This commit is contained in:
parent
3276cb97f6
commit
a1bab35c28
@ -1,3 +1,27 @@
|
|||||||
|
-------------------------------------------------------------------
|
||||||
|
Wed Nov 18 15:15:37 UTC 2015 - p.drouand@gmail.com
|
||||||
|
|
||||||
|
- Update to version 1.1.2
|
||||||
|
* IMPORTANT: This release includes a number of important security
|
||||||
|
fixes. Among these fixes is improved validation of the database
|
||||||
|
metadata. Unfortunately, MaxMind GeoIP2 and GeoLite2 databases
|
||||||
|
created earlier than January 28, 2014, had an invalid data type
|
||||||
|
for the record_size in the metadata. Previously these databases
|
||||||
|
worked on little endian machines with libmaxminddb but did not
|
||||||
|
work on big endian machines. Due to increased safety checks when
|
||||||
|
reading the file, these databases will no longer work on any
|
||||||
|
platform. If you are using one of these databases, we recommend
|
||||||
|
that you upgrade to the latest GeoLite2 or GeoIP2 database
|
||||||
|
* Added pkg-config support.
|
||||||
|
* Several segmentation faults found with afl-fuzz were fixed. These
|
||||||
|
were caused by missing bounds checking and missing verification
|
||||||
|
of data type.
|
||||||
|
MMDB_get_entry_data_list will now fail on data structures with a
|
||||||
|
depth greater than 512 and data structures that are cyclic. This
|
||||||
|
should not affect any known MaxMind DB in production. All databases
|
||||||
|
produced by MaxMind have a depth of less than five.
|
||||||
|
- Add a build dependency to pkg-config
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
Sun Jul 26 13:48:17 UTC 2015 - p.drouand@gmail.com
|
Sun Jul 26 13:48:17 UTC 2015 - p.drouand@gmail.com
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user