Hello community, here is the log from the commit of package xapian-core for openSUSE:Factory checked in at 2018-07-07 21:53:16 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/xapian-core (Old) and /work/SRC/openSUSE:Factory/.xapian-core.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "xapian-core" Sat Jul 7 21:53:16 2018 rev:28 rq:620573 version:1.4.6 Changes: -------- --- /work/SRC/openSUSE:Factory/xapian-core/xapian-core.changes 2017-12-19 10:47:47.940309043 +0100 +++ /work/SRC/openSUSE:Factory/.xapian-core.new/xapian-core.changes 2018-07-07 21:53:30.127690796 +0200 @@ -1,0 +2,48 @@ +Tue Jul 3 09:21:00 UTC 2018 - alarr...@suse.com + +- Update to 1.4.6: + * API classes now support C++11 move semantics when using a compiler which + we are confident supports them (currently compilers which define + __cplusplus >= 201103 plus a special check for MSVC 2015 or later). + C++11 move semantics provide a clean and efficient way for threaded code to + hand-off Xapian objects to worker threads, but in this case it's very + unhelpful for availability of these semantics to vary by compiler as it + quietly leads to a build with non-threadsafe behaviour. To address this, + user code can #define XAPIAN_MOVE_SEMANTICS before #include <xapian.h> to + force this on, and will then get a compilation failure if the compiler + lacks suitable support. + + * MSet::snippet(): + + We were only escaping output for HTML/XML in some cases, which would + potentially allow HTML to be injected into output (this fixes + bnc#1099925, CVE-2018-0499). + + Include certain leading non-word characters in snippets. Previously we + started the snippet at the start of the first actual word, but there are + various cases where including non-word characters in front of the actual + word adds useful context or otherwise aids comprehension. + + * Add MSetIterator::get_sort_key() method. The sort key has always been + available internally, but wasn't exposed via the public API before, which + seems like an oversight as the collapse key has long been available. + + * Database::compact(): + + Allow Compactor::resolve_duplicate_metadata() implementations to delete + entries. Previously if an implementation returned an empty string this + would result in a user meta-data entry with an empty value, which isn't + normally achievable (empty meta-data values aren't stored), and so will + cause odd behaviour. We now handle an empty returned value by + interpreting it in the natural way - it means that the merged result is + to not set a value for that key in the output database. + + Since 1.3.5 compacting a WritableDatabase with uncommitted changes throws + Xapian::InvalidOperationError when compacting to a single-file glass + database. This release adds similar checks for chert and when compacting + to a multiple-file glass database. + + In the unlikely event that the total number of documents or the total + length of all documents overflow when trying to compact a multi-database, + we throw an exception. This is now a DatabaseError exception instead of a + const char* exception (a hang-over from before this code was turned into a + public API in the library). + + * See also https://xapian.org/docs/xapian-core-1.4.6/NEWS + +------------------------------------------------------------------- Old: ---- xapian-core-1.4.5.tar.xz xapian-core-1.4.5.tar.xz.asc New: ---- xapian-core-1.4.6.tar.xz xapian-core-1.4.6.tar.xz.asc ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ xapian-core.spec ++++++ --- /var/tmp/diff_new_pack.Nzhaup/_old 2018-07-07 21:53:30.935689768 +0200 +++ /var/tmp/diff_new_pack.Nzhaup/_new 2018-07-07 21:53:30.935689768 +0200 @@ -1,7 +1,7 @@ # # spec file for package xapian-core # -# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany. +# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,10 +17,10 @@ Name: xapian-core -Version: 1.4.5 +Version: 1.4.6 Release: 0 Summary: The Xapian Probabilistic Information Retrieval Library -License: GPL-2.0 +License: GPL-2.0-only Group: Productivity/Databases/Servers Url: http://www.xapian.org/ Source0: http://www.oligarchy.co.uk/xapian/%{version}/%{name}-%{version}.tar.xz ++++++ xapian-core-1.4.5.tar.xz -> xapian-core-1.4.6.tar.xz ++++++ ++++ 43790 lines of diff (skipped)
