mosquitto: Add references to CVE-2018-12546, CVE-2018-12550, CVE-2018-12551

[Leonardo Taccari <leot%NetBSD.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Mon Feb 11 09:36:18 2019 +0100
Changeset:	2db579f0a8bc8bb14f58b1fd88b34fb12887fa6e

Modified Files:
	mosquitto/TODO

Log Message:
mosquitto: Add references to CVE-2018-12546, CVE-2018-12550, CVE-2018-12551

(Still not available on nvd.nist.gov, via DSA-4388-1 and further public
information available on:

 <https://mosquitto.org/blog/2019/02/version-1-5-6-released/>

)

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=2db579f0a8bc8bb14f58b1fd88b34fb12887fa6e

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 mosquitto/TODO | 3 +++
 1 file changed, 3 insertions(+)

diffs:
diff --git a/mosquitto/TODO b/mosquitto/TODO
index f1445a189c..064c91eea1 100644
--- a/mosquitto/TODO
+++ b/mosquitto/TODO
@@ -24,3 +24,6 @@ Check if these are really fixed in 1.5.1:
 
 Query sent to list on 20180904.  It seems likely that they are fixed
 but that it is not clearly documented.
+
+This package has known vulnerabilities, please investigate and fix if possible:
+  CVE-2018-12546, CVE-2018-12550, CVE-2018-12551