owntone: Add reference to recent CVEs

[Leonardo Taccari (via pkgsrc-wip) <commit-notify%pkgsrc.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Wed Jan 21 18:02:01 2026 +0100
Changeset:	29ca3cc22ce44e72131817543f40b88c89149f1c

Modified Files:
	owntone/TODO

Log Message:
owntone: Add reference to recent CVEs

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=29ca3cc22ce44e72131817543f40b88c89149f1c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 owntone/TODO | 3 +++
 1 file changed, 3 insertions(+)

diffs:
diff --git a/owntone/TODO b/owntone/TODO
index 3852025cf9..04ee2e980c 100644
--- a/owntone/TODO
+++ b/owntone/TODO
@@ -22,3 +22,6 @@ Upstream bugs:
 
 - filescanner_ffmpeg.c needs patching
   https://github.com/owntone/owntone-server/issues/1901
+
+This package has known vulnerabilities, please investigate and fix if possible:
+  CVE-2025-57155, CVE-2025-57156, CVE-2025-63647, CVE-2025-63648