Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package python-maxminddb for
openSUSE:Factory checked in at 2026-09-21 12:00:00
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/python-maxminddb (Old)
and /work/SRC/openSUSE:Factory/.python-maxminddb.new.383539 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "python-maxminddb"
Mon Sep 21 12:00:00 2026 rev:20 rq:1379003 version:3.2.0
Changes:
--------
--- /work/SRC/openSUSE:Factory/python-maxminddb/python-maxminddb.changes
2026-09-12 21:15:19.548413667 +0200
+++
/work/SRC/openSUSE:Factory/.python-maxminddb.new.383539/python-maxminddb.changes
2026-09-21 12:00:02.297234961 +0200
@@ -1,0 +2,17 @@
+Sat Sep 12 11:30:58 UTC 2026 - Martin Pluskal <[email protected]>
+
+- Update to 3.2.0:
+ * pure Python DoS hardening: decode limits (65536 values, 512 nesting
+ levels, 2 MiB string/bytes payload), oversized integer rejection,
+ invalid search tree sizes rejected at open
+ * truncated reads that raised IndexError/struct.error now raise
+ InvalidDatabaseError
+ * vendored libmaxminddb 1.14.0 adds the same limits to the C extension;
+ shipped extension still builds against system libmaxminddb, not the
+ vendored copy
+ * faster pure Python lookups
+- Export MAXMINDDB_USE_SYSTEM_LIBMAXMINDDB in %check so the extension
+ resource-limit tests skip (as upstream intends) until system
+ libmaxminddb reaches 1.14.0, instead of failing
+
+-------------------------------------------------------------------
Old:
----
maxminddb-3.1.1.tar.gz
New:
----
maxminddb-3.2.0.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ python-maxminddb.spec ++++++
--- /var/tmp/diff_new_pack.fhX7ku/_old 2026-09-21 12:00:02.968263104 +0200
+++ /var/tmp/diff_new_pack.fhX7ku/_new 2026-09-21 12:00:02.970263188 +0200
@@ -18,7 +18,7 @@
%{?sle15_python_module_pythons}
Name: python-maxminddb
-Version: 3.1.1
+Version: 3.2.0
Release: 0
Summary: Reader for the MaxMind DB format
License: Apache-2.0
@@ -64,6 +64,9 @@
%check
# else the extension tests skip themselves when the .so is missing
export MM_FORCE_EXT_TESTS=1
+# else the 3.2.0 resource-limit tests fail instead of skipping against
+# system libmaxminddb < 1.14.0 (upstream keys the skip off this var)
+export MAXMINDDB_USE_SYSTEM_LIBMAXMINDDB=1
%pytest_arch
%files %{python_files}
++++++ maxminddb-3.1.1.tar.gz -> maxminddb-3.2.0.tar.gz ++++++
++++ 102453 lines of diff (skipped)
