--- CBOR-XS/Changes	2014/12/14 06:12:13	1.51
+++ CBOR-XS/Changes	2016/02/08 04:37:12	1.55
@@ -3,10 +3,23 @@
 TODO: pack_keys?
 TODO: document encode_cbor_sharing?
 TODO: weaken cyclic structures?
+TODO: allowed_classes or so?
 
+1.4  Mon Feb  8 05:10:15 CET 2016
+        - buffer overflow fix: a fast path during decoding did not check
+          remaining length when decoding hash keys, found by fuzzing.
+          This can potentially leak information in the error message
+          or crash the process.
+	- use C style { 0 } struct initializer.
+        - upgrade libecb.
+
+1.3  Mon Apr 27 22:21:04 CEST 2015
+	- the incremental parser didn't properly parse tagged values
+          (testcase by Mons Anderson).
 	- slightly speed up encoding of plain (nonmagical) arrays.
         - try to clarify further that effectively all 32 bit architectures
           have 64 bit integer support.
+        - upgrade libecb.
 
 1.26 Sat Oct 25 08:35:44 CEST 2014
 	- update the t/57_incr.t subtest that would rely on 64 bit ints.