CVS commit: pkgsrc/audio/fluidsynth

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Sat Jul  4 17:15:51 UTC 2026

Modified Files:
        pkgsrc/audio/fluidsynth: Makefile PLIST distinfo

Log Message:
fluidsynth: updated to 2.5.6

2.5.6

Fluidsynth received 6 vulnerability reports within a week - thanks to all security researchers! Pls. note that Github is currently running behind issuing CVE IDs, see their blog post. We expect the 
missing CVE IDs to be issued within the upcoming week.

Fix CVE-2026-58264 - a heap-based buffer overrun in command handler (GHSA-mqmq-w63q-cj94)
Fix a heap-based buffer overflow in MIDI player (GHSA-976m-35rw-h3m6)
Fix a heap-based buffer overrun for DLS samples (GHSA-59ph-rx8r-8p4j)
Fix a DLS ptbl chunk integer overflow (GHSA-r4mc-v3p8-pv47)
Fix a DLS articulation chunk integer overflow (GHSA-hp72-35pr-6h6r)
Fix a SF2 DMOD chunk integer underflow (GHSA-rmc4-c8hw-455w)


To generate a diff of this commit:
cvs rdiff -u -r1.97 -r1.98 pkgsrc/audio/fluidsynth/Makefile
cvs rdiff -u -r1.45 -r1.46 pkgsrc/audio/fluidsynth/PLIST
cvs rdiff -u -r1.62 -r1.63 pkgsrc/audio/fluidsynth/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/audio/fluidsynth/Makefile
diff -u pkgsrc/audio/fluidsynth/Makefile:1.97 pkgsrc/audio/fluidsynth/Makefile:1.98
--- pkgsrc/audio/fluidsynth/Makefile:1.97       Sat Jun 13 05:29:36 2026
+++ pkgsrc/audio/fluidsynth/Makefile    Sat Jul  4 17:15:51 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.97 2026/06/13 05:29:36 adam Exp $
+# $NetBSD: Makefile,v 1.98 2026/07/04 17:15:51 adam Exp $
 
-DISTNAME=      fluidsynth-2.5.5
+DISTNAME=      fluidsynth-2.5.6
 CATEGORIES=    audio
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=FluidSynth/}
 GITHUB_TAG=    v${PKGVERSION_NOREV}

Index: pkgsrc/audio/fluidsynth/PLIST
diff -u pkgsrc/audio/fluidsynth/PLIST:1.45 pkgsrc/audio/fluidsynth/PLIST:1.46
--- pkgsrc/audio/fluidsynth/PLIST:1.45  Sat Jun 13 05:29:36 2026
+++ pkgsrc/audio/fluidsynth/PLIST       Sat Jul  4 17:15:51 2026
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.45 2026/06/13 05:29:36 adam Exp $
+@comment $NetBSD: PLIST,v 1.46 2026/07/04 17:15:51 adam Exp $
 bin/fluidsynth
 include/fluidsynth.h
 include/fluidsynth/audio.h
@@ -24,6 +24,6 @@ lib/cmake/fluidsynth/FluidSynthConfig.cm
 lib/cmake/fluidsynth/FluidSynthConfigVersion.cmake
 lib/libfluidsynth.so
 lib/libfluidsynth.so.3
-lib/libfluidsynth.so.3.5.4
+lib/libfluidsynth.so.3.5.5
 lib/pkgconfig/fluidsynth.pc
 man/man1/fluidsynth.1

Index: pkgsrc/audio/fluidsynth/distinfo
diff -u pkgsrc/audio/fluidsynth/distinfo:1.62 pkgsrc/audio/fluidsynth/distinfo:1.63
--- pkgsrc/audio/fluidsynth/distinfo:1.62       Sat Jun 13 05:29:37 2026
+++ pkgsrc/audio/fluidsynth/distinfo    Sat Jul  4 17:15:51 2026
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.62 2026/06/13 05:29:37 adam Exp $
+$NetBSD: distinfo,v 1.63 2026/07/04 17:15:51 adam Exp $
 
-BLAKE2s (fluidsynth-2.5.5.tar.gz) = 020642f2a2d2017a7911a9ad496fcc101c037e063daf0ee2d263ac387d3fec53
-SHA512 (fluidsynth-2.5.5.tar.gz) = 0e0f78933c5cc119abc25f91f51df467e9a8efe7bca87b0439d13da42046e5b331bc800bdcba6b82c33fdfd32f821550d1f0d7262fdb15f525a219212ed3b5f2
-Size (fluidsynth-2.5.5.tar.gz) = 2115530 bytes
+BLAKE2s (fluidsynth-2.5.6.tar.gz) = 0c48ab1c0aba3a9e41acbd6a0275c93683f4bc8b8af283de89c7db0a3a9b034e
+SHA512 (fluidsynth-2.5.6.tar.gz) = 0470b190da7e3f330e4fbdf28035ff172866213e0d13f968965b82022ec5cf5c13935624fa0067bb7d9a92cfab1d8238a1ebecbbe91164b298d36a02e50464bc
+Size (fluidsynth-2.5.6.tar.gz) = 2115879 bytes
 SHA1 (patch-include_fluidsynth_log.h) = ea7ed3939306fff3f6f2362eb641f3162ad0395b