[Winmerge-development] New 2.12.x stable release?

[Kimmo V. <ki...@wi...>]

Hi,

I know I've been telling past year this won't happen. But after the DLL 
injection security issue I've started reconsidering releasing one more 
2.12.x stable release. There is list in net about vulnerable 
applications 
(http://secunia.com/advisories/windows_insecure_library_loading/) and 
that includes WinMerge. So if we don't do something we get bad 
reputation and users have to start looking for other programs.

The fact is as I've earlier told I don't have VS2003 anymore. So I must 
update the compiler and runtime environment also. Luckily we went 
through this already in 2.13.x so we hopefully can deal with it without 
too much pain. It doesn't make much sense to update to VS2005 runtimes 
so we will update to VS2008 runtimes. There is a risk in doing this and 
I really rather avoid it in stable releases. But we have no other options.

Next 2.12.x stable won't be a similar stable update release than earlier 
updates have been. So I'm also bumping the version number to 2.12.10 or 
something like that.

This is also a possibility to add some bug fixes to the release. There 
are lots of bug fixes done over last year and we can merge some of those 
also to 2.12.x now. I've no time to look through our changelog and check 
every commit but if you have fixes in mind you want to see in stable 
update please tell.

Regards,
Kimmo