bagder: curl-www/docs _security.html, 1.15, 1.16 adv_20051207.txt, 1.1, 1.2

Update of /cvsroot/curl/curl-www/docs
In directory labb:/tmp/cvs-serv8197

Modified Files:
	_security.html adv_20051207.txt 
Log Message:
update on the patch


Index: _security.html
===================================================================
RCS file: /cvsroot/curl/curl-www/docs/_security.html,v
retrieving revision 1.15
retrieving revision 1.16
diff -u -d -r1.15 -r1.16
--- _security.html	9 Dec 2005 07:44:19 -0000	1.15
+++ _security.html	12 Dec 2005 22:37:49 -0000	1.16
@@ -43,7 +43,7 @@
   <tr><td>ID</td><td><a href="http://www.securityfocus.com/bid/15756">BID 15756</a> <a href="http://secunia.com/advisories/17907/">SA17907</a> <a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4077">CVE-2005-4077</a> <small><a href="#20051207">(permalink)</a></small></td></tr>
   <tr><td>Affected versions</td><td>curl and libcurl 7.11.2 to and including 7.15.0</td></tr>
   <tr><td>Not affected versions</td><td>curl and libcurl 7.11.1 and earlier, 7.15.1 and later</td></tr>
-  <tr><td>Patch</td><td><a href="http://curl.haxx.se/libcurl-urllen.patch">libcurl-urllen.patch</a></td></tr>
+  <tr><td>Patch</td><td><a href="http://curl.haxx.se/libcurl-urllen.patch">libcurl-urllen.patch</a> (<b>Note:</b> for 7.14.0 and earlier the patch <i>MUST</i> be made to do +3 and <i>not</i> just +2.</td></tr>
 
   <tr><td>Advisories</td><td>
 <a href="adv_20051207.html">Project cURL Security

Index: adv_20051207.txt
===================================================================
RCS file: /cvsroot/curl/curl-www/docs/adv_20051207.txt,v
retrieving revision 1.1
retrieving revision 1.2
diff -u -d -r1.1 -r1.2
--- adv_20051207.txt	6 Dec 2005 23:04:07 -0000	1.1
+++ adv_20051207.txt	12 Dec 2005 22:37:49 -0000	1.2
@@ -62,3 +62,6 @@
 5. CREDITS
 
 Reported to us by Stefan Esser. Thanks a lot!
+
+[Dec 12 2005] Additional info on what's required for 7.14.0 and earlier was
+provided by Wilfried Weissmann in a Redhat bug report.