diff --git a/htdocs/index.html b/htdocs/index.html
index bb3ac2ab..0b95dea1 100644
--- a/htdocs/index.html
+++ b/htdocs/index.html
@@ -1,5 +1,6 @@
+
The Expat XML Parser
@@ -60,21 +61,67 @@ of Expat.
Release ??? includes security & other bug fixes.
Security fixes
+
+ - CVE-2016-0718
+ (issue 537)
+ - Fix crash on malformed input
+ - CVE-2016-4472
+ - Improve insufficient fix to
+ CVE-2015-1283 /
+ CVE-2015-2716
+ introduced with Expat 2.1.1
+ - CVE-2016-5300
+ (issue 499)
+ - Use more entropy for hash initialization than the original fix to
+ CVE-2012-0876
+ - CVE-2012-6702
+ (issue 519)
+ - Resolve troublesome internal call to srand that was introduced
+ with Expat 2.1.0 when addressing CVE-2012-0876
+ (issue 496)
+
+ Bug fixes
- - Use more entropy for hash initialization
- (bug 499)
- - Resolve troublesome internal call to srand
- (bug 519)
+ - Fix uninitialized reads of size 1 (e.g. in
little2_updatePosition)
+ - Fix detection of UTF-8 character boundaries
Other changes
- Fix compilation for Visual Studio 2010
(bug 532)
- - Fix static build (
BUILD_shared=OFF) with CMake on Windows
+ - Autotools: Resolve use of "$<" to better support bmake
+ - Autotools: Add QA script "qa.sh" (and make target "qa")
+ - Autotools: Respect
CXXFLAGS if given
+ - Autotools: Fix "make run-xmltest"
+ - Autotools: Have "make run-xmltest" check for expected output
+ - CMake: Fix static build (
BUILD_shared=OFF) on Windows
(patch 90)
+ - CMake: Add soversion, support
-DNO_SONAME=yes to bypass
+ (bug 536)
+ - CMake: Add suffix "d" to differentiate debug from release
+ (bug 323)
+ - CMake: Define
WIN32 with CMake on Windows
+ - Annotate memory allocators for GCC
+ - Address all currently known compile warnings
+ - Make sure that API symbols remain visible despite
-fvisibility=hidden
- Remove executable flag from source files
- - Address some compile warnings
+ - Resolve
COMPILED_FROM_DSP in favor of WIN32
+
+ Special thanks to
+ - Björn Lindahl
+ - Christian Heimes
+ - Cristian Rodríguez
+ - Daniel Krügler
+ - Gustavo Grieco
+ - Karl Waclawek
+ - László Böszörményi
+ - Pascal Cuoq
+ - Sergei Nikulov
+ - Thomas Beutlich
+ - Warren Young
+ - Yann Droneaud
+
12 March 2016,
Expat 2.1.1 released.