CVS commit: pkgsrc/devel

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Mon Feb 16 10:07:59 UTC 2026

Modified Files:
        pkgsrc/devel/gdbus-codegen: distinfo
        pkgsrc/devel/glib2: Makefile.common PLIST distinfo

Log Message:
glib2 glib2-tools gdbus-codegen: updated to 2.86.4

Overview of changes in GLib 2.86.4, 2026-02-13

* Fix several security vulnerabilities of varying severity (see below for
  details)

* Bugs fixed:
  - glib-compile-resources: Incorrect compiler detection on Windows when
    building GTK causes a DoS (L. E. Segovia)
  - Iterating over a short (preallocated) GVariant bytestring invalidly
    refs a NULL GBytes (Christian Hergert)
  - (CVE-2026-1484) (YWH-PGM9867-168) Integer Overflow -> Buffer Underflow
    on Glib through glib/gbase64.c via g_base64_encode_close() leads to OOB
    Write (Marco Trevisan)
  - (CVE-2026-1485) (#YWH-PGM9867-169) Buffer underflow on Glib through
    gio/gcontenttype-fdo.c via parse_header() lead to OOB Read/Write (Marco
    Trevisan)
  - (CVE-2026-1489) (#YWH-PGM9867-171) Integer Overflow on Glib through
    glib/guniprop.c via output_marks() lead to OOB Write in
    glib/gutf8.c:g_unichar_to_utf8() (Marco Trevisan (Treviño))
  - Update Romanian translation glib-2-86
  - Backport !4954 “glib-compile-resources: Always assume MSVC compiler if
    VCINSTALLDIR is set” to glib-2-86
  - Backport !4960 “glib/gvariant: add failing test for bytestring and fix
    it” to glib-2-86
  - [glib-2-86] gbase64: Use gsize to prevent potential overflow
  - [glib-2-86] gio/gcontenttype-fdo: Do not overflow if header is longer
    than MAXINT
  - [glib-2-86] guniprop: Use size_t for output_marks length
  - Update Kazakh translation

* Translation updates:
  - Kazakh (Baurzhan Muftakhidinov)
  - Romanian (Antonio Marin)


To generate a diff of this commit:
cvs rdiff -u -r1.58 -r1.59 pkgsrc/devel/gdbus-codegen/distinfo
cvs rdiff -u -r1.127 -r1.128 pkgsrc/devel/glib2/Makefile.common
cvs rdiff -u -r1.165 -r1.166 pkgsrc/devel/glib2/PLIST
cvs rdiff -u -r1.339 -r1.340 pkgsrc/devel/glib2/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/devel/gdbus-codegen/distinfo
diff -u pkgsrc/devel/gdbus-codegen/distinfo:1.58 pkgsrc/devel/gdbus-codegen/distinfo:1.59
--- pkgsrc/devel/gdbus-codegen/distinfo:1.58    Mon Jan  5 12:44:55 2026
+++ pkgsrc/devel/gdbus-codegen/distinfo Mon Feb 16 10:07:59 2026
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.58 2026/01/05 12:44:55 adam Exp $
+$NetBSD: distinfo,v 1.59 2026/02/16 10:07:59 adam Exp $
 
-BLAKE2s (glib-2.86.3.tar.xz) = 00968c1eb262247f7a30491ca95924bcb56b7e515386afc0e27654541f38c8b2
-SHA512 (glib-2.86.3.tar.xz) = 2b53aba22eef2d21cb40334fe55715bf0ca5009e5e105c462cdedfb45da96cca35e7edc95af27022893832feb5bfc0b0ee554382c8c8f55a2a777b864cfc53ba
-Size (glib-2.86.3.tar.xz) = 5674820 bytes
+BLAKE2s (glib-2.86.4.tar.xz) = cfa4fdd8307ae8e8671d6588092fa3fe2213333a5fa8231004c1830979871f9f
+SHA512 (glib-2.86.4.tar.xz) = 13e8beb84f3464f50c9764d0d3c6822a4bb41ae65e6c3ffac4200a5b441acdd2eb6f838a6b0722cae501e367ce9cfd4f8516b684a391c2f088a593172abcacd9
+Size (glib-2.86.4.tar.xz) = 5692304 bytes
 SHA1 (patch-meson.build) = 03229e9f8302c09907e7b5f6366f16505efc3ad5

Index: pkgsrc/devel/glib2/Makefile.common
diff -u pkgsrc/devel/glib2/Makefile.common:1.127 pkgsrc/devel/glib2/Makefile.common:1.128
--- pkgsrc/devel/glib2/Makefile.common:1.127    Mon Jan  5 12:44:55 2026
+++ pkgsrc/devel/glib2/Makefile.common  Mon Feb 16 10:07:59 2026
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile.common,v 1.127 2026/01/05 12:44:55 adam Exp $
+# $NetBSD: Makefile.common,v 1.128 2026/02/16 10:07:59 adam Exp $
 # used by devel/gdbus-codegen/Makefile
 # used by devel/glib2/Makefile
 # used by devel/glib2-tools/Makefile
 
-DISTNAME=      glib-2.86.3
+DISTNAME=      glib-2.86.4
 PKGNAME=       ${DISTNAME:S/glib/glib2/}
 MASTER_SITES=  ${MASTER_SITE_GNOME:=sources/glib/${PKGVERSION_NOREV:R}/}
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/devel/glib2/PLIST
diff -u pkgsrc/devel/glib2/PLIST:1.165 pkgsrc/devel/glib2/PLIST:1.166
--- pkgsrc/devel/glib2/PLIST:1.165      Mon Jan  5 12:44:55 2026
+++ pkgsrc/devel/glib2/PLIST    Mon Feb 16 10:07:59 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.165 2026/01/05 12:44:55 adam Exp $
+@comment $NetBSD: PLIST,v 1.166 2026/02/16 10:07:59 adam Exp $
 ${PLIST.nococoa}bin/gapplication
 bin/gdbus
 bin/gi-compile-repository
@@ -323,22 +323,22 @@ include/glib-2.0/gobject/gvaluetypes.h
 lib/glib-2.0/include/glibconfig.h
 lib/libgio-2.0.so
 lib/libgio-2.0.so.0
-lib/libgio-2.0.so.0.8600.3
+lib/libgio-2.0.so.0.8600.4
 lib/libgirepository-2.0.so
 lib/libgirepository-2.0.so.0
-lib/libgirepository-2.0.so.0.8600.3
+lib/libgirepository-2.0.so.0.8600.4
 lib/libglib-2.0.so
 lib/libglib-2.0.so.0
-lib/libglib-2.0.so.0.8600.3
+lib/libglib-2.0.so.0.8600.4
 lib/libgmodule-2.0.so
 lib/libgmodule-2.0.so.0
-lib/libgmodule-2.0.so.0.8600.3
+lib/libgmodule-2.0.so.0.8600.4
 lib/libgobject-2.0.so
 lib/libgobject-2.0.so.0
-lib/libgobject-2.0.so.0.8600.3
+lib/libgobject-2.0.so.0.8600.4
 lib/libgthread-2.0.so
 lib/libgthread-2.0.so.0
-lib/libgthread-2.0.so.0.8600.3
+lib/libgthread-2.0.so.0.8600.4
 lib/pkgconfig/gio-2.0.pc
 lib/pkgconfig/gio-unix-2.0.pc
 lib/pkgconfig/girepository-2.0.pc
@@ -352,8 +352,8 @@ ${PLIST.nococoa}libexec/gio-launch-deskt
 share/aclocal/glib-2.0.m4
 share/aclocal/glib-gettext.m4
 share/aclocal/gsettings.m4
-share/gdb/auto-load${LOCALBASE}/lib/libglib-2.0.so.0.8600.3-gdb.py
-share/gdb/auto-load${LOCALBASE}/lib/libgobject-2.0.so.0.8600.3-gdb.py
+share/gdb/auto-load${LOCALBASE}/lib/libglib-2.0.so.0.8600.4-gdb.py
+share/gdb/auto-load${LOCALBASE}/lib/libgobject-2.0.so.0.8600.4-gdb.py
 share/gettext/its/gschema.its
 share/gettext/its/gschema.loc
 share/glib-2.0/dtds/gresource.dtd

Index: pkgsrc/devel/glib2/distinfo
diff -u pkgsrc/devel/glib2/distinfo:1.339 pkgsrc/devel/glib2/distinfo:1.340
--- pkgsrc/devel/glib2/distinfo:1.339   Mon Jan  5 12:44:55 2026
+++ pkgsrc/devel/glib2/distinfo Mon Feb 16 10:07:59 2026
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.339 2026/01/05 12:44:55 adam Exp $
+$NetBSD: distinfo,v 1.340 2026/02/16 10:07:59 adam Exp $
 
-BLAKE2s (glib-2.86.3.tar.xz) = 00968c1eb262247f7a30491ca95924bcb56b7e515386afc0e27654541f38c8b2
-SHA512 (glib-2.86.3.tar.xz) = 2b53aba22eef2d21cb40334fe55715bf0ca5009e5e105c462cdedfb45da96cca35e7edc95af27022893832feb5bfc0b0ee554382c8c8f55a2a777b864cfc53ba
-Size (glib-2.86.3.tar.xz) = 5674820 bytes
+BLAKE2s (glib-2.86.4.tar.xz) = cfa4fdd8307ae8e8671d6588092fa3fe2213333a5fa8231004c1830979871f9f
+SHA512 (glib-2.86.4.tar.xz) = 13e8beb84f3464f50c9764d0d3c6822a4bb41ae65e6c3ffac4200a5b441acdd2eb6f838a6b0722cae501e367ce9cfd4f8516b684a391c2f088a593172abcacd9
+Size (glib-2.86.4.tar.xz) = 5692304 bytes
 SHA1 (patch-gio_gcredentialsprivate.h) = f719ae41a9eb1d2f04d866b246fa5176543f2df9
 SHA1 (patch-gio_gdbus-2.0_codegen_meson.build) = 9bd0befe0dd547f6f2d818e52bee14e31a017ac7
 SHA1 (patch-gio_glib-compile-schemas.c) = 4fc8e8ba62bef01762007ebf21569053374808d0