pipewire: Add references to CVE-2026-5674

[Leonardo Taccari (via pkgsrc-wip) <commit-notify%pkgsrc.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Wed Jul 22 14:05:13 2026 +0200
Changeset:	6c871ad5b8827fe2b3ad750b43a921dcaa88fac3

Modified Files:
	pipewire/TODO

Log Message:
pipewire: Add references to CVE-2026-5674

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=6c871ad5b8827fe2b3ad750b43a921dcaa88fac3

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 pipewire/TODO | 3 +++
 1 file changed, 3 insertions(+)

diffs:
diff --git a/pipewire/TODO b/pipewire/TODO
index 2f0d5b9f67..33761d2452 100644
--- a/pipewire/TODO
+++ b/pipewire/TODO
@@ -14,3 +14,6 @@ wireplumber.wrap
 Investigate if we need to download these or can disable them.
 
 ALSA support is disabled yet.
+
+This package has known vulnerabilities, please investigate and fix if possible:
+  CVE-2026-5674