What the developer wrote
Authored by fanquake
depends: libXau 1.0.12
What changed, and why it matters
This commit simply bumps the version of a third-party graphics-related library (libXau) used in Bitcoin Core's build dependencies from 1.0.9 to 1.0.12, updating the corresponding download hash. There is no indication in the commit itself that this fixes a security issue, and no security references were provided.
No immediate action required. If reviewing for security, verify whether libXau 1.0.12 upstream release notes address any vulnerabilities relevant to Bitcoin Core's usage, but this commit alone does not establish security relevance.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The change updates depends/packages/libXau.mk: version 1.0.9 -> 1.0.12 and sha256_hash 1f123d… -> 2402dd… . libXau is an X11 authorization library consumed as a build dependency. The commit contains no patch, vulnerability description, CVE, or security rationale.
Changed components
depends/packages/libXau.mkInspect captured patch +2 / −2
diff --git a/depends/packages/libXau.mk b/depends/packages/libXau.mk
index 6bafc4f4..e3299e7e 100644
--- a/depends/packages/libXau.mk
+++ b/depends/packages/libXau.mk
@@ -1,8 +1,8 @@
package=libXau
-$(package)_version=1.0.9
+$(package)_version=1.0.12
$(package)_download_path=https://xorg.freedesktop.org/releases/individual/lib/
$(package)_file_name=$(package)-$($(package)_version).tar.gz
-$(package)_sha256_hash=1f123d8304b082ad63a9e89376400a3b1d4c29e67e3ea07b3f659cccca690eea
+$(package)_sha256_hash=2402dd938da4d0a332349ab3d3586606175e19cb32cb9fe013c19f1dc922dcee
$(package)_dependencies=xproto
# When updating this package, check the default value of
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.