bagder: curl-www/docs _security.html,1.11,1.12

Update of /cvsroot/curl/curl-www/docs
In directory labb:/tmp/cvs-serv9218

Modified Files:
	_security.html 
Log Message:
added the recent alert


Index: _security.html
===================================================================
RCS file: /cvsroot/curl/curl-www/docs/_security.html,v
retrieving revision 1.11
retrieving revision 1.12
diff -u -d -r1.11 -r1.12
--- _security.html	14 Oct 2005 06:42:14 -0000	1.11
+++ _security.html	7 Dec 2005 10:11:57 -0000	1.12
@@ -35,6 +35,22 @@
  We appreciate getting notified in advance before you go public with security
  advisories for the sake of our users.
 
+<a name="20051207"></a>
+SUBTITLE(libcurl URL Buffer Overflow)
+<p>
+<table class="news">
+  <tr><td>Date:</td><td>December 7, 2005</td></tr>
+  <tr><td>ID</td><td><small><a href="#20051207">(permalink)</a></small></td></tr>
+  <tr><td>Affected versions</td><td>curl and libcurl 7.11.2 to and including 7.15.0</td></tr>
+  <tr><td>Not affected versions</td><td>curl and libcurl 7.11.1 and earlier, 7.15.1 and later</td></tr>
+  <tr><td>Patch</td><td><a href="http://curl.haxx.se/libcurl-urllen.patch">libcurl-urllen.patch</a></td></tr>
+  <tr><td>Advisories</td><td><a href="adv_20051207.html">Project cURL Security Advisory</a></td></tr>
+</table>
+<p>
+ libcurl's URL parser function can overflow a malloced buffer in two ways, if
+ given a too long URL.
+
+
 <a name="BID15102"></a><a name="CAN-2005-3185"></a>
 SUBTITLE(libcurl NTLM Buffer Overflow)
 <p>