Changes: Document #186 and #262

libexpat · Jun 16, 2019 · ed682ae · ed682ae
1 parent 11f8838
commit ed682ae
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/expat/Changes b/expat/Changes
@@ -3,6 +3,13 @@ NOTE: We are looking for help with a few things:
       If you can help, please get in touch.  Thanks!
 
 Release x.x.x XXX XXXXXX XX XXXX
+        Security fixes:
+       #186 #262  Fix extraction of namespace prefixes from XML names;
+                    XML names with multiple colons could end up in the
+                    wrong namespace, and take a high amount of RAM and CPU
+                    resources while processing, opening the door to
+                    use for denial-of-service attacks
+
         Other changes:
        #195 #197  Autotools/CMake: Utilize -fvisibility=hidden to stop
                     exporting non-API symbols
@@ -18,9 +25,11 @@ Release x.x.x XXX XXXXXX XX XXXX
 
         Special thanks to:
             Benjamin Peterson
+            Caolán McNamara
             Hanno Böck
             KangLin
             Marco Maggi
+            Rhodri James
             Sebastian Dröge
             userwithuid
             Yury Gribov