curl_unescape() update

diff --git a/CHANGES b/CHANGES
index 0d1971dee826e830279090bf30c30cf23308b891..7026b9d391fa77124d5c9d9836caf174a15ac369 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -6,7 +6,14 @@
 
                                History of Changes
 
-Version XX
+Version 6.5.1
+
+Daniel (20 March 2000):
+- An anynomous post on sourceforge correctly pointed out a possible buffer
+  overflow in the curl_unescape() function for URL convertions. The main
+  problem with this bug is that the ftp download uses that function and this
+  single- byte overflow could lead to very odd bugs (as one reported by Janne
+  Johansson).
 
 Daniel (19 March 2000):
 - Marco G. Salvagno <mgs@whiz.cjb.net> supplied me with a series of patches