Re: Proposal: Mesa 25.3.3 backport for trixie-backports

jitsukai@lenovo-laptop:~$ sudo apt install git gnupg flex bison gperf
build-essential zip bzr curl libc6-dev libncurses5-dev:i386 x11proto-
core-dev libx11-dev:i386 libreadline6-dev:i386 libgl1-mesa-glx:i386
libgl1-mesa-dev g++-multilib mingw-w64-i686-dev tofrodos python3-
markdown libxml2-utils xsltproc zlib1g-dev:i386 schedtool liblz4-tool
bc lzop imagemagick libncurses5 rsync python-is-python3 python2
Note, selecting 'libncurses-dev:i386' instead of 'libncurses5-dev:i386'
Note, selecting 'libreadline-dev:i386' instead of 'libreadline6-
dev:i386'
Package python2 is not available, but is referred to by another
package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source

Package liblz4-tool is not available, but is referred to by another
package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source

Package libgl1-mesa-glx:i386 is not available, but is referred to by
another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source

Error: Package 'libgl1-mesa-glx:i386' has no installation candidate
Error: Package 'liblz4-tool' has no installation candidate
Error: Unable to locate package libncurses5
Error: Package 'python2' has no installation candidate
jitsukai@lenovo-laptop:~

i search to create a build environement for ubuntu touch


On Sat, 2026-06-13 at 13:00 +0000, stornic56 wrote:
> Hi Paul,
> 
> 
> Thanks for the clarification on the policy.
> 
> 
> I understand the rule, but I'd like to make a case for 25.3.3:
> 
> 
> 1. The "too intrusive" backport is done. The security team marked
> CVE-2026-40393 as ignored for Trixie because the fix was deemed too
> intrusive to backport into 25.2.6. I've already done that work:
> 25.3.3 includes the upstream fix (MR !39866) and it's not intrusive
> at all, it's just a proper point release.
> 
> 
> 2. Dylan Aïssi hasn't touched mesa in trixie-backports for 6 months.
> Bug #1132617 has been open since April with no response. The
> backports guidelines allow a volunteer to step in when the maintainer
> is unresponsive.
> 
> 
> 3. The package required real work: LLVM downgrade, dependency fixes,
> meson patch, CVE patches, and FTBFS fixes for stack_array.h and
> rusticl. It's been running on my Arc B580 for days with Vulkan
> 1.4.309 and OpenGL 4.6. It's ready for upload.
> 
> 
> 4. Mesa 26.0.8 is extra work. I'm not opposed to working on it if the
> team requires it, but that means redoing the LLVM adaptation and
> dealing with whatever new issues 26.x brings. An exception for 25.3.3
> gives Trixie users a secure update now while a 26.x backport is being
> prepared.
> 
> 
> Since the guidelines allow for exceptions discussed with the team,
> just let me know what the next step should be.
> 
> Best regards,
> stornic56