From b9ea86b26a84b193a782007d559c899761364b21 Mon Sep 17 00:00:00 2001 From: Michael Nosthoff Date: Wed, 8 Apr 2026 13:12:12 +0200 Subject: [PATCH] package/libglib2: security bump to version 2.86.5 Fix several security vulnerabilities of varying severity. Release Notes: https://gitlab.gnome.org/GNOME/glib/-/releases/2.86.3 https://gitlab.gnome.org/GNOME/glib/-/releases/2.86.4 https://gitlab.gnome.org/GNOME/glib/-/releases/2.86.5 Fixes: - CVE-2025-13601 - CVE-2026-1484 - CVE-2026-1485 - CVE-2026-1489 Signed-off-by: Michael Nosthoff [Julien: - fix URL in hash file comment - add "security" in commit log title ] Signed-off-by: Julien Olivain --- package/libglib2/libglib2.hash | 4 ++-- package/libglib2/libglib2.mk | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/package/libglib2/libglib2.hash b/package/libglib2/libglib2.hash index 6698db8389..09cd8e9979 100644 --- a/package/libglib2/libglib2.hash +++ b/package/libglib2/libglib2.hash @@ -1,4 +1,4 @@ -# https://download.gnome.org/sources/glib/2.86/glib-2.86.2.sha256sum -sha256 8a724e970855357ea8101e27727202392a0ffd5410a98336aed54ec59113e611 glib-2.86.2.tar.xz +# https://download.gnome.org/sources/glib/2.86/glib-2.86.5.sha256sum +sha256 ce85a947bb8b3c0204dbeff79aec39bcb46371c6fafb64ba5b8726c71e038d5f glib-2.86.5.tar.xz # License files, locally calculated sha256 fa6f36630bb1e0c571d34b2bbdf188d08495c9dbf58f28cac112f303fc1f58fb COPYING diff --git a/package/libglib2/libglib2.mk b/package/libglib2/libglib2.mk index 1c5109f4ec..cae8a85a28 100644 --- a/package/libglib2/libglib2.mk +++ b/package/libglib2/libglib2.mk @@ -5,7 +5,7 @@ ################################################################################ LIBGLIB2_VERSION_MAJOR = 2.86 -LIBGLIB2_VERSION = $(LIBGLIB2_VERSION_MAJOR).2 +LIBGLIB2_VERSION = $(LIBGLIB2_VERSION_MAJOR).5 LIBGLIB2_SOURCE = glib-$(LIBGLIB2_VERSION).tar.xz LIBGLIB2_SITE = https://download.gnome.org/sources/glib/$(LIBGLIB2_VERSION_MAJOR) LIBGLIB2_LICENSE = LGPL-2.1+