UbuntuUpdates.org

Package "mesa"

Name: mesa

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • free implementation of the EGL API -- Mesa vendor library
  • free implementation of the EGL API -- development files
  • generic buffer management API -- development files
  • generic buffer management API -- runtime
Latest version: 25.2.8-0ubuntu0.24.04.2
Release: noble (24.04)
Level: security
Repository: main

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "mesa" in Noble

Repository Area Version
base universe 24.0.5-1ubuntu1
base main 24.0.5-1ubuntu1
security universe 25.2.8-0ubuntu0.24.04.2
updates main 25.2.8-0ubuntu0.24.04.2
updates universe 25.2.8-0ubuntu0.24.04.2
PPA: Intel Linux Graphics 9.0.1-0ubuntu1~quantal

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 25.2.8-0ubuntu0.24.04.2 2026-06-15 13:07:35 UTC

  mesa (25.2.8-0ubuntu0.24.04.2) noble-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds memory access in WebGPU
    - debian/patches/CVE-2026-40393-pre1.patch: move STACK_ARRAY into util
      in src/util/meson.build, src/util/stack_array.h,
      src/vulkan/util/vk_util.h.
    - debian/patches/CVE-2026-40393-1.patch: use STACK_ARRAY instead of
      NIR_VLA in src/compiler/spirv/spirv_to_nir.c.
    - debian/patches/CVE-2026-40393-2.patch: use STACK_ARRAY instead of
      NIR_VLA in src/compiler/nir/nir_functions.c.
    - CVE-2026-40393

 -- Marc Deslauriers <email address hidden> Tue, 21 Apr 2026 10:43:44 -0400
CVE-2026-40393 In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an


About   -   Send Feedback to @ubuntu_updates