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Fri Mar 8 19:53:38 2019 +0100
Changeset:	e623bbc5c230259dc2c752100387b30e4dcb763c

Modified Files:
	mozjpeg/TODO

Log Message:
mozjpeg: Add a reference to CVE-2018-14498

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=e623bbc5c230259dc2c752100387b30e4dcb763c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 mozjpeg/TODO | 3 +++
 1 file changed, 3 insertions(+)

diffs:
diff --git a/mozjpeg/TODO b/mozjpeg/TODO
index 3161093071..bb62ad92e7 100644
--- a/mozjpeg/TODO
+++ b/mozjpeg/TODO
@@ -1,2 +1,5 @@
 Decide if this should be integrated in mk/jpeg.buildlink3.mk or
 how it should interact with the other jpeg packages.
+
+This package has known vulnerabilities, please investigate and fix if possible:
+  CVE-2018-14498