aboutsummaryrefslogtreecommitdiff
path: root/CHANGES
diff options
context:
space:
mode:
authorDaniel Stenberg <daniel@haxx.se>2007-07-10 21:36:30 +0000
committerDaniel Stenberg <daniel@haxx.se>2007-07-10 21:36:30 +0000
commit4b1782c37141b82aa118eaf05061bb9ba1759700 (patch)
tree2ae4d54b8206e7297420535767052e527731c2f1 /CHANGES
parentf84642197f618836bd371688fcfbb59e60902bc2 (diff)
7.16.4 preps
Diffstat (limited to 'CHANGES')
-rw-r--r--CHANGES8
1 files changed, 8 insertions, 0 deletions
diff --git a/CHANGES b/CHANGES
index 2557530c2..dcf7b48b9 100644
--- a/CHANGES
+++ b/CHANGES
@@ -6,6 +6,14 @@
Changelog
+Version 7.16.4 (10 July 2007)
+
+Daniel S (10 July 2007)
+- Kees Cook notified us about a security flaw
+ (http://curl.haxx.se/docs/adv_20070710.html) in which libcurl failed to
+ properly reject some outdated or not yet valid server certificates when
+ built with GnuTLS. Kees also provided the patch.
+
James H (5 July 2007)
- Gavrie Philipson provided a patch that will use a more specific error
message for an scp:// upload failure. If libssh2 has his matching