-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 22 Aug 2026 08:28:09 +1200
Source: xapian-core
Architecture: source
Version: 1.4.32-1~bpo13+1
Distribution: trixie-backports
Urgency: medium
Maintainer: Olly Betts <olly@survex.com>
Changed-By: Olly Betts <olly@survex.com>
Changes:
xapian-core (1.4.32-1~bpo13+1) trixie-backports; urgency=medium
.
* Rebuild for trixie backports.
.
xapian-core (1.4.32-1) unstable; urgency=medium
.
* New upstream release:
+ Fixes a corner case of CVE-2018-0499 which was missed in the original
fix. This corner case would only be possible to exploit if the
MSet::snippet() API is passed empty start and end highlight strings,
which seems an uncommon thing to be doing (I couldn't find any instances
in Debian codesearch of code doing this).
* debian/control.in: Mark conformance with policy 4.7.4.
Checksums-Sha1:
1ab65a2d62816328ca43b777f3dd9a9d32462f44 2429 xapian-core_1.4.32-1~bpo13+1.dsc
86758c8cb3401be0cc9ecb793add010dd55ac050 20520 xapian-core_1.4.32-1~bpo13+1.debian.tar.xz
770597191ce2989a113f5c298c43a4fcae38f559 8185 xapian-core_1.4.32-1~bpo13+1_amd64.buildinfo
Checksums-Sha256:
24a69ad913dbb08cd6ae3ef013ce4397ec4b11bf3f61df06b45dc905dd26f04f 2429 xapian-core_1.4.32-1~bpo13+1.dsc
938e05e17f5c9851360bbfb260cd4b1f9012ad9d127c115620fdcaa937d6c093 20520 xapian-core_1.4.32-1~bpo13+1.debian.tar.xz
c586086ff2583747521c5d7c99e3ceeca0e9a946dc0590bf6510009f43939ff7 8185 xapian-core_1.4.32-1~bpo13+1_amd64.buildinfo
Files:
c975451df7ec748ef03fcdd50f339c9b 2429 libs optional xapian-core_1.4.32-1~bpo13+1.dsc
d05c7a34cc3b5da330000d2cc80d4a8c 20520 libs optional xapian-core_1.4.32-1~bpo13+1.debian.tar.xz
acece511fbde828ca5474741de218a88 8185 libs optional xapian-core_1.4.32-1~bpo13+1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=LEGL
-----END PGP SIGNATURE-----
