pcp: Add reference to CVE-2019-3695 and CVE-2019-3696

[Travis Paul <tr%vispaul.me@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Travis Paul <tr%vispaul.me@localhost>
Pushed By:	tpaul
Date:		Sat Mar 7 04:19:24 2020 +0000
Changeset:	7e89c55ab7df3d7277a18451963ad0c6dd343a03

Added Files:
	pcp/TODO

Log Message:
pcp: Add reference to CVE-2019-3695 and CVE-2019-3696

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=7e89c55ab7df3d7277a18451963ad0c6dd343a03

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 pcp/TODO | 3 +++
 1 file changed, 3 insertions(+)

diffs:
diff --git a/pcp/TODO b/pcp/TODO
new file mode 100644
index 0000000000..6039aea92d
--- /dev/null
+++ b/pcp/TODO
@@ -0,0 +1,3 @@
+This package has known vulnerabilities, please investigate and fix if possible:
+
+CVE-2019-3695, CVE-2019-3696