-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 12 Jul 2026 11:38:34 +0200
Source: mesa
Architecture: source
Version: 20.3.5-1+deb11u1
Distribution: bullseye-security
Urgency: high
Maintainer: Debian X Strike Force <debian-x@lists.debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Changes:
mesa (20.3.5-1+deb11u1) bullseye-security; urgency=high
.
* Non-maintainer upload by the LTS Security Team.
* Convert to source format 3.0 (quilt), caused issues when packaging from
git.
* Backport patch for CVE-2026-40393:
- backport support function STACK_ARRAY, cherry-pick file from upstream.
- backport commits fixing the issue
Checksums-Sha1:
a9aed3c2c70438b403afc8e865e789dc9eace4c2 5464 mesa_20.3.5-1+deb11u1.dsc
1a9c7a52980e9bdb196fd195c9fc30644adacf7c 22086344 mesa_20.3.5.orig.tar.gz
50d0df696bae1efc2aa14f8b01d2e28d737a4915 100076 mesa_20.3.5-1+deb11u1.debian.tar.xz
f01dc2b2aa55f6ce019cd6c4c336770ce4609fc2 8724 mesa_20.3.5-1+deb11u1_source.buildinfo
Checksums-Sha256:
c091b8bd58c3ac0018e12fa44a81aa7222d29f8847a98ef84f3f792b6e29af87 5464 mesa_20.3.5-1+deb11u1.dsc
16586ea4738531f3c931dfb8668cefb7e338689dfd1037843c22cdd41b173fd0 22086344 mesa_20.3.5.orig.tar.gz
cdf021660c5f48007561b10380f4288faf7e320bd2d291680210a4ed1a2849b0 100076 mesa_20.3.5-1+deb11u1.debian.tar.xz
616a644248b72b6a07b053f32ce45ff6cbe7c6a01d12b7f2b4778ecfd1ce4aa5 8724 mesa_20.3.5-1+deb11u1_source.buildinfo
Files:
7f95212ba4e9b5fa61463e5628790487 5464 graphics optional mesa_20.3.5-1+deb11u1.dsc
f9e36d948f37b5ffbf4da8ab22d9a72e 22086344 graphics optional mesa_20.3.5.orig.tar.gz
140352a57798dd770fca97c8e72c5606 100076 graphics optional mesa_20.3.5-1+deb11u1.debian.tar.xz
9e85e61fc56235cf13418da9bd578868 8724 graphics optional mesa_20.3.5-1+deb11u1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=DOfP
-----END PGP SIGNATURE-----
