libsolv: update to 0.7.37 #3

Merged

sbelikov merged 2 commits from update-libsolv-0.7.37 into niceos-5.2

2026-05-09 20:49:41 +03:00

sbelikov commented

2026-05-09 19:21:24 +03:00

Owner

Update libsolv from 0.7.35 to 0.7.37.

Upstream 0.7.37 appears to be a patch-level maintenance release with parser correctness and performance fixes:

fix parsing of SHA-512 checksums in Debian repositories
improve dirpool_add_dir, making filelists.xml parsing faster
fix parsing of recommends in the old Mandriva synthesis format

Risk assessment: manual review.
No explicit CVE, ABI/SONAME break, removed API, or config migration was identified in the reviewed upstream notes. However, libsolv is part of the package-management stack, and the upstream compare window is non-trivial, so this should be gated with a rebuild and smoke testing rather than auto-merged.

Please verify:

source tarball matches the upstream 0.7.37 tag
spec Version/Release and source lock metadata are updated correctly
build passes in a clean environment
%check is green
generated provides/requires did not drift unexpectedly
basic repository-metadata and dependency-solving workflows still behave normally

References:

Update libsolv from 0.7.35 to 0.7.37. Upstream 0.7.37 appears to be a patch-level maintenance release with parser correctness and performance fixes: - fix parsing of SHA-512 checksums in Debian repositories - improve dirpool_add_dir, making filelists.xml parsing faster - fix parsing of recommends in the old Mandriva synthesis format Risk assessment: manual review. No explicit CVE, ABI/SONAME break, removed API, or config migration was identified in the reviewed upstream notes. However, libsolv is part of the package-management stack, and the upstream compare window is non-trivial, so this should be gated with a rebuild and smoke testing rather than auto-merged. Please verify: - source tarball matches the upstream 0.7.37 tag - spec Version/Release and source lock metadata are updated correctly - build passes in a clean environment - %check is green - generated provides/requires did not drift unexpectedly - basic repository-metadata and dependency-solving workflows still behave normally References: - https://github.com/openSUSE/libsolv/releases/tag/0.7.37 - https://github.com/openSUSE/libsolv/blob/master/package/libsolv.changes - https://github.com/openSUSE/libsolv/compare/0.7.35...0.7.37 - https://github.com/openSUSE/libsolv/blob/master/NEWS

sbelikov added 1 commit

2026-05-09 19:21:24 +03:00