minor changes to release notes, for XercesJ2 2.12.0 release
git-svn-id: https://svn.apache.org/repos/asf/xerces/java/trunk@1842774 13f79535-47bb-0310-9956-ffa450edef68
diff --git a/docs/releases.xml b/docs/releases.xml
index cdbc391..cf0945f 100644
--- a/docs/releases.xml
+++ b/docs/releases.xml
@@ -65,6 +65,14 @@
</fix>
<fix>
<note>
+ Fixed possible security issue: an implementation of the NamedNodeMapImpl class in the JAXP component did not
+ limit the amount of memory allocated when creating object instance from a serialized form. A specially-crafted
+ input could cause a java application to use an excessive amount of memory when deserialized.
+ </note>
+ <submitter name='David Dillard, Michael Glavassevich, Mukul Gandhi'/>
+ </fix>
+ <fix>
+ <note>
Implemented minor and major fixes in certain areas, to XML Schema 1.0 and 1.1 implementations.
</note>
<submitter name='Michael Glavassevich, Khaled Noaman, Sandy Gao, Mukul Gandhi'/>
