Xapian 1.4.6 can now be downloaded from: https://xapian.org/download This release includes a fix for CVE-2018-0499: https://trac.xapian.org/wiki/SecurityFixes/2018-07-02 The wiki will shortly have a summary of the most notable changes: https://trac.xapian.org/wiki/ReleaseOverview/1.4.6 A big thanks to the following people for helping to make this release a reality: Germán M. Bravo, Robert Stepanek, 张少华, Gaurav Arora, Andy Chilton, sielicki, Guruprasad Hegde, Richard Boulton, Antoine Beaupré, David Bremner, Uppinder Chugh, orbea, James Aylett, addy007-icy. If I've missed anyone out, you can claim an extra big thankyou. As always, if you encounter problems, please report them here, or to the bug-tracker: https://xapian.org/bugs You can find detached GPG signatures for each of the release tarballs in a corresponding file with ".asc" appended. Here are the SHA256 checksums of the released files: 71693c803c4b12a7f11ec3e1b8b9d79b1a66cc1cf10ca07d204290638d51b57c xapian-bindings-1.4.6.tar.xz 1e0ef1c1d3e2119874d545b7edbb60e6e17d7d18fb802eb890d9ef7bb0bbd898 xapian-core-1.4.6.tar.xz 45d061cec93e545f7d4b1cdffdd6cb2ff227919ddbe7cd3b42de077abf667b8f xapian-omega-1.4.6.tar.xz Cheers, Olly -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 833 bytes Desc: not available URL: <http://lists.xapian.org/pipermail/xapian-discuss/attachments/20180702/4f330963/attachment.sig>