Overview of changes in GLib 2.86.4, 2026-02-13 ============================================== * Fix several security vulnerabilities of varying severity (see below for details) * Bugs fixed: - #3858 glib-compile-resources: Incorrect compiler detection on Windows when building GTK causes a DoS (L. E. Segovia) - #3863 Iterating over a short (preallocated) GVariant bytestring invalidly refs a NULL GBytes (Christian Hergert) - #3870 (CVE-2026-1484) (YWH-PGM9867-168) Integer Overflow -> Buffer Underflow on Glib through glib/gbase64.c via g_base64_encode_close() leads to OOB Write (Marco Trevisan) - #3871 (CVE-2026-1485) (#YWH-PGM9867-169) Buffer underflow on Glib through gio/gcontenttype-fdo.c via parse_header() lead to OOB Read/Write (Marco Trevisan) - #3872 (CVE-2026-1489) (#YWH-PGM9867-171) Integer Overflow on Glib through glib/guniprop.c via output_marks() lead to OOB Write in glib/gutf8.c:g_unichar_to_utf8() (Marco Trevisan (Treviño)) - !4946 Update Romanian translation glib-2-86 - !4955 Backport !4954 “glib-compile-resources: Always assume MSVC compiler if VCINSTALLDIR is set” to glib-2-86 - !4961 Backport !4960 “glib/gvariant: add failing test for bytestring and fix it” to glib-2-86 - !4979 [glib-2-86] gbase64: Use gsize to prevent potential overflow - !4981 [glib-2-86] gio/gcontenttype-fdo: Do not overflow if header is longer than MAXINT - !4984 [glib-2-86] guniprop: Use size_t for output_marks length - !5010 Update Kazakh translation * Translation updates: - Kazakh (Baurzhan Muftakhidinov) - Romanian (Antonio Marin)