# HG changeset patch
# User Maxim Konovalov <maxim@nginx.com>
# Date 1368784246 0
# Node ID ef5485fb932d63b4994ad827e8e709a915abab73
# Parent  326355a6026e7918307e29988362015175a34a4d
2012 security advisories added.

diff --git a/xml/en/security_advisories.xml b/xml/en/security_advisories.xml
--- a/xml/en/security_advisories.xml
+++ b/xml/en/security_advisories.xml
@@ -45,12 +45,14 @@ Patches are signed using one of the
 
 <item name="Vulnerabilities with Windows directory aliases"
       severity="medium"
+      advisory="http://mailman.nginx.org/pipermail/nginx-announce/2012/000086.html"
       cve="2011-4963"
       good="1.3.1+, 1.2.1+"
       vulnerable="nginx/Windows 0.7.52-1.3.0" />
 
 <item name="Buffer overflow in the ngx_http_mp4_module"
       severity="major"
+      advisory="http://mailman.nginx.org/pipermail/nginx-announce/2012/000080.html"
       cve="2012-2089"
       good="1.1.19+, 1.0.15+"
       vulnerable="1.1.3-1.1.18, 1.0.7-1.0.14">
@@ -59,6 +61,7 @@ Patches are signed using one of the
 
 <item name="Memory disclosure with specially crafted backend responses"
       severity="major"
+      advisory="http://mailman.nginx.org/pipermail/nginx-announce/2012/000076.html"
       cve="2012-1180"
       good="1.1.17+, 1.0.14+"
       vulnerable="0.1.0-1.1.16">