mupen64plus: Add reference to CVE-2025-29366

[Leonardo Taccari (via pkgsrc-wip) <commit-notify%pkgsrc.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Sat Aug 23 18:08:26 2025 +0200
Changeset:	84d105cd066ed3edacd9593e38e5d6767ac5f3a1

Modified Files:
	mupen64plus/TODO

Log Message:
mupen64plus: Add reference to CVE-2025-29366

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=84d105cd066ed3edacd9593e38e5d6767ac5f3a1

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 mupen64plus/TODO | 3 +++
 1 file changed, 3 insertions(+)

diffs:
diff --git a/mupen64plus/TODO b/mupen64plus/TODO
index 4782cbd0ac..ea1920a540 100644
--- a/mupen64plus/TODO
+++ b/mupen64plus/TODO
@@ -18,3 +18,6 @@ make: Leaving directory `/usr/pkgsrc/dev/wip/mupen64plus/work/mupen64plus-bundle
 *** Error code 2
 
   It's disabled for now.
+
+This package has known vulnerabilities, please investigate and fix if possible:
+  CVE-2025-29366