Accepting request 620422 from home:alarrosa:branches:server:search

- Update to 1.4.6:
  * API classes now support C++11 move semantics when using a compiler which
    we are confident supports them (currently compilers which define
    __cplusplus >= 201103 plus a special check for MSVC 2015 or later).
    C++11 move semantics provide a clean and efficient way for threaded code to
    hand-off Xapian objects to worker threads, but in this case it's very
    unhelpful for availability of these semantics to vary by compiler as it
    quietly leads to a build with non-threadsafe behaviour.  To address this,
    user code can #define XAPIAN_MOVE_SEMANTICS before #include <xapian.h> to
    force this on, and will then get a compilation failure if the compiler
    lacks suitable support.
  * MSet::snippet():
    + We were only escaping output for HTML/XML in some cases, which would
      potentially allow HTML to be injected into output (this fixes
      bnc#1099925, CVE-2018-0499).
    + Include certain leading non-word characters in snippets.  Previously we
      started the snippet at the start of the first actual word, but there are
      various cases where including non-word characters in front of the actual
      word adds useful context or otherwise aids comprehension.
  * Add MSetIterator::get_sort_key() method.  The sort key has always been
    available internally, but wasn't exposed via the public API before, which
    seems like an oversight as the collapse key has long been available.
  * Database::compact():
    + Allow Compactor::resolve_duplicate_metadata() implementations to delete
      entries.  Previously if an implementation returned an empty string this
      would result in a user meta-data entry with an empty value, which isn't
      normally achievable (empty meta-data values aren't stored), and so will
      cause odd behaviour.  We now handle an empty returned value by
      interpreting it in the natural way - it means that the merged result is
      to not set a value for that key in the output database.

OBS-URL: https://build.opensuse.org/request/show/620422
OBS-URL: https://build.opensuse.org/package/show/server:search/xapian-core?expand=0&rev=80

xapian-core-1.4.5.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:85b5f952de9df925fd13e00f6e82484162fd506d38745613a50b0a2064c6b02b
-size 2810612

xapian-core-1.4.5.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEECOJAD/f+j+3jrLUoGBR7BzutKwcFAlnkJ3QACgkQGBR7Bzut
-KwdE3A//T7iaoWWRfxfxQHmqO7BGTPJZ3UMTx9JYMblHztiXFm6JxU9WDuMz1KDg
-rSHIiVRQsvMETeFlwTzD1IqiRdmF+wFYO0Csa/rLIZkrTE5bIRxVoenE89DhoG5T
-K4+oE4rnXxCi1Ie+8Ik4xByPOHmzCCrZYcToHb0by51nQfGEaf4QqjsZH2FuL32j
-JyV51wW5qDc91IGsJj8yMmvrqK27qGIMnOp43jvc0f9oByRCJO2bnyHABYkQySEy
-nmtaYaNOUkgZbDGvVWB2kauf/N5npVWQAUVDa1QeqTDwf0YbgzhOCd3l6ZbLCoRC
-IvL9Q9CLeZCL4IL7dysgcqRsw1wVErIfG93jC6uCgltSTUszHM4Z10TSdYMI3wlw
-uSBetsd7aSOMXl2xbxiU5U945RE04jootZXCQGB8+3cA77uvi4XOBw5mfgWLS+uM
-cfT4UBJLl7xTiPRjO+2LBRt0z5723T+sAhkmAKhpCClBiCKwN4oR9bE1GPsPuAzU
-z5e/ldikoGSHoDYUcjzF4hXfZrf9CSSUAC6OaEOg3VAgSaUM2j+TPuLypcWmPqpm
-1frmJ/WpjzPm+EmCG4NJSTEgfjd867U6nNJPEQnOKeKNrk2n9EeZWmTwxAonQMdK
-I0zjtAL5HBnk4gN3a5wG3iortD1tiPRJq8gkLE4DJIjueY1pe1w=
-=ROAB
------END PGP SIGNATURE-----

xapian-core-1.4.6.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:1e0ef1c1d3e2119874d545b7edbb60e6e17d7d18fb802eb890d9ef7bb0bbd898
+size 2839964

xapian-core-1.4.6.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=ZHlP
+-----END PGP SIGNATURE-----

xapian-core.changes

@@ -1,3 +1,51 @@
+-------------------------------------------------------------------
+Tue Jul  3 09:21:00 UTC 2018 - alarrosa@suse.com
+
+- Update to 1.4.6:
+  * API classes now support C++11 move semantics when using a compiler which
+    we are confident supports them (currently compilers which define
+    __cplusplus >= 201103 plus a special check for MSVC 2015 or later).
+    C++11 move semantics provide a clean and efficient way for threaded code to
+    hand-off Xapian objects to worker threads, but in this case it's very
+    unhelpful for availability of these semantics to vary by compiler as it
+    quietly leads to a build with non-threadsafe behaviour.  To address this,
+    user code can #define XAPIAN_MOVE_SEMANTICS before #include <xapian.h> to
+    force this on, and will then get a compilation failure if the compiler
+    lacks suitable support.
+
+  * MSet::snippet():
+    + We were only escaping output for HTML/XML in some cases, which would
+      potentially allow HTML to be injected into output (this fixes
+      bnc#1099925, CVE-2018-0499).
+    + Include certain leading non-word characters in snippets.  Previously we
+      started the snippet at the start of the first actual word, but there are
+      various cases where including non-word characters in front of the actual
+      word adds useful context or otherwise aids comprehension.
+
+  * Add MSetIterator::get_sort_key() method.  The sort key has always been
+    available internally, but wasn't exposed via the public API before, which
+    seems like an oversight as the collapse key has long been available.
+
+  * Database::compact():
+    + Allow Compactor::resolve_duplicate_metadata() implementations to delete
+      entries.  Previously if an implementation returned an empty string this
+      would result in a user meta-data entry with an empty value, which isn't
+      normally achievable (empty meta-data values aren't stored), and so will
+      cause odd behaviour.  We now handle an empty returned value by
+      interpreting it in the natural way - it means that the merged result is
+      to not set a value for that key in the output database.
+    + Since 1.3.5 compacting a WritableDatabase with uncommitted changes throws
+      Xapian::InvalidOperationError when compacting to a single-file glass
+      database.  This release adds similar checks for chert and when compacting
+      to a multiple-file glass database.
+    + In the unlikely event that the total number of documents or the total
+      length of all documents overflow when trying to compact a multi-database,
+      we throw an exception.  This is now a DatabaseError exception instead of a
+      const char* exception (a hang-over from before this code was turned into a
+      public API in the library).
+
+  * See also https://xapian.org/docs/xapian-core-1.4.6/NEWS
+
 -------------------------------------------------------------------
 Thu Dec 14 10:43:38 UTC 2017 - alarrosa@suse.com
 

xapian-core.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package xapian-core
 #
-# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,10 +17,10 @@
 
 
 Name:           xapian-core
-Version:        1.4.5
+Version:        1.4.6
 Release:        0
 Summary:        The Xapian Probabilistic Information Retrieval Library
-License:        GPL-2.0
+License:        GPL-2.0-only
 Group:          Productivity/Databases/Servers
 Url:            http://www.xapian.org/
 Source0:        http://www.oligarchy.co.uk/xapian/%{version}/%{name}-%{version}.tar.xz