[AUH] libx11,libxi,libxrender,libxpm,libxtst: upgrading to 1.8.14,1.8.4,0.9.13,3.5.20,1.2.6 SUCCEEDED

Hello,

this email is a notification from the Auto Upgrade Helper
that the automatic attempt to upgrade the recipe(s) *libx11,libxi,libxrender,libxpm,libxtst* to *1.8.14,1.8.4,0.9.13,3.5.20,1.2.6* has Succeeded.

Next steps:
    - apply the patch: git am 0001-libx11-libxi-libxrender-libxpm-libxtst-upgrade-1.8.1.patch
    - check the changes to upstream patches and summarize them in the commit message,
    - compile an image that contains the package
    - perform some basic sanity tests
    - amend the patch and sign it off: git commit -s --reset-author --amend
    - send it to the appropriate mailing list

Alternatively, if you believe the recipe should not be upgraded at this time,
you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that
automatic upgrades would no longer be attempted.

Please review the attached files for further information and build/update failures.
Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler

Regards,
The Upgrade Helper

-- >8 --
From 1f62a713036a167df4524fbc0481c2891c11c01e Mon Sep 17 00:00:00 2001
From: Upgrade Helper <auh@yoctoproject.org>
Date: Sat, 17 Oct 2026 05:23:37 +0000
Subject: [PATCH] libx11,libxi,libxrender,libxpm,libxtst: upgrade 1.8.13 ->
 1.8.14,1.8.3 -> 1.8.4,0.9.12 -> 0.9.13,3.5.19 -> 3.5.20,1.2.5 -> 1.2.6

libX11 1.8.14
Revert "XGetSubImage: improve efficiency by reducing number of temporary
allocations"
lcGenConv: bound byteM_parse_codeset() reads to remaining input length
ximcp: bound XIM_REGISTER_TRIGGERKEYS keylist lengths to the packet
ximcp: bound XIM_OPEN_REPLY attribute lengths to the received packet
xkb: Check the keysym range in _XkbReadKeyActions (CVE-2026-88806)
XOpenDisplay: avoid NULL dereference in out-of-memory error path
XSetFontPath: zero-initialize packed font path buffer
_XSend: treat xcb_writev returning 0 as failure
_XSend: discard the output buffer after an I/O error
XkbSetIndicatorMap: avoid undefined behavior due to left shift overflow
nls: Add ca_ES.UTF-8@valencia locale
Xutil.h: add include of Xresource.h
XGetSubImage: improve efficiency by reducing number of temporary allocations
xkb: fix incorrect size check when growing doodads in a section
XlibInt.c: use correct type for Win32 in SocketBytesReadable()
XlibInt.h: prevent Win32 CreateWindow macro from leaking into our code

libXi 1.8.4
XGetDeviceControl: set DEVICE_ENABLE length to the struct size
XGetDeviceControl: size DEVICE_ENABLE replies for XDeviceEnableState
XGetDeviceControl: require reply control to match the request
Set num_classes to number of copied classes in copyDeviceChangedEvent
Track XIValuatorClass correctly during copyDeviceChangedEvent
Track unknown classes correctly during copyDeviceChangedEvent
Add missing touch and gesture class handling to copyDeviceChangedEvent
XListInputDevices: make sure we have enough bytes for the info
Fix potential for class size mismatches
Actually copy the full keycodes in copy_classes
wireToEnterLeave: validate the valuator count to avoid OOB writes
wireToEnterLeave: validate buttons_len against the received event size
XListInputDevices: validate class lengths cumulatively in SizeClassInfo
XListInputDevices: validate device name lengths against reply buffer
XIQueryDevice: keep padded name and class bytes within the reply
size_classes/copy_classes: enforce XI2 per-type class payload sizes
size_classes/copy_classes: bound XI2 class lengths to the received buffer
XQueryDeviceState: check ValuatorClass num_valuators against class length
Strip trailing whitespace from source files

libXrender 0.9.13
Check numSubpixel against numScreens to avoid OOB writes (CVE-2026-88807)
gitlab CI: drop the ci-fairy check-mr job
meson: Add option to build with meson

libXpm 3.5.20
ParsePixels: reject zero-dimension XPM images
Revert "ParsePixels: reject zero-dimension XPM images"
ParsePixels: reject zero-dimension XPM images

libXtst 1.2.6
parse_reply_call_callback: reject zero-progress RECORD reply elements
parse_reply_call_callback: check element size against remaining reply buffer
gitlab CI: drop the ci-fairy check-mr job
---
 meta/recipes-graphics/xorg-lib/libx11/disable_tests.patch       | 2 +-
 .../xorg-lib/{libx11_1.8.13.bb => libx11_1.8.14.bb}             | 2 +-
 .../xorg-lib/{libxi_1.8.3.bb => libxi_1.8.4.bb}                 | 2 +-
 .../xorg-lib/{libxpm_3.5.19.bb => libxpm_3.5.20.bb}             | 2 +-
 .../xorg-lib/{libxrender_0.9.12.bb => libxrender_0.9.13.bb}     | 2 +-
 .../xorg-lib/{libxtst_1.2.5.bb => libxtst_1.2.6.bb}             | 2 +-
 6 files changed, 6 insertions(+), 6 deletions(-)
 rename meta/recipes-graphics/xorg-lib/{libx11_1.8.13.bb => libx11_1.8.14.bb} (92%)
 rename meta/recipes-graphics/xorg-lib/{libxi_1.8.3.bb => libxi_1.8.4.bb} (88%)
 rename meta/recipes-graphics/xorg-lib/{libxpm_3.5.19.bb => libxpm_3.5.20.bb} (88%)
 rename meta/recipes-graphics/xorg-lib/{libxrender_0.9.12.bb => libxrender_0.9.13.bb} (87%)
 rename meta/recipes-graphics/xorg-lib/{libxtst_1.2.5.bb => libxtst_1.2.6.bb} (86%)