libjxl: Add reference to CVE-2023-0645

[Leonardo Taccari <leot%NetBSD.org@localhost>]

Module Name:	pkgsrc-wip
Committed By:	Leonardo Taccari <leot%NetBSD.org@localhost>
Pushed By:	leot
Date:		Tue Apr 11 22:42:43 2023 +0200
Changeset:	93ebda39c8438b4fead532780a58524e19afe1a3

Modified Files:
	libjxl/TODO

Log Message:
libjxl: Add reference to CVE-2023-0645

To see a diff of this commit:
https://wip.pkgsrc.org/cgi-bin/gitweb.cgi?p=pkgsrc-wip.git;a=commitdiff;h=93ebda39c8438b4fead532780a58524e19afe1a3

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

diffstat:
 libjxl/TODO | 3 +++
 1 file changed, 3 insertions(+)

diffs:
diff --git a/libjxl/TODO b/libjxl/TODO
index 5fac02b89c..a4e2aba2c1 100644
--- a/libjxl/TODO
+++ b/libjxl/TODO
@@ -1,2 +1,5 @@
 Some dependencies need to be packaged and used before this can be
 imported.
+
+This package has known vulnerabilities, please investigate and fix if possible:
+  CVE-2023-0645