recutils: Add reference to recent CVEs

[Leonardo Taccari <leot%NetBSD.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Wed Jan 16 22:45:52 2019 +0100
Changeset:	c7517605cd37d375371ff711a9d3f3f0217f73d1

Added Files:
	recutils/TODO

Log Message:
recutils: Add reference to recent CVEs

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=c7517605cd37d375371ff711a9d3f3f0217f73d1

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 recutils/TODO | 3 +++
 1 file changed, 3 insertions(+)

diffs:
diff --git a/recutils/TODO b/recutils/TODO
new file mode 100644
index 0000000000..03f2af1396
--- /dev/null
+++ b/recutils/TODO
@@ -0,0 +1,3 @@
+This package has known vulnerabilities, please investigate and fix if possible:
+  CVE-2019-6455, CVE-2019-6456, CVE-2019-6457, CVE-2019-6458, CVE-2019-6459,
+  CVE-2019-6460