Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package falco-libs for openSUSE:Factory checked in at 2026-09-16 17:42:22 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/falco-libs (Old) and /work/SRC/openSUSE:Factory/.falco-libs.new.383539 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "falco-libs" Wed Sep 16 17:42:22 2026 rev:3 rq:1378146 version:0.26.0 Changes: -------- --- /work/SRC/openSUSE:Factory/falco-libs/falco-libs.changes 2026-06-25 10:55:52.750628023 +0200 +++ /work/SRC/openSUSE:Factory/.falco-libs.new.383539/falco-libs.changes 2026-09-16 17:44:56.769540768 +0200 @@ -1,0 +2,23 @@ +Tue Sep 15 10:11:51 UTC 2026 - Martin Pluskal <[email protected]> + +- Update to 0.26.0: + * Shared-library SOVERSION is now major.minor (libscap.so.0.26), + so the runtime packages are renamed to libscap0_26 and + libsinsp0_26 per the Shared Library Policy, obsoleting the old + names for a clean upgrade + * This userspace only accepts drivers built from 11.0.0+driver + (driver API 11.0.0, schema 4.5.2) + * scap_get_device_by_mount_id() signature changed, is_cloned() + removed in favour of is_shared(), filter values with NUL bytes + are rejected + * New modern-BPF driver counters and BPF-atomics probe fallback + for kernels before 5.12; container plugin upgraded to 0.7.4 + * Fix out-of-bounds access on malformed savefile replay, a + use-after-free in the fd table cache, and enforce the + filter-parser recursion limit + * Keep support-bshoshany-thread-pool-v5.patch (still applies, + upstream keeps the v4-only spelling); drop the dead + FALCOSECURITY_LIBS_DRIVER_VERSION, BUILD_LIBSCAP_GVISOR and + BUILD_BPF cmake flags, which upstream does not define + +------------------------------------------------------------------- Old: ---- falco-libs-0.25.4.tar.gz New: ---- falco-libs-0.26.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ falco-libs.spec ++++++ --- /var/tmp/diff_new_pack.4Y7o6l/_old 2026-09-16 17:44:57.775582792 +0200 +++ /var/tmp/diff_new_pack.4Y7o6l/_new 2026-09-16 17:44:57.777582875 +0200 @@ -16,10 +16,12 @@ # -%define sover 0 -%define driver_version 10.2.0 +# Upstream sets SOVERSION to major.minor since 0.26.0 (libscap.so.0.26), +# so the runtime packages carry it dotted-to-underscore per the Shared +# Library Policy: libscap0_26, libsinsp0_26. +%define sover 0_26 Name: falco-libs -Version: 0.25.4 +Version: 0.26.0 Release: 0 Summary: Libraries for system inspection (libscap and libsinsp) License: Apache-2.0 @@ -27,7 +29,8 @@ Source0: https://github.com/falcosecurity/libs/archive/%{version}.tar.gz#/falco-libs-%{version}.tar.gz # PATCH-FIX-UPSTREAM support-bshoshany-thread-pool-v5.patch -- build against # bshoshany-thread-pool v5 (BS::thread_pool is now a class template) while -# staying compatible with v4 +# staying compatible with v4; still needed at 0.26.0, upstream keeps the +# v4-only spelling Patch0: support-bshoshany-thread-pool-v5.patch # abseil-cpp-devel is pulled in transitively by re2's headers BuildRequires: abseil-cpp-devel @@ -37,8 +40,6 @@ BuildRequires: cmake BuildRequires: fdupes BuildRequires: gcc-c++ -BuildRequires: gmock -BuildRequires: gtest BuildRequires: libbpf-devel BuildRequires: ninja BuildRequires: nlohmann_json-devel @@ -47,6 +48,10 @@ # uthash-devel does NOT provide pkgconfig(uthash) in openSUSE; keep the -devel BuildRequires: uthash-devel BuildRequires: valijson-devel +BuildRequires: pkgconfig(gmock) +BuildRequires: pkgconfig(gmock_main) +BuildRequires: pkgconfig(gtest) +BuildRequires: pkgconfig(gtest_main) BuildRequires: pkgconfig(jsoncpp) BuildRequires: pkgconfig(libelf) BuildRequires: pkgconfig(re2) @@ -64,6 +69,10 @@ %package -n libscap%{sover} Summary: System capture library of the falcosecurity libs +# 0.26.0 renamed the runtimes (SOVERSION 0 -> 0.26); obsolete the +# Tumbleweed-shipped names so dup replaces rather than parallels them +# (the unversioned libpman/event_schema/platform libs share paths). +Obsoletes: libscap0 < %{version} %description -n libscap%{sover} libscap reads system events from the falcosecurity drivers and from @@ -71,6 +80,9 @@ %package -n libsinsp%{sover} Summary: System inspection library of the falcosecurity libs +Obsoletes: libsinsp0 < %{version} +# Exact pin: both libs build from this same tarball and ship in one SR, +# so the pin cannot dangle on either package updating alone. Requires: libscap%{sover} = %{version} %description -n libsinsp%{sover} @@ -106,13 +118,10 @@ -DUSE_BUNDLED_GTEST=OFF \ -DENABLE_THREAD_POOL=ON \ -DBUILD_LIBSCAP_MODERN_BPF=ON \ - -DBUILD_LIBSCAP_GVISOR=ON \ -DBUILD_DRIVER=OFF \ - -DBUILD_BPF=OFF \ -DCREATE_TEST_TARGETS=ON \ -DBUILD_LIBSINSP_EXAMPLES=OFF \ -DFALCOSECURITY_LIBS_VERSION=%{version} \ - -DFALCOSECURITY_LIBS_DRIVER_VERSION=%{driver_version} \ -DCMAKE_SHARED_LINKER_FLAGS="%{?build_ldflags} -Wl,--as-needed -Wl,-z,now" \ -Wno-dev %cmake_build @@ -130,7 +139,7 @@ %check # run the libsinsp gtest unit suite via upstream's make target (tests are not # registered with ctest); libscap/driver tests need a real kernel, so skip them -cd %__builddir +cd %{__builddir} %cmake_build run-unit-test-libsinsp %ldconfig_scriptlets -n libscap%{sover} ++++++ falco-libs-0.25.4.tar.gz -> falco-libs-0.26.0.tar.gz ++++++ ++++ 20200 lines of diff (skipped)
