On Sat, Jan 28, 2017 at 07:20:00PM +0000, Niels Thykier wrote:
> Moritz Mühlenhoff:
> > Niels Thykier <[email protected]> schrieb:
> >>> 852603 virglrenderer can-defer virglrenderer:
> >>> CVE-2016-10163
> >>> 852604 virglrenderer can-defer virglrenderer:
> >>> CVE-2017-5580
> >
> > This hasn't been in a stable release yet and it already orphaned. If noone
> > picks it up or fixes it, let's rather remove it.
> >
> > Cheers,
> > Moritz
>
> That indeed seems like a better solution given the context; I am putting
> those down as "will-remove".
Sounds like good solution considering:
- reason: qemu build-depends libvirglrenderer-dev
source: virglrenderer
qemu (1:2.8+dfsg-2) unstable; urgency=medium
...
* Revert "enable virtio gpu (virglrenderer) and opengl support"
Revert "switch from sdl1 to gtk3"
Revert other gtk2/drm/vte/virgl-related changes
Reopens: #813658, #839695
The change were too close to stretch release and too large,
bringing too much graphics stuff for headless servers,
will re-think this for stretch+1.
sdl1 back: Closes: #851509
virtio-3d bugs: Closes: #849798, #852119
...
-- Michael Tokarev <[email protected]> Mon, 23 Jan 2017 14:06:54 +0300
qemu was the only rdep of virglrenderer.
> Thanks,
> ~Niels
cu
Adrian
--
"Is there not promise of rain?" Ling Tan asked suddenly out
of the darkness. There had been need of rain for many days.
"Only a promise," Lao Er said.
Pearl S. Buck - Dragon Seed
