--- CBOR-XS/Changes	2014/12/14 05:48:38	1.50
+++ CBOR-XS/Changes	2016/04/24 09:11:14	1.57
@@ -3,8 +3,34 @@
 TODO: pack_keys?
 TODO: document encode_cbor_sharing?
 TODO: weaken cyclic structures?
+TODO: allowed_classes or so?
 
+        - the Math::BigFloat maintainer apparently thinks that changing
+          documented maths function to suddenly yield different results or
+          to fail completely on valid input is cool. Try to work around
+          this madness - if Math::BigFloat changes its API too much,
+          future versions will have to remove support for bignums
+          (bugreport by zdm@softvisio.net).
+
+1.41 Thu 25 Feb 15:22:03 CET 2016
+	- avoid perl panics on nested FREEZE/THAW calls (testcase by
+          Victor Efimov).
+
+1.4  Mon Feb  8 05:10:15 CET 2016
+        - buffer overflow fix: a fast path during decoding did not check
+          remaining length when decoding hash keys, found by fuzzing.
+          This can potentially leak information in the error message
+          or crash the process.
+	- use C style { 0 } struct initializer.
+        - upgrade libecb.
+
+1.3  Mon Apr 27 22:21:04 CEST 2015
+	- the incremental parser didn't properly parse tagged values
+          (testcase by Mons Anderson).
 	- slightly speed up encoding of plain (nonmagical) arrays.
+        - try to clarify further that effectively all 32 bit architectures
+          have 64 bit integer support.
+        - upgrade libecb.
 
 1.26 Sat Oct 25 08:35:44 CEST 2014
 	- update the t/57_incr.t subtest that would rely on 64 bit ints.