--- CBOR-XS/Changes	2013/12/03 10:23:55	1.44
+++ CBOR-XS/Changes	2016/02/08 04:37:12	1.55
@@ -3,10 +3,40 @@
 TODO: pack_keys?
 TODO: document encode_cbor_sharing?
 TODO: weaken cyclic structures?
+TODO: allowed_classes or so?
+
+1.4  Mon Feb  8 05:10:15 CET 2016
+        - buffer overflow fix: a fast path during decoding did not check
+          remaining length when decoding hash keys, found by fuzzing.
+          This can potentially leak information in the error message
+          or crash the process.
+	- use C style { 0 } struct initializer.
+        - upgrade libecb.
+
+1.3  Mon Apr 27 22:21:04 CEST 2015
+	- the incremental parser didn't properly parse tagged values
+          (testcase by Mons Anderson).
+	- slightly speed up encoding of plain (nonmagical) arrays.
+        - try to clarify further that effectively all 32 bit architectures
+          have 64 bit integer support.
+        - upgrade libecb.
+
+1.26 Sat Oct 25 08:35:44 CEST 2014
+	- update the t/57_incr.t subtest that would rely on 64 bit ints.
+        - disable t/50_rfc.t test that fails because of broken data::dumper.
+
+1.25 Sun Jan  5 15:19:14 CET 2014
+	- map key decoding was pretty much botched due to the recent cleanups.
+	- work around Time::Piece->epoch returning a string value, avoid encoding
+          this as a tag 1 string.
+        - enable more testcases in t/50_rfc.t, now that they work :)
+
+1.2  Tue Dec 10 22:06:42 CET 2013
+	- implement an incremental decoder.
 
 1.12 Tue Dec  3 11:23:22 CET 2013
-	- work around broken Time::Piece (%z doesn't work as documented, gives
-          different results on different platforms(!)).
+	- work around broken Time::Piece (in old versions of the module, %z doesn't
+          work as documented, gives different results on different platforms(!)).
 
 1.11 Sun Dec  1 18:00:00 CET 2013
 	- new setting: validate_utf8, for when you can't trust your cbor data.