mosquitto: Add a reference to CVE-2017-7653 and CVE-2017-7654

[Leonardo Taccari <leot%NetBSD.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Sun Jul 15 17:20:43 2018 +0200
Changeset:	7c86a8e3949f08bf9e29e306f5214276bcf935c5

Modified Files:
	mosquitto/TODO

Log Message:
mosquitto: Add a reference to CVE-2017-7653 and CVE-2017-7654

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=7c86a8e3949f08bf9e29e306f5214276bcf935c5

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 mosquitto/TODO | 3 +++
 1 file changed, 3 insertions(+)

diffs:
diff --git a/mosquitto/TODO b/mosquitto/TODO
index 3a64a5d8ac..fb84ead02f 100644
--- a/mosquitto/TODO
+++ b/mosquitto/TODO
@@ -19,3 +19,6 @@ upstream is inappropriate.
 Figure out why the soname is different on sunos, and if this is an
 upstream bug.  Perhaps resolve, or perhaps use a PLIST variable to
 avoid having a second copy.
+
+This package has known vulnerabilities, please investigate and fix if possible:
+ CVE-2017-7653, CVE-2017-7654