From patchwork Sat Oct 17 05:59:41 2026 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: auh@yoctoproject.org X-Patchwork-Id: 101121 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 0829DCCA463 for ; Sat, 17 Oct 2026 05:59:44 +0000 (UTC) Received: from a27-193.smtp-out.us-west-2.amazonses.com (a27-193.smtp-out.us-west-2.amazonses.com [54.240.27.193]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.1662.1792216782121356876 for ; Fri, 16 Oct 2026 22:59:42 -0700 Authentication-Results: mx.groups.io; dkim=pass header.i=@yoctoproject.org header.s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky header.b=mcbPsBo7; dkim=pass header.i=@amazonses.com header.s=hsbnp7p3ensaochzwyq5wwmceodymuwv header.b=x6NKHXGL; spf=pass (domain: us-west-2.amazonses.com, ip: 54.240.27.193, mailfrom: 010101a14871d144-5f7d3bcc-4347-491f-bcbe-39933507f02d-000000@us-west-2.amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=lvjh2tk576v2ro5mi6k4dt3mc6wpqbky; d=yoctoproject.org; t=1792216781; h=Content-Type:MIME-Version:From:To:Subject:Message-Id:Date; bh=7EmKjmP0oPuYCm8KpZZb5baCWLNeknOU6Vx4iimOJmg=; b=mcbPsBo7709pMDDARJArrZLn4c0m9TaNL2E9BVPbKUKK1WmUzo9VtREq/1qNhGFW 1kIv51m9DKh+obDqDyWe4zEzw17nXgYvof68FtehA6BsZTk8qUEBhTLFKGm7PTblhdM l5k12b3F1hnRY+Y2yqsnboNRpaL89BNtxhqso7Fk= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=hsbnp7p3ensaochzwyq5wwmceodymuwv; d=amazonses.com; t=1792216781; h=Content-Type:MIME-Version:From:To:Subject:Message-Id:Date:Feedback-ID; bh=7EmKjmP0oPuYCm8KpZZb5baCWLNeknOU6Vx4iimOJmg=; b=x6NKHXGLIZPgJA8oSDmQ5ApjzAYGJALkrHX3fnObTsdc2kxGXaKVew1pzMDrErHc TKmnfpPrdC2sXXYMR1t9rQv9WKimDVtgAKvLq5HBuBu6tibkAZt2iUS4bqUEg5HaoyH /VOU5Vd9rwH2b3w+UIRqTK4BRyaoaKosIu+gdB30= MIME-Version: 1.0 From: auh@yoctoproject.org To: openembedded-core@lists.openembedded.org Subject: [AUH] libx11,libxi,libxrender,libxpm,libxtst: upgrading to 1.8.14,1.8.4,0.9.13,3.5.20,1.2.6 SUCCEEDED Message-ID: <010101a14871d144-5f7d3bcc-4347-491f-bcbe-39933507f02d-000000@us-west-2.amazonses.com> Date: Sat, 17 Oct 2026 05:59:41 +0000 Feedback-ID: ::1.us-west-2.9np3MYPs3fEaOBysGKSlUD4KtcmPijcmS9Az2Hwf7iQ=:AmazonSES X-SES-Outgoing: 2026.10.17-54.240.27.193 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 17 Oct 2026 05:59:43 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/248070 Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *libx11,libxi,libxrender,libxpm,libxtst* to *1.8.14,1.8.4,0.9.13,3.5.20,1.2.6* has Succeeded. Next steps: - apply the patch: git am 0001-libx11-libxi-libxrender-libxpm-libxtst-upgrade-1.8.1.patch - check the changes to upstream patches and summarize them in the commit message, - compile an image that contains the package - perform some basic sanity tests - amend the patch and sign it off: git commit -s --reset-author --amend - send it to the appropriate mailing list Alternatively, if you believe the recipe should not be upgraded at this time, you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that automatic upgrades would no longer be attempted. Please review the attached files for further information and build/update failures. Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler Regards, The Upgrade Helper -- >8 -- From 1f62a713036a167df4524fbc0481c2891c11c01e Mon Sep 17 00:00:00 2001 From: Upgrade Helper Date: Sat, 17 Oct 2026 05:23:37 +0000 Subject: [PATCH] libx11,libxi,libxrender,libxpm,libxtst: upgrade 1.8.13 -> 1.8.14,1.8.3 -> 1.8.4,0.9.12 -> 0.9.13,3.5.19 -> 3.5.20,1.2.5 -> 1.2.6 libX11 1.8.14 Revert "XGetSubImage: improve efficiency by reducing number of temporary allocations" lcGenConv: bound byteM_parse_codeset() reads to remaining input length ximcp: bound XIM_REGISTER_TRIGGERKEYS keylist lengths to the packet ximcp: bound XIM_OPEN_REPLY attribute lengths to the received packet xkb: Check the keysym range in _XkbReadKeyActions (CVE-2026-88806) XOpenDisplay: avoid NULL dereference in out-of-memory error path XSetFontPath: zero-initialize packed font path buffer _XSend: treat xcb_writev returning 0 as failure _XSend: discard the output buffer after an I/O error XkbSetIndicatorMap: avoid undefined behavior due to left shift overflow nls: Add ca_ES.UTF-8@valencia locale Xutil.h: add include of Xresource.h XGetSubImage: improve efficiency by reducing number of temporary allocations xkb: fix incorrect size check when growing doodads in a section XlibInt.c: use correct type for Win32 in SocketBytesReadable() XlibInt.h: prevent Win32 CreateWindow macro from leaking into our code libXi 1.8.4 XGetDeviceControl: set DEVICE_ENABLE length to the struct size XGetDeviceControl: size DEVICE_ENABLE replies for XDeviceEnableState XGetDeviceControl: require reply control to match the request Set num_classes to number of copied classes in copyDeviceChangedEvent Track XIValuatorClass correctly during copyDeviceChangedEvent Track unknown classes correctly during copyDeviceChangedEvent Add missing touch and gesture class handling to copyDeviceChangedEvent XListInputDevices: make sure we have enough bytes for the info Fix potential for class size mismatches Actually copy the full keycodes in copy_classes wireToEnterLeave: validate the valuator count to avoid OOB writes wireToEnterLeave: validate buttons_len against the received event size XListInputDevices: validate class lengths cumulatively in SizeClassInfo XListInputDevices: validate device name lengths against reply buffer XIQueryDevice: keep padded name and class bytes within the reply size_classes/copy_classes: enforce XI2 per-type class payload sizes size_classes/copy_classes: bound XI2 class lengths to the received buffer XQueryDeviceState: check ValuatorClass num_valuators against class length Strip trailing whitespace from source files libXrender 0.9.13 Check numSubpixel against numScreens to avoid OOB writes (CVE-2026-88807) gitlab CI: drop the ci-fairy check-mr job meson: Add option to build with meson libXpm 3.5.20 ParsePixels: reject zero-dimension XPM images Revert "ParsePixels: reject zero-dimension XPM images" ParsePixels: reject zero-dimension XPM images libXtst 1.2.6 parse_reply_call_callback: reject zero-progress RECORD reply elements parse_reply_call_callback: check element size against remaining reply buffer gitlab CI: drop the ci-fairy check-mr job --- meta/recipes-graphics/xorg-lib/libx11/disable_tests.patch | 2 +- .../xorg-lib/{libx11_1.8.13.bb => libx11_1.8.14.bb} | 2 +- .../xorg-lib/{libxi_1.8.3.bb => libxi_1.8.4.bb} | 2 +- .../xorg-lib/{libxpm_3.5.19.bb => libxpm_3.5.20.bb} | 2 +- .../xorg-lib/{libxrender_0.9.12.bb => libxrender_0.9.13.bb} | 2 +- .../xorg-lib/{libxtst_1.2.5.bb => libxtst_1.2.6.bb} | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) rename meta/recipes-graphics/xorg-lib/{libx11_1.8.13.bb => libx11_1.8.14.bb} (92%) rename meta/recipes-graphics/xorg-lib/{libxi_1.8.3.bb => libxi_1.8.4.bb} (88%) rename meta/recipes-graphics/xorg-lib/{libxpm_3.5.19.bb => libxpm_3.5.20.bb} (88%) rename meta/recipes-graphics/xorg-lib/{libxrender_0.9.12.bb => libxrender_0.9.13.bb} (87%) rename meta/recipes-graphics/xorg-lib/{libxtst_1.2.5.bb => libxtst_1.2.6.bb} (86%) diff --git a/meta/recipes-graphics/xorg-lib/libx11/disable_tests.patch b/meta/recipes-graphics/xorg-lib/libx11/disable_tests.patch index d2c5f5f142..6d358b1f43 100644 --- a/meta/recipes-graphics/xorg-lib/libx11/disable_tests.patch +++ b/meta/recipes-graphics/xorg-lib/libx11/disable_tests.patch @@ -1,4 +1,4 @@ -From 37debe301336cfb61e7f81e9e47e5e1019177d8c Mon Sep 17 00:00:00 2001 +From 26c415e836439d2212cea437e11cfb6396436fbc Mon Sep 17 00:00:00 2001 From: Marko Lindqvist Date: Tue, 8 Jan 2013 09:16:37 +0200 Subject: [PATCH] libx11: disable tests diff --git a/meta/recipes-graphics/xorg-lib/libx11_1.8.13.bb b/meta/recipes-graphics/xorg-lib/libx11_1.8.14.bb similarity index 92% rename from meta/recipes-graphics/xorg-lib/libx11_1.8.13.bb rename to meta/recipes-graphics/xorg-lib/libx11_1.8.14.bb index 42f52f3de2..25fcd6d8b9 100644 --- a/meta/recipes-graphics/xorg-lib/libx11_1.8.13.bb +++ b/meta/recipes-graphics/xorg-lib/libx11_1.8.14.bb @@ -23,7 +23,7 @@ XORG_PN = "libX11" SRC_URI += "file://disable_tests.patch" -SRC_URI[sha256sum] = "69606f485c2c07c14ef64f75b7bb326d48587af33795d9ab3e607c0b5f94f11c" +SRC_URI[sha256sum] = "bbc78c46217174655c2b32b138ad119f3ac15f50808b4d0b3a2677a4b1afc950" inherit gettext diff --git a/meta/recipes-graphics/xorg-lib/libxi_1.8.3.bb b/meta/recipes-graphics/xorg-lib/libxi_1.8.4.bb similarity index 88% rename from meta/recipes-graphics/xorg-lib/libxi_1.8.3.bb rename to meta/recipes-graphics/xorg-lib/libxi_1.8.4.bb index 240215379f..fb89e3e526 100644 --- a/meta/recipes-graphics/xorg-lib/libxi_1.8.3.bb +++ b/meta/recipes-graphics/xorg-lib/libxi_1.8.4.bb @@ -18,6 +18,6 @@ PE = "1" XORG_PN = "libXi" XORG_EXT = "tar.xz" -SRC_URI[sha256sum] = "7ad60056f01af4f786cfe93b3a7707447711626fc8da2637bec71a90409babe5" +SRC_URI[sha256sum] = "ddd6057b89a91903bc2f884d55c8467440906945e482c36547260dff28661afc" BBCLASSEXTEND = "native nativesdk" diff --git a/meta/recipes-graphics/xorg-lib/libxpm_3.5.19.bb b/meta/recipes-graphics/xorg-lib/libxpm_3.5.20.bb similarity index 88% rename from meta/recipes-graphics/xorg-lib/libxpm_3.5.19.bb rename to meta/recipes-graphics/xorg-lib/libxpm_3.5.20.bb index fe465af4fe..16854aa1f3 100644 --- a/meta/recipes-graphics/xorg-lib/libxpm_3.5.19.bb +++ b/meta/recipes-graphics/xorg-lib/libxpm_3.5.20.bb @@ -22,6 +22,6 @@ PACKAGES =+ "sxpm cxpm" FILES:cxpm = "${bindir}/cxpm" FILES:sxpm = "${bindir}/sxpm" -SRC_URI[sha256sum] = "ad3576d689221a39dc728f0e0dc02ca7bb6a0d724c9a77fd1bfa1e9af83be900" +SRC_URI[sha256sum] = "c064ead03e4dde78afdeb121fe0b644d25c550444cf903fbdc537f1a78f3ef74" BBCLASSEXTEND = "native" diff --git a/meta/recipes-graphics/xorg-lib/libxrender_0.9.12.bb b/meta/recipes-graphics/xorg-lib/libxrender_0.9.13.bb similarity index 87% rename from meta/recipes-graphics/xorg-lib/libxrender_0.9.12.bb rename to meta/recipes-graphics/xorg-lib/libxrender_0.9.13.bb index e946d9dd41..667f469e69 100644 --- a/meta/recipes-graphics/xorg-lib/libxrender_0.9.12.bb +++ b/meta/recipes-graphics/xorg-lib/libxrender_0.9.13.bb @@ -18,5 +18,5 @@ PE = "1" XORG_PN = "libXrender" BBCLASSEXTEND = "native nativesdk" -SRC_URI[sha256sum] = "b832128da48b39c8d608224481743403ad1691bf4e554e4be9c174df171d1b97" +SRC_URI[sha256sum] = "3fe88c609df6782e1e7af2e4de36b2563d70cd70ff7dcb1cda561ad64912bb64" diff --git a/meta/recipes-graphics/xorg-lib/libxtst_1.2.5.bb b/meta/recipes-graphics/xorg-lib/libxtst_1.2.6.bb similarity index 86% rename from meta/recipes-graphics/xorg-lib/libxtst_1.2.5.bb rename to meta/recipes-graphics/xorg-lib/libxtst_1.2.6.bb index df381b7d65..a59c5c6996 100644 --- a/meta/recipes-graphics/xorg-lib/libxtst_1.2.5.bb +++ b/meta/recipes-graphics/xorg-lib/libxtst_1.2.6.bb @@ -15,6 +15,6 @@ PROVIDES = "xtst" PE = "1" XORG_PN = "libXtst" -SRC_URI[sha256sum] = "b50d4c25b97009a744706c1039c598f4d8e64910c9fde381994e1cae235d9242" +SRC_URI[sha256sum] = "f94f0b37c07d80d877f3eda2c2405cc7e62aa9842f6310354aa349e3d66a4fe5" BBCLASSEXTEND = "native nativesdk"