busybox: Add reference to recent CVEs

[Leonardo Taccari (via pkgsrc-wip) <commit-notify%pkgsrc.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Sat Oct 17 14:03:01 2026 +0200
Changeset:	be7b2f951f07c75de04f6ddca72e61ad56035248

Modified Files:
	busybox/TODO

Log Message:
busybox: Add reference to recent CVEs

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=be7b2f951f07c75de04f6ddca72e61ad56035248

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 busybox/TODO | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diffs:
diff --git a/busybox/TODO b/busybox/TODO
index 0e80f113de..2938b4ac5b 100644
--- a/busybox/TODO
+++ b/busybox/TODO
@@ -12,5 +12,6 @@
   CVE-2023-42363, CVE-2023-42364, CVE-2023-42365, CVE-2023-42366,
   CVE-2024-58251, CVE-2025-46394, CVE-2025-60876, CVE-2026-26157,
   CVE-2026-26158, CVE-2026-29004, CVE-2026-38752, CVE-2026-38753,
-  CVE-2026-38754, CVE-2026-38755, CVE-2026-88833, CVE-2026-88834,
-  CVE-2026-88838, CVE-2026-108119
+  CVE-2026-38754, CVE-2026-38755, CVE-2026-88829, CVE-2026-88833,
+  CVE-2026-88834, CVE-2026-88838, CVE-2026-88842, CVE-2026-90954,
+  CVE-2026-108119