"Igor" pointed out that CURLOPT_COOKIELIST set to "ALL" leaked memory, and so did "SESS". Fixed now. 
diff --git a/RELEASE-NOTES b/RELEASE-NOTES index 527059e..ae8b86b 100644 --- a/RELEASE-NOTES +++ b/RELEASE-NOTES 
@@ -60,6 +60,7 @@  o curl_multi_fdset() failed to return socket while doing CONNECT over proxy  o curl_multi_remove_handle() on a handle that is in used for a pipeline now  break that pipeline + o CURLOPT_COOKIELIST memory leaks    This release includes the following known bugs: