diff --git a/CHANGES b/CHANGES
index 48b4e35cb..ecd02efea 100644
--- a/CHANGES
+++ b/CHANGES
@@ -6,6 +6,13 @@
 
                                   Changelog
 
+Daniel (4 August 2004)
+- Gisle Vanem provided a fix for the multi interface and connecting to a host
+  using multiple IP (bad) addresses.
+
+- Dylan Salisbury made libcurl no longer accept cookies set to a TLD only (it
+  previously allowed that on the seven three-letter domains).
+
 Daniel (31 July 2004)
 - Joel Chen reported that the digest code assumed quotes around the contents a
   bit too much.
diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index c4ca9e199..7073aadf6 100644
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -20,6 +20,7 @@ This release includes the following changes:
 
 This release includes the following bugfixes:
 
+ o no longer accepts any cookies with domain set to just a TLD
  o HTTP Digest fix for properties without quotes in the header
  o a bad Host: header case on re-used connections over proxy was fixed
  o a duplicate Host: header case on re-used connections was fixed
@@ -67,6 +68,6 @@ advice from friends like these:
  Günter Knauf, Marty Kuhrt, Kjetil Jacobsen, Steven Bazyl, Seshubabu Pasam,
  Luca Alteas, Jean-Louis Lemaire, David Byron, David Cohen, Rob Stanzel,
  Niels van Tongeren, Andrés García, Toby Peterson, Casey O'Donnell, Brian
- Akins, Bertrand Demiddelaer, Joel Chen
+ Akins, Bertrand Demiddelaer, Joel Chen, Dylan Salisbury
 
         Thanks! (and sorry if I forgot to mention someone)