Xapian 2.1.0 released

Olly Betts via Xapian-discuss <[email protected]> Fri, 14 Aug 2026 11:50:40 +1200

Newsgroups	gmane.comp.search.xapian.general
Message-ID	<[email protected]>

Xapian 2.1.0 can now be downloaded from:

https://xapian.org/download

This release is mainly composed of optimisations and bug fixes.

It includes a xapian-core fix which potentially has security
implications, though is only possible to exploit if the API is used in
an uncommon way:

https://trac.xapian.org/wiki/SecurityFixes/2018-07-02#a2026-08-13update

(This bug also affects 1.4.x - we recently released 1.4.32 which
includes the fix; patches are provided on the page linked above if
you want to cherry-pick just the fix and apply it to an older release.)

The wiki has the usual summary of the most notable changes:

https://trac.xapian.org/wiki/ReleaseOverview/2.1.0

A big thanks to Arpit Jain, Sergei Trofimovich, Darrin Smart,
Germán M. Bravo, Jim O’Regan, Saeid Darvish, Kamohelo Lebjane,
E. Timothy Uy, Antonio Rojas and James Aylett for helping to make this
release a reality.

If I've missed anyone out, you can claim an extra big thankyou.

As always, if you encounter problems, please report them here, or to
the bug-tracker: https://xapian.org/bugs

You can find detached GPG signatures for each of the release tarballs
in a corresponding file with ".asc" appended.

Here are the SHA256 checksums of the released files:

f52ec189f13b4fa66ea625a6eb94bb32dd651b9ec806be6a911dda54cbe3875c  xapian-bindings-2.1.0.tar.xz
8e1259586d342e3d12b5e1f772e9185a10f2ba16e541566b5c3c239f71b8aacc  xapian-core-2.1.0.tar.xz
e3bcf29b5fcb790c28c3e90624ff9297a9a44914f0ba566cb3ee677a015097be  xapian-omega-2.1.0.tar.xz

Cheers,
    Olly

signature.asc (application/pgp-signature, 833 B)