bzip3: Add references to CVE-2023-29415...CVE-2023-29421

[Leonardo Taccari <leot%NetBSD.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Tue Apr 11 22:41:55 2023 +0200
Changeset:	795efa60faae97fe57ade0c186c83fc4e1752c7d

Modified Files:
	bzip3/TODO

Log Message:
bzip3: Add references to CVE-2023-29415...CVE-2023-29421

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=795efa60faae97fe57ade0c186c83fc4e1752c7d

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 bzip3/TODO | 3 +++
 1 file changed, 3 insertions(+)

diffs:
diff --git a/bzip3/TODO b/bzip3/TODO
index 4c42d498ca..4b15ace874 100644
--- a/bzip3/TODO
+++ b/bzip3/TODO
@@ -5,3 +5,6 @@ when trying to compress a file it crashes on
 line 108 in libbzip3.c claiming it can't read
 the in_end variable. This is all happening
 on NetBSD sparc under qemu.
+
+This package has known vulnerabilities, please investigate and fix if possible:
+  CVE-2023-29415, CVE-2023-29416, CVE-2023-29418, CVE-2023-29419, CVE-2023-29420, CVE-2023-29421