Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package php-maxminddb for openSUSE:Factory checked in at 2026-10-28 17:49:00 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/php-maxminddb (Old) and /work/SRC/openSUSE:Factory/.php-maxminddb.new.2252680 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "php-maxminddb" Wed Oct 28 17:49:00 2026 rev:9 rq:1393380 version:1.14.0 Changes: -------- --- /work/SRC/openSUSE:Factory/php-maxminddb/php-maxminddb.changes 2025-12-22 22:51:29.574593648 +0100 +++ /work/SRC/openSUSE:Factory/.php-maxminddb.new.2252680/php-maxminddb.changes 2026-10-28 17:49:09.923635728 +0100 @@ -1,0 +2,45 @@ +Tue Oct 27 20:27:56 UTC 2026 - Arjen de Korte <[email protected]> + +- Updated to version 1.14.0 + * Bounded the resources that the pure PHP decoder spends on a single lookup. A + crafted database could nest data-section pointers to shared targets so that + decoding one record cost exponential time and memory, or point many times at + one large value so that the decoder copied far more data than the file holds. + The decoder now follows the Reader Resource Limits section of the MaxMind DB + specification. Each lookup is limited to 65,536 values, 512 levels of + nesting, and 2 MiB of string and bytes payload. + * Exceeding a limit throws an `InvalidDatabaseException`. + * Opening a database whose metadata exceeds a limit throws the same + exception. + * A scalar that declares more than 16 bytes, the width of the widest + fixed-width type, is rejected as invalid data. + * The bundled libmaxminddb used by `--with-maxminddb-bundled` builds of the + extension now applies the same decoder limits. The extension throws an + `InvalidDatabaseException` when a lookup exceeds them. + * The pure PHP reader is about 40% faster on City lookups. It no longer seeks + before a read that continues where the last one ended, and it checks read + lengths with `strlen()` instead of `ftell()`. + * The Windows build configuration now accepts either `libmaxminddb.lib` or + `maxminddb.lib` when building the extension. The `lib` prefix was removed + in libmaxminddb 1.6.0, but the libmaxminddb that PHP publishes for Windows + builds is still 1.5.0, which uses the prefixed name. Pull request by + Jean-Baptiste Nahan. + * Replaced `XtOffsetOf()` with `offsetof()`. The `XtOffsetOf()` alias has + been removed in PHP 8.6. Pull request by Remi Collet. + * The extension can now be built from a bundled copy of libmaxminddb, on + both Unix-like systems and Windows, by passing `--with-maxminddb-bundled` + to `configure` (or to `configure.bat` on Windows). This produces an + extension that does not depend on a system libmaxminddb, which is a + prerequisite for distributing precompiled builds; on Windows it also + replaces the 1.5.0 import library that PHP publishes for Windows builds. + The default is unchanged: without the flag, the extension links against a + system libmaxminddb as before. + * The `conflict` constraint on `ext-maxminddb` in `composer.json` is again + updated when a release is cut. The substitution that maintains it stopped + matching in April 2024, when the constraint's separator changed from a comma + to `||`, so the constraint has read `<1.11.1` through four releases. Users of + the C extension should note the effect of reviving it: `ext-maxminddb` is a + Composer platform package, so this release conflicts with an older compiled + extension and `composer update` will require upgrading the two together. + +------------------------------------------------------------------- Old: ---- maxminddb-1.13.1.tgz New: ---- maxminddb-1.14.0.tgz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ php-maxminddb.spec ++++++ --- /var/tmp/diff_new_pack.FigHoW/_old 2026-10-28 17:49:10.699668323 +0100 +++ /var/tmp/diff_new_pack.FigHoW/_new 2026-10-28 17:49:10.701668407 +0100 @@ -1,7 +1,7 @@ # # spec file for package php-maxminddb # -# Copyright (c) 2025 SUSE LLC and contributors +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -31,7 +31,7 @@ %endif Name: %{php_name}-%{pkg_name} -Version: 1.13.1 +Version: 1.14.0 Release: 0 Summary: PHP extension providing access to maxminddb databases License: Apache-2.0 ++++++ maxminddb-1.13.1.tgz -> maxminddb-1.14.0.tgz ++++++ ++++ 3661 lines of diff (skipped)
