RELEASE-NOTES: 7.49.1
diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index 7c46539..ca3142c 100644
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -4,14 +4,11 @@
Command line options: 185
curl_easy_setopt() options: 224
Public functions in libcurl: 61
- Contributors: 1388
-
-This release includes the following changes:
-
- o
+ Contributors: 1404
This release includes the following bugfixes:
+ o Windows: prevent DLL hijacking, CVE-2016-4802 [11]
o dist: include manpage-scan.pl, nroff-scan.pl and CHECKSRC.md [1]
o schannel: fix compile break with MSVC XP toolset [2]
o curlbuild.h.dist: check __LP64__ as well to fix MIPS build [3]
@@ -23,6 +20,11 @@
o winbuild/Makefile.vc: Fix check on SSL, MBEDTLS, WINSSL exclusivity [7]
o curl_multibyte: fix compiler error
o openssl: cleanup must free compression methods (memory leak) [8]
+ o mbedtls: fix includes so snprintf() works [9]
+ o checksrc.pl: Added variants of strcat() & strncat() to banned function list
+ o contributors.sh: better grep pattern and show GitHub username [10]
+ o ssh: fix build for libssh2 before 1.2.6 [12]
+ o curl_share_setopt.3: Add min ver needed for ssl session lock [13]
This release includes the following known bugs:
@@ -31,9 +33,10 @@
This release would not have looked like this without help, code, reports and
advice from friends like these:
- Alexander Traud, Daniel Stenberg, Gisle Vanem, Jan Ehrhardt, Marcel Raad,
- Michael Kaufmann, Paul Howarth, Ray Satiro, Steve Holme, Tomas Jakobsson,
- (10 contributors)
+ Alexander Traud, Daniel Stenberg, Gisle Vanem, Jan Ehrhardt,
+ jveazey on github, Marcel Raad, Michael Kaufmann, Michael Wallner,
+ Moti Avrahami, Paul Howarth, Ray Satiro, Steve Holme, Tomas Jakobsson,
+ (13 contributors)
Thanks! (and sorry if I forgot to mention someone)
@@ -47,3 +50,8 @@
[6] = https://curl.haxx.se/bug/?i=821
[7] = https://curl.haxx.se/bug/?i=818
[8] = https://curl.haxx.se/bug/?i=817
+ [9] = https://curl.haxx.se/mail/lib-2016-05/0196.html
+ [10] = https://curl.haxx.se/bug/?i=824
+ [11] = https://curl.haxx.se/docs/adv_20160527.html
+ [12] = https://curl.haxx.se/bug/?i=831
+ [13] = https://github.com/curl/curl/issues/826
