Added notice about incompatibility with old databases

maxmind · Nov 17, 2015 · 8749c4b · 8749c4b
1 parent 49f4d3a
commit 8749c4b
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/Changes.md b/Changes.md
@@ -1,5 +1,14 @@
 ## 1.1.2 - 2015-11-16
 
+* IMPORTANT: This release includes a number of important security fixes. Among
+  these fixes is improved validation of the database metadata. Unfortunately,
+  MaxMind GeoIP2 and GeoLite2 databases created earlier than January 28, 2014,
+  had an invalid data type for the `record_size` in the metadata. Previously
+  these databases worked on little endian machines with libmaxminddb but did
+  not work on big endian machines. Due to increased safety checks when reading
+  the file, these databases will no longer work on any platform. If you are
+  using one of these databases, we recommend that you upgrade to the latest
+  GeoLite2 or GeoIP2 database
 * Added pkg-config support. If your system supports it, then running `make
   install` now installs a `libmaxminddb.pc` file for pkgconfig. Implemented by
   Jan Vcelak.