Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package musescore for openSUSE:Factory checked in at 2026-08-11 17:13:13 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/musescore (Old) and /work/SRC/openSUSE:Factory/.musescore.new.17972 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "musescore" Tue Aug 11 17:13:13 2026 rev:56 rq:1370489 version:4.7.4 Changes: -------- --- /work/SRC/openSUSE:Factory/musescore/musescore.changes 2026-01-21 14:17:58.932469212 +0100 +++ /work/SRC/openSUSE:Factory/.musescore.new.17972/musescore.changes 2026-08-11 17:14:37.639668473 +0200 @@ -1,0 +2,41 @@ +Sun Aug 9 02:41:26 UTC 2026 - Marcus Rueckert <[email protected]> + +- Update to 4.7.4: + This update adds new East-Asian instruments and fixes several + minor engraving issues, accessibility bugs, and crashes. + + To learn more, see the full announcements for 4.7.4 at + https://musescore.org/en/4.7.4 + +------------------------------------------------------------------- +Mon Jun 15 13:20:24 UTC 2026 - Cor Blom <[email protected]> + +- Remove sndfile BuildRequires, no longer needed. + +------------------------------------------------------------------- +Sat Jun 13 19:45:51 UTC 2026 - Cor Blom <[email protected]> + +- Update to 4.7.3: + * This update contains fixes for several crashes as well as the + total page count variable in headers & footers. We also added + an option to disable the low pass filter for MS Basic, which + should help if you found certain instruments to be too quiet + in 4.7. +- Build with flac, lame and pipewire +- Build without pulse and jack + +------------------------------------------------------------------- +Wed Jun 10 07:37:16 UTC 2026 - Cor Blom <[email protected]> + +- Update to 4,7,2: + * 4.7 is a feature release. For details about what is new, see: + https://musescore.org/en/4.7 + * 4.7.1 mainly has stability fixes + * 4.7.2 has further stability improvements during startup. It + also contains a number of minor fixes for page numbers, bends, + piano pedal line hooks, and chord symbols, as well as various + musicxml import/export enhancements +- Add musescore-CVE-2025-56225.patch for included Fluidsynth + (from Fedora) (CVE-2025-56225) + +------------------------------------------------------------------- @@ -93 +134 @@ - For all details see https://musescore.org/en/4.6 + For all details see https://musescore.org/en/4.6.2 Old: ---- MuseScore-4.6.5.tar.gz New: ---- MuseScore-4.7.4.tar.gz musescore-CVE-2025-56225.patch ----------(New B)---------- New: musicxml import/export enhancements - Add musescore-CVE-2025-56225.patch for included Fluidsynth (from Fedora) (CVE-2025-56225) ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ musescore.spec ++++++ --- /var/tmp/diff_new_pack.o2cAds/_old 2026-08-11 17:14:40.231778274 +0200 +++ /var/tmp/diff_new_pack.o2cAds/_new 2026-08-11 17:14:40.231778274 +0200 @@ -23,11 +23,11 @@ # Workaround boo#1189991 %define _lto_cflags %{nil} %define rname mscore -%define version_lesser 4.6 +%define version_lesser 4.7 %define fontdir %{_datadir}/fonts/%{name} %define docdir %{_docdir}/%{name} Name: musescore -Version: 4.6.5 +Version: 4.7.4 Release: 0 Summary: A WYSIWYG music score typesetter # Licenses in MuseScore are a mess. To help other maintainers I give the following overview: @@ -62,6 +62,8 @@ Source3: https://ftp.osuosl.org/pub/musescore/soundfont/MuseScore_General/MuseScore_General_Readme.md Source4: https://ftp.osuosl.org/pub/musescore/soundfont/MuseScore_General/MuseScore_General.sf3 Source5: README.SUSE +# Patch for CVE-2025-56225 +Patch0: musescore-CVE-2025-56225.patch BuildRequires: cmake BuildRequires: fdupes %if 0%{?suse_version} < 1560 && 0%{?sle_version} <= 150600 @@ -90,7 +92,6 @@ BuildRequires: cmake(Qt6LinguistTools) BuildRequires: cmake(Qt6Network) BuildRequires: cmake(Qt6NetworkAuth) -BuildRequires: cmake(Qt6OpenGL) BuildRequires: cmake(Qt6PrintSupport) BuildRequires: cmake(Qt6Qml) BuildRequires: cmake(Qt6Quick) @@ -102,28 +103,26 @@ BuildRequires: cmake(Qt6StateMachine) BuildRequires: cmake(Qt6Svg) BuildRequires: cmake(Qt6Test) +BuildRequires: cmake(Qt6WebSockets) BuildRequires: cmake(Qt6Widgets) BuildRequires: cmake(Qt6Xml) BuildRequires: cmake(tinyxml2) BuildRequires: pkgconfig(alsa) -# it could use this but our flac doesnt provide the cmake file and the finder in MuseScore does not find it just via pkgconfig -# BuildRequires: pkgconfig(flac) -# it looks for it but then doesnt find it. -# BuildRequires: pkgconfig(fluidsynth) +BuildRequires: pkgconfig(flac) +# TODO: check if cmake config line is necessary for this +BuildRequires: pkgconfig(fluidsynth) BuildRequires: pkgconfig(freetype2) BuildRequires: pkgconfig(harfbuzz) -BuildRequires: pkgconfig(jack) -# it looks for it but then doesnt find it. -# BuildRequires: pkgconfig(lame) -BuildRequires: pkgconfig(libpulse) +BuildRequires: pkgconfig(lame) BuildRequires: pkgconfig(libopusenc) +BuildRequires: pkgconfig(libpipewire-0.3) +BuildRequires: pkgconfig(libpulse) BuildRequires: pkgconfig(libpulse-mainloop-glib) BuildRequires: pkgconfig(libpulse-simple) BuildRequires: pkgconfig(ogg) BuildRequires: pkgconfig(opus) BuildRequires: pkgconfig(portaudio-2.0) BuildRequires: pkgconfig(portaudiocpp) -BuildRequires: pkgconfig(sndfile) BuildRequires: pkgconfig(vorbis) BuildRequires: pkgconfig(vorbisenc) BuildRequires: pkgconfig(vorbisfile) @@ -200,14 +199,18 @@ -DMUSESCORE_BUILD_CONFIGURATION=app \ -DMUSE_APP_BUILD_MODE=release \ -DMUE_BUILD_UNIT_TESTS=OFF \ + -DMUE_COMPILE_USE_SYSTEM_FLAC:BOOL=ON \ -DMUE_COMPILE_USE_SYSTEM_FREETYPE:BOOL=ON \ -DMUE_COMPILE_USE_SYSTEM_HARFBUZZ:BOOL=ON \ + -DMUE_COMPILE_USE_SYSTEM_LAME:BOOL=ON \ -DMUE_COMPILE_USE_SYSTEM_OPUS:BOOL=ON \ -DMUE_COMPILE_USE_SYSTEM_OPUSENC:BOOL=ON \ -DMUE_COMPILE_USE_SYSTEM_TINYXML:BOOL=ON \ - -DMUE_ENABLE_AUDIO_JACK=OFF \ + -DMUSE_MODULE_AUDIO_PIPEWIRE:BOOL=ON \ + -DMUSE_MODULE_NETWORK_WEBSOCKET:BOOL=ON \ -DMUE_BUILD_UPDATE_MODULE=OFF \ -DMUE_BUILD_CRASHPAD_CLIENT=OFF \ + -DMUE_BUILD_IMPEXP_MNX_MODULE=OFF \ -Wno-dev %cmake_build @@ -238,10 +241,8 @@ # collect doc files install -d -m 755 %{buildroot}%docdir install -p -m 644 README.SUSE %{buildroot}%docdir/ -install -p -m 644 thirdparty/beatroot/COPYING %{buildroot}%docdir/COPYING.beatroot -install -p -m 644 thirdparty/beatroot/README.txt %{buildroot}%docdir/README.txt.beatroot install -p -m 644 thirdparty/dtl/COPYING %{buildroot}%docdir/COPYING.BSD.dtl -install -p -m 644 src/framework/draw/thirdparty/freetype/freetype-2.13.1/README %{buildroot}%docdir/README.freetype +install -p -m 644 src/framework/draw/thirdparty/freetype/freetype-2.14.1/README %{buildroot}%docdir/README.freetype install -p -m 644 thirdparty/intervaltree/README %{buildroot}%docdir/README.intervaltree install -p -m 644 thirdparty/rtf2html/ChangeLog %{buildroot}%docdir/ChangeLog.rtf2html install -p -m 644 thirdparty/rtf2html/COPYING.LESSER %{buildroot}%docdir/COPYING.LESSER.rtf2html ++++++ MuseScore-4.6.5.tar.gz -> MuseScore-4.7.4.tar.gz ++++++ /work/SRC/openSUSE:Factory/musescore/MuseScore-4.6.5.tar.gz /work/SRC/openSUSE:Factory/.musescore.new.17972/MuseScore-4.7.4.tar.gz differ: char 13, line 1 ++++++ musescore-CVE-2025-56225.patch ++++++ See: https://nvd.nist.gov/vuln/detail/CVE-2025-56225 https://github.com/FluidSynth/fluidsynth/issues/1602 https://github.com/FluidSynth/fluidsynth/pull/1607 --- MuseScore-4.6.5/src/framework/audio/thirdparty/fluidsynth/fluidsynth-2.3.3/src/synth/fluid_synth_monopoly.c.orig 2025-12-17 10:00:27.000000000 -0700 +++ MuseScore-4.6.5/src/framework/audio/thirdparty/fluidsynth/fluidsynth-2.3.3/src/synth/fluid_synth_monopoly.c 2026-01-09 10:59:43.699922275 -0700 @@ -410,7 +410,7 @@ int fluid_synth_noteoff_mono_LOCAL(fluid fluid_channel_breath_msb(channel)) { /* legato playing detection */ - if(channel->mode & FLUID_CHANNEL_LEGATO_PLAYING) + if((channel->mode & FLUID_CHANNEL_LEGATO_PLAYING) && channel->preset != NULL) { /* the list contains others notes */ if(i_prev >= 0)
