Re: Question regarding the WebGPU security fix in Mesa 26.0.1 / 25.3.6

Camila Camargo de Matos <[email protected]> Thu, 12 Mar 2026 09:48:41 -0300
Newsgroups	gmane.comp.video.mesa3d.devel
Message-ID	<[email protected]>
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--------------JMIg51bko19FDkm5q5uIvQs0
Content-Type: multipart/mixed; boundary="------------xuWhCe0r0Wcm04ehe8XJRuKp";
 protected-headers="v1"
From: Camila Camargo de Matos <[email protected]>
To: Eric Engestrom <[email protected]>, [email protected]
Message-ID: <[email protected]>
Subject: Re: Question regarding the WebGPU security fix in Mesa 26.0.1 /
 25.3.6
References: <[email protected]>
 <[email protected]>
 <[email protected]>
 <[email protected]>
In-Reply-To: <[email protected]>

--------------xuWhCe0r0Wcm04ehe8XJRuKp
Content-Type: multipart/alternative;
 boundary="------------qgdo6XdqmeXC1tj5xjKOHFFP"

--------------qgdo6XdqmeXC1tj5xjKOHFFP
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: base64
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--------------qgdo6XdqmeXC1tj5xjKOHFFP
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html>
<html>
  <head>
    <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3DUTF=
-8">
  </head>
  <body>
    <div class=3D"moz-cite-prefix">On 3/7/26 12:46, Eric Engestrom wrote:=
<span
      style=3D"white-space: pre-wrap">
</span></div>
    <blockquote type=3D"cite" cite=3D"mid:[email protected]">=

      <pre wrap=3D"" class=3D"moz-quote-pre">Hi Camila,

Thank you for offering!  The team who discovered and reported the issue i=
s not
yet able to go through the CVE process, so we would love to take you up o=
n
your offer to do it for us.

Cheers,
  Eric
</pre>
    </blockquote>
    <p>Thank you for the quick response! I have already requested the
      CVE ID, and I am only waiting on a response from the CNA.<br>
      I will send an update to the mailing list with the ID assigned to
      the vulnerability as soon as possible!</p>
    <p>Regards,</p>
    <pre class=3D"moz-signature" cols=3D"72">--=20
Camila Camargo de Matos
Security Engineer @ SUSE Software Solutions
GPG: B9DF 0F03 0640 E780 6B47 E60E BF36 BDE9 D034 30D1</pre>
  </body>
</html>

--------------qgdo6XdqmeXC1tj5xjKOHFFP--

--------------xuWhCe0r0Wcm04ehe8XJRuKp--

--------------JMIg51bko19FDkm5q5uIvQs0
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature.asc"

-----BEGIN PGP SIGNATURE-----
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=ZbCm
-----END PGP SIGNATURE-----

--------------JMIg51bko19FDkm5q5uIvQs0--