-------------------------------------------------------------------------------- Fedora EPEL Update Notification FEDORA-EPEL-2026-2e2c0490b8 2026-09-20 01:01:16.127438+00:00 --------------------------------------------------------------------------------
Name : php-maxminddb Product : Fedora EPEL 10.4 Version : 1.14.0 Release : 1.el10_4 URL : https://github.com/maxmind/MaxMind-DB-Reader-php Summary : MaxMind DB Reader extension Description : MaxMind DB is a binary file format that stores data indexed by IP address subnets (IPv4 or IPv6). This optional PHP C Extension is a drop-in replacement for MaxMind\Db\Reader. Databases are available in geolite2-country and geolite2-city packages. -------------------------------------------------------------------------------- Update Information: Version 1.14.0 Bounded the resources that the pure PHP decoder spends on a single lookup. A crafted database could nest data-section pointers to shared targets so that decoding one record cost exponential time and memory, or point many times at one large value so that the decoder copied far more data than the file holds. The decoder now follows the Reader Resource Limits section of the MaxMind DB specification. Each lookup is limited to 65,536 values, 512 levels of nesting, and 2 MiB of string and bytes payload. Exceeding a limit throws an InvalidDatabaseException. Opening a database whose metadata exceeds a limit throws the same exception. A scalar that declares more than 16 bytes, the width of the widest fixed-width type, is rejected as invalid data. The bundled libmaxminddb used by --with-maxminddb-bundled builds of the extension now applies the same decoder limits. The extension throws an InvalidDatabaseException when a lookup exceeds them. The pure PHP reader is about 40% faster on City lookups. It no longer seeks before a read that continues where the last one ended, and it checks read lengths with strlen() instead of ftell(). Replaced XtOffsetOf() with offsetof(). The XtOffsetOf() alias has been removed in PHP 8.6. Pull request by Remi Collet. GitHub #252. The conflict constraint on ext-maxminddb in composer.json is again updated when a release is cut. The substitution that maintains it stopped matching in April 2024, when the constraint's separator changed from a comma to ||, so the constraint has read <1.11.1 through four releases. Users of the C extension should note the effect of reviving it: ext-maxminddb is a Composer platform package, so this release conflicts with an older compiled extension and composer update will require upgrading the two together. GitHub #266. -------------------------------------------------------------------------------- ChangeLog: * Fri Sep 11 2026 Remi Collet <[email protected]> - 1.14.0-1 - update to 1.14.0 - switch to phpunit9 - drop pear/pecl dependency - add pie virtual provides -------------------------------------------------------------------------------- This update can be installed with the "yum" update programs. Use su -c 'yum update php-maxminddb' at the command line. For more information, refer to "YUM", available at https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7\ /html/System_Administrators_Guide/ch-yum.html All packages are signed with the Fedora EPEL GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ epel-package-announce mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
