mosquitto: Add a reference to CVE-2018-20145 (fixed in 1.5.5)

[Leonardo Taccari <leot%NetBSD.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Thu Dec 13 22:48:13 2018 +0100
Changeset:	e9e8054eae83fcc83f5fdc26d9d0ac39abccc540

Modified Files:
	mosquitto/TODO

Log Message:
mosquitto: Add a reference to CVE-2018-20145 (fixed in 1.5.5)

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=e9e8054eae83fcc83f5fdc26d9d0ac39abccc540

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 mosquitto/TODO | 2 ++
 1 file changed, 2 insertions(+)

diffs:
diff --git a/mosquitto/TODO b/mosquitto/TODO
index 6283129e7d..8919b9d521 100644
--- a/mosquitto/TODO
+++ b/mosquitto/TODO
@@ -25,3 +25,5 @@ Check if these are really fixed in 1.5.1:
 Query sent to list on 20180904.  It seems likely that they are fixed
 but that it is not clearly documented.
 
+This package has known vulnerabilities, please investigate and fix if possible:
+  CVE-2018-20145