Re: [ANNOUNCE] mesa 26.0.1

Hi,

As also figured out by SUSE engineers in another email here, https://git=
lab.freedesktop.org/mesa/mesa/-/merge_requests/39866 are the two commits=
 fixing that issue.

When possible, updating would be preferable rather than backporting a co=
uple of commits, but if that's not an option then yes, please backport t=
hese two commits :)

On 2026-02-26 at 13:12 UTC+01:00, Stefan Dirsch <[email protected]> wrot=
e:
> Hi Eric
>
> On Wed, Feb 25, 2026 at 05:39:15PM +0100, Eric Engestrom wrote:
>> Hello everyone,
>>=20
>> The bugfix release 26.0.1 is now available.
>>=20
>> This release and 25.3.6 (already out) contain a security fix preventi=
ng
>> out-of-bounds memory access in WebGPU.
>> They should be deployed to users as quickly as possible.
>
> Is it just me, for whom it isn't obvious ... ?
>
> @Eric (or anybody else) Could you please give me some hint, which comm=
it(s)
> fixed the security issue, so one/I can figure out whether older Mesa r=
eleases
> are affected as well? So distributions like (open)SUSE can try backpor=
ting
> this fix ...
>
> Thanks,
> Stefan
>
> Public Key available
> ------------------------------------------------------
> Stefan Dirsch (Res. & Dev.)   SUSE Software Solutions Germany GmbH
> Tel: 0911-740 53 0            Frankenstra=C3=9Fe 146
> FAX: 0911-740 53 479          D-90461 N=C3=BCrnberg
> http://www.suse.de            Germany=20
> ----------------------------------------------------------------
> Gesch=C3=A4ftsf=C3=BChrer: Jochen Jaser, Andrew McDonald, Werner Knobl=
ich
> (HRB 36809, AG N=C3=BCrnberg)
> ----------------------------------------------------------------