kibana: Add a note to recent CVEs

[Leonardo Taccari <leot%NetBSD.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Sat Jun 17 11:44:56 2017 +0200
Changeset:	2a9885476428603cf407ae7173f40fe8b4c394d3

Modified Files:
	kibana/TODO

Log Message:
kibana: Add a note to recent CVEs

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=2a9885476428603cf407ae7173f40fe8b4c394d3

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 kibana/TODO | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diffs:
diff --git a/kibana/TODO b/kibana/TODO
index b438ce6cd7..02535f3450 100644
--- a/kibana/TODO
+++ b/kibana/TODO
@@ -1,6 +1,6 @@
 Need to make sure we can compartmentalize node build tools. Pretty sure they're
 doing stuff outside the pkgsrc env.
 
-- CVE-2015-4093
-- CVE-2017-8439
-- CVE-2017-8440
+- This package has known vulnerabilities, please investigate and fix if possible:
+   CVE-2015-4093, CVE-2015-9056, CVE-2016-10365, CVE-2016-10366,
+   CVE-2016-1000219, CVE-2016-1000220, CVE-2017-8439, CVE-2017-8440, CVE-2017-8452