Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package dpkg for openSUSE:Factory checked in at 2026-05-04 12:48:14 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/dpkg (Old) and /work/SRC/openSUSE:Factory/.dpkg.new.30200 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "dpkg" Mon May 4 12:48:14 2026 rev:48 rq:1350410 version:1.22.22 Changes: -------- --- /work/SRC/openSUSE:Factory/dpkg/dpkg.changes 2025-10-21 11:14:30.729981260 +0200 +++ /work/SRC/openSUSE:Factory/.dpkg.new.30200/dpkg.changes 2026-05-04 12:48:16.708538495 +0200 @@ -1,0 +2,21 @@ +Fri May 1 20:02:57 UTC 2026 - Martin Schreiner <[email protected]> + +- Fix 'dpkg' package for immutable mode (jsc#PED-14790). +- Add dpkg.tmpfiles. +- Update to 1.22.22 (minor bump from 1.22.21). +- Changelog: + * dpkg-query: Fix segfault with empty -S argument. + * Perl modules: + - Dpkg::OpenPGP: Do not run verify with no keyrings. + - Dpkg::Shlibs::Objdump::Object: + Add support for "Version References" symbols. + - Dpkg::OpenPGP::Backend::GnuPG: Add missing Dpkg::Gettext import. + * Code internals: + - libdpkg: Terminate zstd decompression when we have no more data. + Fixes CVE-2026-2219. +- Remove patch file: + * CVE-2026-2219.patch + * oldperl.patch + This patch has been removed as Leap 15.X has reached end-of-life. + +------------------------------------------------------------------- update-alternatives.changes: same change Old: ---- dpkg_1.22.21.tar.xz oldperl.patch New: ---- dpkg.tmpfiles dpkg_1.22.22.tar.xz ----------(Old B)---------- Old:/work/SRC/openSUSE:Factory/.dpkg.new.30200/dpkg.changes- * CVE-2026-2219.patch /work/SRC/openSUSE:Factory/.dpkg.new.30200/dpkg.changes: * oldperl.patch /work/SRC/openSUSE:Factory/.dpkg.new.30200/dpkg.changes- This patch has been removed as Leap 15.X has reached end-of-life. -- /work/SRC/openSUSE:Factory/.dpkg.new.30200/update-alternatives.changes- * CVE-2026-2219.patch /work/SRC/openSUSE:Factory/.dpkg.new.30200/update-alternatives.changes: * oldperl.patch /work/SRC/openSUSE:Factory/.dpkg.new.30200/update-alternatives.changes- This patch has been removed as Leap 15.X has reached end-of-life. ----------(Old E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ dpkg.spec ++++++ --- /var/tmp/diff_new_pack.g9sQze/_old 2026-05-04 12:48:18.108596048 +0200 +++ /var/tmp/diff_new_pack.g9sQze/_new 2026-05-04 12:48:18.108596048 +0200 @@ -1,7 +1,7 @@ # # spec file for package dpkg # -# Copyright (c) 2025 SUSE LLC and contributors +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,21 +17,19 @@ Name: dpkg -Version: 1.22.21 +Version: 1.22.22 Release: 0 Summary: Debian package management system License: GPL-2.0-or-later Group: System/Packages URL: https://tracker.debian.org/pkg/%{name} Source0: https://ftp.debian.org/debian/pool/main/d/dpkg/%{name}_%{version}.tar.xz -Source3: sensible-editor -# PATCH-FIX-OPENSUSE replace debian with opensuse. replace macros. update-alternatives temp directories' path and name from dpkg* to rpm*. -Patch1: update-alternatives-suse.patch +Source1: sensible-editor +Source2: dpkg.tmpfiles # PATCH-FIX-SUSE: tar of Leap 42.{2,3} does not recognize --sort=name, --clamp-mtime options Patch2: drop-tar-option.patch Patch3: ncurses-fix.patch Patch4: openssl.patch -Patch5: oldperl.patch BuildRequires: autoconf BuildRequires: automake BuildRequires: gcc-c++ @@ -41,9 +39,8 @@ BuildRequires: libtool BuildRequires: ncurses-devel BuildRequires: openssl-devel -BuildRequires: perl >= 5.26.0 +BuildRequires: perl >= 5.28.1 BuildRequires: po4a >= 0.59 -BuildRequires: update-alternatives BuildRequires: xz-devel BuildRequires: zlib-devel BuildRequires: perl(Date::Parse) @@ -53,7 +50,6 @@ Requires: cpio Requires: make Requires: patch -Requires: update-alternatives Requires: perl(Date::Parse) Requires(post): coreutils Recommends: perl(File::FcntlLock) @@ -87,13 +83,11 @@ %prep %setup -q -%patch -P 1 -p1 %if 0%{?suse_version} == 1315 %patch -P 2 -p1 %endif %patch -P 3 -p1 %patch -P 4 -p1 -%patch -P 5 -p1 %build %global _lto_cflags %{_lto_cflags} -ffat-lto-objects @@ -130,9 +124,15 @@ %install %make_install +# tmpfiles: install snippet +mkdir -p %{buildroot}%{_prefix}/lib/tmpfiles.d +install -m 644 %{SOURCE2} %{buildroot}%{_prefix}/lib/tmpfiles.d/dpkg.conf + +# tmpfiles: remove directory structure that will be created by systemd-tmpfiles +rm -rf %{buildroot}%{_localstatedir}/lib/dpkg + # remove update-alternatives stuff (included in separate package) rm -rf %{buildroot}%{_sysconfdir}/alternatives -rm -rf %{buildroot}%{_localstatedir}/lib/dpkg/alternatives rm -rf %{buildroot}%{_bindir}/update-alternatives rm -rf %{buildroot}%{_sbindir}/update-alternatives rm -rf %{buildroot}%{_mandir}/man8/update-alternatives.8 @@ -146,16 +146,13 @@ cat dselect.lang dpkg-dev.lang >> %{name}.lang # extras -install -m 755 %{SOURCE3} %{buildroot}%{_bindir} +install -m 755 %{SOURCE1} %{buildroot}%{_bindir} %check %make_build check %post -cd %{_localstatedir}/lib/dpkg -for f in diversions statoverride status ; do - [ ! -f $f ] && touch $f -done +%tmpfiles_create dpkg.conf exit 0 %files lang -f %{name}.lang @@ -168,17 +165,55 @@ %exclude %{_mandir}/man*/update-alternatives* %dir %{_sysconfdir}/dpkg %config(noreplace) %{_sysconfdir}/dpkg/* -%{_bindir}/* -%{_sbindir}/* +%{_bindir}/dpkg +%{_bindir}/dpkg-architecture +%{_bindir}/dpkg-buildapi +%{_bindir}/dpkg-buildflags +%{_bindir}/dpkg-buildpackage +%{_bindir}/dpkg-buildtree +%{_bindir}/dpkg-checkbuilddeps +%{_bindir}/dpkg-deb +%{_bindir}/dpkg-distaddfile +%{_bindir}/dpkg-divert +%{_bindir}/dpkg-genbuildinfo +%{_bindir}/dpkg-genchanges +%{_bindir}/dpkg-gencontrol +%{_bindir}/dpkg-gensymbols +%{_bindir}/dpkg-maintscript-helper +%{_bindir}/dpkg-mergechangelogs +%{_bindir}/dpkg-name +%{_bindir}/dpkg-parsechangelog +%{_bindir}/dpkg-query +%{_bindir}/dpkg-realpath +%{_bindir}/dpkg-scanpackages +%{_bindir}/dpkg-scansources +%{_bindir}/dpkg-shlibdeps +%{_bindir}/dpkg-source +%{_bindir}/dpkg-split +%{_bindir}/dpkg-statoverride +%{_bindir}/dpkg-trigger +%{_bindir}/dpkg-vendor +%{_bindir}/dselect +%{_bindir}/sensible-editor +%{_sbindir}/start-stop-daemon %{_libexecdir}/dpkg %{_datadir}/dpkg %dir %{_datadir}/zsh %dir %{_datadir}/zsh/vendor-completions %{_datadir}/zsh/vendor-completions/_dpkg-parsechangelog -%{_localstatedir}/lib/dpkg %{perl_vendorlib}/Dpkg %{perl_vendorlib}/Dpkg.pm %{perl_vendorlib}/Dselect +%{_tmpfilesdir}/dpkg.conf +%ghost %attr(755,root,root) %dir %{_localstatedir}/lib/dpkg +%ghost %attr(755,root,root) %dir %{_localstatedir}/lib/dpkg/info +%ghost %attr(755,root,root) %dir %{_localstatedir}/lib/dpkg/methods +%ghost %attr(755,root,root) %dir %{_localstatedir}/lib/dpkg/methods/file +%ghost %attr(755,root,root) %dir %{_localstatedir}/lib/dpkg/methods/ftp +%ghost %attr(755,root,root) %dir %{_localstatedir}/lib/dpkg/methods/media +%ghost %attr(755,root,root) %dir %{_localstatedir}/lib/dpkg/methods/mnt +%ghost %attr(755,root,root) %dir %{_localstatedir}/lib/dpkg/parts +%ghost %attr(755,root,root) %dir %{_localstatedir}/lib/dpkg/updates %files devel %{_datadir}/aclocal/*.m4 ++++++ update-alternatives.spec ++++++ --- /var/tmp/diff_new_pack.g9sQze/_old 2026-05-04 12:48:18.176598843 +0200 +++ /var/tmp/diff_new_pack.g9sQze/_new 2026-05-04 12:48:18.176598843 +0200 @@ -1,7 +1,7 @@ # # spec file for package update-alternatives # -# Copyright (c) 2025 SUSE LLC and contributors +# Copyright (c) 2026 SUSE LLC and contributors # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ Name: update-alternatives -Version: 1.22.21 +Version: 1.22.22 Release: 0 Summary: Maintain symbolic links determining default commands License: GPL-2.0-or-later @@ -28,14 +28,13 @@ Patch0: update-alternatives-suse.patch Patch1: update-alternatives-slavetomaster.patch Patch2: openssl.patch -Patch5: oldperl.patch BuildRequires: autoconf BuildRequires: automake BuildRequires: gcc-c++ BuildRequires: libtool BuildRequires: ncurses-devel BuildRequires: openssl-devel -BuildRequires: perl >= 5.26.0 +BuildRequires: perl >= 5.28.1 BuildRequires: pkgconfig Provides: alternatives = %{version} ++++++ dpkg.tmpfiles ++++++ d /var/lib/dpkg 0755 root root - d /var/lib/dpkg/info 0755 root root - d /var/lib/dpkg/methods 0755 root root - d /var/lib/dpkg/methods/file 0755 root root - d /var/lib/dpkg/methods/ftp 0755 root root - d /var/lib/dpkg/methods/media 0755 root root - d /var/lib/dpkg/methods/mnt 0755 root root - d /var/lib/dpkg/parts 0755 root root - d /var/lib/dpkg/updates 0755 root root - ++++++ dpkg_1.22.21.tar.xz -> dpkg_1.22.22.tar.xz ++++++ ++++ 1845 lines of diff (skipped)
