UbuntuUpdates.org

Package "mesa"

Name: mesa

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • DRM shim libraries
  • free implementation of the OpenCL API -- ICD runtime
  • Mesa VA-API video acceleration drivers
Latest version: 25.2.8-0ubuntu0.25.10.2
Release: questing (25.10)
Level: security
Repository: universe

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Other versions of "mesa" in Questing

Repository Area Version
base main 25.2.3-1ubuntu1
base universe 25.2.3-1ubuntu1
security main 25.2.8-0ubuntu0.25.10.2
updates main 25.2.8-0ubuntu0.25.10.2
updates universe 25.2.8-0ubuntu0.25.10.2
PPA: Intel Linux Graphics 9.0.1-0ubuntu1~quantal

Packages in group

Deleted packages are displayed in grey.


Changelog

Version: 25.2.8-0ubuntu0.25.10.2 2026-06-15 13:07:53 UTC

  mesa (25.2.8-0ubuntu0.25.10.2) questing-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds memory access in WebGPU
    - debian/patches/CVE-2026-40393-pre1.patch: move STACK_ARRAY into util
      in src/util/meson.build, src/util/stack_array.h,
      src/vulkan/util/vk_util.h.
    - debian/patches/CVE-2026-40393-1.patch: use STACK_ARRAY instead of
      NIR_VLA in src/compiler/spirv/spirv_to_nir.c.
    - debian/patches/CVE-2026-40393-2.patch: use STACK_ARRAY instead of
      NIR_VLA in src/compiler/nir/nir_functions.c.
    - CVE-2026-40393

 -- Marc Deslauriers <email address hidden> Tue, 21 Apr 2026 09:27:15 -0400
CVE-2026-40393 In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an


About   -   Send Feedback to @ubuntu_updates