UbuntuUpdates.org

Package "libxatracker2"

Name: libxatracker2

Description:

X acceleration library -- runtime
Latest version: 23.2.1-1ubuntu3.1~22.04.4
Release: jammy (22.04)
Level: security
Repository: main
Head package: mesa
Homepage: https://mesa3d.org/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libxatracker2"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "libxatracker2" in Jammy

Repository Area Version
base main 22.0.1-1ubuntu2
updates main 23.2.1-1ubuntu3.1~22.04.4

Changelog

Version: 23.2.1-1ubuntu3.1~22.04.4 2026-06-15 14:07:42 UTC

  mesa (23.2.1-1ubuntu3.1~22.04.4) jammy-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds memory access in WebGPU
    - debian/patches/CVE-2026-40393-pre1.patch: Use STACK_ARRAY instead of
      NIR_VLA in src/compiler/spirv/spirv_to_nir.c.
    - debian/patches/CVE-2026-40393-pre2.patch: move STACK_ARRAY into util
      in src/util/meson.build, src/util/stack_array.h,
      src/vulkan/util/vk_util.h.
    - debian/patches/CVE-2026-40393-1.patch: use STACK_ARRAY instead of
      NIR_VLA in src/compiler/spirv/spirv_to_nir.c.
    - debian/patches/CVE-2026-40393-2.patch: use STACK_ARRAY instead of
      NIR_VLA in src/compiler/nir/nir_inline_functions.c.
    - CVE-2026-40393

 -- Marc Deslauriers <email address hidden> Wed, 13 May 2026 08:54:07 +0200
CVE-2026-40393 In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an


About   -   Send Feedback to @ubuntu_updates