SUSE-SU-2026:1845-1

Опубликовано: 13 мая 2026

Источник: suse-cvrf

Описание

Security update for Mesa

This update for Mesa fixes the following issue:

CVE-2026-40393: out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party (bsc#1261998).

Список пакетов

Container suse/kiosk/pulseaudio:latest

Mesa-24.3.3-150700.93.8.1

Mesa-dri-24.3.3-150700.93.8.1

Mesa-gallium-24.3.3-150700.93.8.1

Mesa-libEGL1-24.3.3-150700.93.8.1

Mesa-libGL1-24.3.3-150700.93.8.1

Mesa-libglapi0-24.3.3-150700.93.8.1

libgbm1-24.3.3-150700.93.8.1

Container suse/kiosk/xorg:latest

Mesa-24.3.3-150700.93.8.1

Mesa-dri-24.3.3-150700.93.8.1

Mesa-gallium-24.3.3-150700.93.8.1

Mesa-libEGL1-24.3.3-150700.93.8.1

Mesa-libGL1-24.3.3-150700.93.8.1

Mesa-libglapi0-24.3.3-150700.93.8.1

libgbm1-24.3.3-150700.93.8.1

Image SLES15-SP7-SAP-Azure

Mesa-24.3.3-150700.93.8.1

Mesa-dri-24.3.3-150700.93.8.1

Mesa-gallium-24.3.3-150700.93.8.1

Mesa-libEGL1-24.3.3-150700.93.8.1

Mesa-libGL1-24.3.3-150700.93.8.1

Mesa-libglapi0-24.3.3-150700.93.8.1

libgbm1-24.3.3-150700.93.8.1

Image SLES15-SP7-SAP-Azure-3P

Mesa-24.3.3-150700.93.8.1

Mesa-dri-24.3.3-150700.93.8.1

Mesa-gallium-24.3.3-150700.93.8.1

Mesa-libEGL1-24.3.3-150700.93.8.1

Mesa-libGL1-24.3.3-150700.93.8.1

Mesa-libglapi0-24.3.3-150700.93.8.1

libgbm1-24.3.3-150700.93.8.1

Image SLES15-SP7-SAP-BYOS-Azure

Mesa-24.3.3-150700.93.8.1

Mesa-dri-24.3.3-150700.93.8.1

Mesa-gallium-24.3.3-150700.93.8.1

Mesa-libEGL1-24.3.3-150700.93.8.1

Mesa-libGL1-24.3.3-150700.93.8.1

Mesa-libglapi0-24.3.3-150700.93.8.1

libgbm1-24.3.3-150700.93.8.1

Image SLES15-SP7-SAP-BYOS-EC2

Mesa-24.3.3-150700.93.8.1

Mesa-dri-24.3.3-150700.93.8.1

Mesa-gallium-24.3.3-150700.93.8.1

Mesa-libEGL1-24.3.3-150700.93.8.1

Mesa-libGL1-24.3.3-150700.93.8.1

Mesa-libglapi0-24.3.3-150700.93.8.1

libgbm1-24.3.3-150700.93.8.1

Image SLES15-SP7-SAP-BYOS-GCE

Mesa-24.3.3-150700.93.8.1

Mesa-dri-24.3.3-150700.93.8.1

Mesa-gallium-24.3.3-150700.93.8.1

Mesa-libEGL1-24.3.3-150700.93.8.1

Mesa-libGL1-24.3.3-150700.93.8.1

Mesa-libglapi0-24.3.3-150700.93.8.1

libgbm1-24.3.3-150700.93.8.1

Image SLES15-SP7-SAP-EC2

Mesa-24.3.3-150700.93.8.1

Mesa-dri-24.3.3-150700.93.8.1

Mesa-gallium-24.3.3-150700.93.8.1

Mesa-libEGL1-24.3.3-150700.93.8.1

Mesa-libGL1-24.3.3-150700.93.8.1

Mesa-libglapi0-24.3.3-150700.93.8.1

libgbm1-24.3.3-150700.93.8.1

Image SLES15-SP7-SAP-GCE

Mesa-24.3.3-150700.93.8.1

Mesa-dri-24.3.3-150700.93.8.1

Mesa-gallium-24.3.3-150700.93.8.1

Mesa-libEGL1-24.3.3-150700.93.8.1

Mesa-libGL1-24.3.3-150700.93.8.1

Mesa-libglapi0-24.3.3-150700.93.8.1

libgbm1-24.3.3-150700.93.8.1

Image SLES15-SP7-SAP-GCE-3P

Mesa-24.3.3-150700.93.8.1

Mesa-dri-24.3.3-150700.93.8.1

Mesa-gallium-24.3.3-150700.93.8.1

Mesa-libEGL1-24.3.3-150700.93.8.1

Mesa-libGL1-24.3.3-150700.93.8.1

Mesa-libglapi0-24.3.3-150700.93.8.1

libgbm1-24.3.3-150700.93.8.1

Image SLES15-SP7-SAP-Hardened-Azure

Mesa-24.3.3-150700.93.8.1

Mesa-dri-24.3.3-150700.93.8.1

Mesa-gallium-24.3.3-150700.93.8.1

Mesa-libEGL1-24.3.3-150700.93.8.1

Mesa-libGL1-24.3.3-150700.93.8.1

Mesa-libglapi0-24.3.3-150700.93.8.1

libgbm1-24.3.3-150700.93.8.1

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

Mesa-24.3.3-150700.93.8.1

Mesa-dri-24.3.3-150700.93.8.1

Mesa-gallium-24.3.3-150700.93.8.1

Mesa-libEGL1-24.3.3-150700.93.8.1

Mesa-libGL1-24.3.3-150700.93.8.1

Mesa-libglapi0-24.3.3-150700.93.8.1

libgbm1-24.3.3-150700.93.8.1

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

Mesa-24.3.3-150700.93.8.1

Mesa-dri-24.3.3-150700.93.8.1

Mesa-gallium-24.3.3-150700.93.8.1

Mesa-libEGL1-24.3.3-150700.93.8.1

Mesa-libGL1-24.3.3-150700.93.8.1

Mesa-libglapi0-24.3.3-150700.93.8.1

libgbm1-24.3.3-150700.93.8.1

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

Mesa-24.3.3-150700.93.8.1

Mesa-dri-24.3.3-150700.93.8.1

Mesa-gallium-24.3.3-150700.93.8.1

Mesa-libEGL1-24.3.3-150700.93.8.1

Mesa-libGL1-24.3.3-150700.93.8.1

Mesa-libglapi0-24.3.3-150700.93.8.1

libgbm1-24.3.3-150700.93.8.1

Image SLES15-SP7-SAP-Hardened-GCE

Mesa-24.3.3-150700.93.8.1

Mesa-dri-24.3.3-150700.93.8.1

Mesa-gallium-24.3.3-150700.93.8.1

Mesa-libEGL1-24.3.3-150700.93.8.1

Mesa-libGL1-24.3.3-150700.93.8.1

Mesa-libglapi0-24.3.3-150700.93.8.1

libgbm1-24.3.3-150700.93.8.1

Image SLES15-SP7-SAPCAL-Azure

Mesa-24.3.3-150700.93.8.1

Mesa-KHR-devel-24.3.3-150700.93.8.1

Mesa-dri-24.3.3-150700.93.8.1

Mesa-gallium-24.3.3-150700.93.8.1

Mesa-libEGL-devel-24.3.3-150700.93.8.1

Mesa-libEGL1-24.3.3-150700.93.8.1

Mesa-libGL-devel-24.3.3-150700.93.8.1

Mesa-libGL1-24.3.3-150700.93.8.1

Mesa-libglapi0-24.3.3-150700.93.8.1

libgbm1-24.3.3-150700.93.8.1

Image SLES15-SP7-SAPCAL-EC2

Mesa-24.3.3-150700.93.8.1

Mesa-KHR-devel-24.3.3-150700.93.8.1

Mesa-dri-24.3.3-150700.93.8.1

Mesa-gallium-24.3.3-150700.93.8.1

Mesa-libEGL-devel-24.3.3-150700.93.8.1

Mesa-libEGL1-24.3.3-150700.93.8.1

Mesa-libGL-devel-24.3.3-150700.93.8.1

Mesa-libGL1-24.3.3-150700.93.8.1

Mesa-libglapi0-24.3.3-150700.93.8.1

libgbm1-24.3.3-150700.93.8.1

Image SLES15-SP7-SAPCAL-GCE

Mesa-24.3.3-150700.93.8.1

Mesa-KHR-devel-24.3.3-150700.93.8.1

Mesa-dri-24.3.3-150700.93.8.1

Mesa-gallium-24.3.3-150700.93.8.1

Mesa-libEGL-devel-24.3.3-150700.93.8.1

Mesa-libEGL1-24.3.3-150700.93.8.1

Mesa-libGL-devel-24.3.3-150700.93.8.1

Mesa-libGL1-24.3.3-150700.93.8.1

Mesa-libglapi0-24.3.3-150700.93.8.1

libgbm1-24.3.3-150700.93.8.1

SUSE Linux Enterprise Module for Basesystem 15 SP7

Mesa-24.3.3-150700.93.8.1

Mesa-32bit-24.3.3-150700.93.8.1

Mesa-KHR-devel-24.3.3-150700.93.8.1

Mesa-devel-24.3.3-150700.93.8.1

Mesa-dri-24.3.3-150700.93.8.1

Mesa-dri-32bit-24.3.3-150700.93.8.1

Mesa-dri-devel-24.3.3-150700.93.8.1

Mesa-gallium-24.3.3-150700.93.8.1

Mesa-gallium-32bit-24.3.3-150700.93.8.1

Mesa-libEGL-devel-24.3.3-150700.93.8.1

Mesa-libEGL1-24.3.3-150700.93.8.1

Mesa-libEGL1-32bit-24.3.3-150700.93.8.1

Mesa-libGL-devel-24.3.3-150700.93.8.1

Mesa-libGL1-24.3.3-150700.93.8.1

Mesa-libGL1-32bit-24.3.3-150700.93.8.1

Mesa-libGLESv1_CM-devel-24.3.3-150700.93.8.1

Mesa-libGLESv2-devel-24.3.3-150700.93.8.1

Mesa-libGLESv3-devel-24.3.3-150700.93.8.1

Mesa-libd3d-24.3.3-150700.93.8.1

Mesa-libd3d-devel-24.3.3-150700.93.8.1

Mesa-libglapi-devel-24.3.3-150700.93.8.1

Mesa-libglapi0-24.3.3-150700.93.8.1

Mesa-libglapi0-32bit-24.3.3-150700.93.8.1

Mesa-libva-24.3.3-150700.93.8.1

Mesa-libva-32bit-24.3.3-150700.93.8.1

Mesa-vulkan-device-select-24.3.3-150700.93.8.1

Mesa-vulkan-overlay-24.3.3-150700.93.8.1

libOSMesa-devel-24.3.3-150700.93.8.1

libOSMesa8-24.3.3-150700.93.8.1

libgbm-devel-24.3.3-150700.93.8.1

libgbm1-24.3.3-150700.93.8.1

libgbm1-32bit-24.3.3-150700.93.8.1

libvdpau_r600-24.3.3-150700.93.8.1

libvdpau_radeonsi-24.3.3-150700.93.8.1

libvdpau_virtio_gpu-24.3.3-150700.93.8.1

libvulkan_intel-24.3.3-150700.93.8.1

libvulkan_lvp-24.3.3-150700.93.8.1

libvulkan_radeon-24.3.3-150700.93.8.1

libxatracker-devel-1.0.0-150700.93.8.1

libxatracker2-1.0.0-150700.93.8.1

SUSE Linux Enterprise Module for Package Hub 15 SP7

Mesa-vulkan-device-select-32bit-24.3.3-150700.93.8.1

libOSMesa8-32bit-24.3.3-150700.93.8.1

libvulkan_intel-32bit-24.3.3-150700.93.8.1

libvulkan_radeon-32bit-24.3.3-150700.93.8.1

SUSE Linux Enterprise Workstation Extension 15 SP7

Mesa-dri-nouveau-24.3.3-150700.93.8.1

libvdpau_nouveau-24.3.3-150700.93.8.1

Ссылки

https://www.suse.com/support/update/announcement/2026/suse-su-20261845-1/
Link for SUSE-SU-2026:1845-1
https://lists.suse.com/pipermail/sle-updates/2026-May/046424.html
E-Mail link for SUSE-SU-2026:1845-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1261998
SUSE Bug 1261998
https://www.suse.com/security/cve/CVE-2026-40393/
SUSE CVE CVE-2026-40393 page

Описание

In Mesa before 25.3.6 and 26 before 26.0.1, out-of-bounds memory access can occur in WebGPU because the amount of to-be-allocated data depends on an untrusted party, and is then used for alloca.

Затронутые продукты

Container suse/kiosk/pulseaudio:latest:Mesa-24.3.3-150700.93.8.1

Container suse/kiosk/pulseaudio:latest:Mesa-dri-24.3.3-150700.93.8.1

Container suse/kiosk/pulseaudio:latest:Mesa-gallium-24.3.3-150700.93.8.1

Container suse/kiosk/pulseaudio:latest:Mesa-libEGL1-24.3.3-150700.93.8.1

Ссылки

https://www.suse.com/security/cve/CVE-2026-40393.html
CVE-2026-40393
https://bugzilla.suse.com/1261998
SUSE Bug 1261998

SUSE-SU-2026:1845-1

Описание

Список пакетов

Container suse/kiosk/pulseaudio:latest

Container suse/kiosk/xorg:latest

Image SLES15-SP7-SAP-Azure

Image SLES15-SP7-SAP-Azure-3P

Image SLES15-SP7-SAP-BYOS-Azure

Image SLES15-SP7-SAP-BYOS-EC2

Image SLES15-SP7-SAP-BYOS-GCE

Image SLES15-SP7-SAP-EC2

Image SLES15-SP7-SAP-GCE

Image SLES15-SP7-SAP-GCE-3P

Image SLES15-SP7-SAP-Hardened-Azure

Image SLES15-SP7-SAP-Hardened-BYOS-Azure

Image SLES15-SP7-SAP-Hardened-BYOS-EC2

Image SLES15-SP7-SAP-Hardened-BYOS-GCE

Image SLES15-SP7-SAP-Hardened-GCE

Image SLES15-SP7-SAPCAL-Azure

Image SLES15-SP7-SAPCAL-EC2

Image SLES15-SP7-SAPCAL-GCE

SUSE Linux Enterprise Module for Basesystem 15 SP7

SUSE Linux Enterprise Module for Package Hub 15 SP7

SUSE Linux Enterprise Workstation Extension 15 SP7

Ссылки

Уязвимость: CVE-2026-40393

Описание

Затронутые продукты

Ссылки