• Bug#1109041: unblock: gnome-remote-desktop/48.1-4

    From Simon McVittie@21:1/5 to All on Thu Jul 10 11:30:01 2025
    XPost: linux.debian.devel.release

    Package: release.debian.org
    Severity: normal
    Tags: moreinfo
    X-Debbugs-Cc: [email protected], [email protected]
    Control: affects -1 + src:gnome-remote-desktop
    Control: block 1109007 by -1
    User: [email protected]
    Usertags: unblock

    I haven't actually uploaded this version yet, hence moreinfo tag, but
    I'm opening the unblock request in advance to flag it as being related
    to #1109007.

    [ Reason ]

    Avoid regressions on platforms where Vulkan works but VA-API doesn't,
    notably Raspberry Pi (<https://bugs.launchpad.net/bugs/2115956>)

    [ Impact ]

    If Mesa is updated as requested in #1109007, and g-r-d is not updated,
    then g-r-d will only work on machines where VA-API initializes
    successfully.

    I think we do want #1109007 for trixie, to avoid the gfxstream driver
    closing unrelated fds and breaking Vulkan games by merely being
    available, even when a different driver is the one actually used for
    rendering (this is an especially visible failure mode with Proton).

    Note that the proposed version *does not* fix CVE-2025-5024 (#1106527)
    which is a denial of service via resource exhaustion. The proposed
    change for that CVE has some known issues and as a result has not been
    merged upstream yet, and is a considerably more intrusive change than
    fixing the VA-API-related regression (therefore higher risk), while the
    CVE is also not particularly serious IMO. Someone can follow up on that
    one when the fix has landed upstream.

    [ Tests ]

    A functionally equivalent version is available in experimental, with no indication of problems. I'll smoke-test the proposed version on a trixie
    GNOME system (enable remote desktop on machine under test, connect RDP
    client from another machine) before uploading.

    I don't have any hardware that I know to be affected by the issue that's
    being fixed here, but Mesa maintainer Timo Aaltonen said that he
    successfully tested the upstream change on an affected Ubuntu system and
    it fixed the regression, so I think that's good enough.

    Autopkgtests "mostly" pass. There is a pre-existing problem with a flaky
    test that intermittently fails (I'll report a separate bug), and I was
    unlucky enough to see the test failure during my first attempt to test
    this, but it does not appear to be related to this change.

    [ Risks ]

    Low risk, targeted minimal change from upstream to fix a regression.

    [ Checklist ]
    [x] all changes are documented in the d/changelog
    [x] I reviewed all changes and I approve them
    [x] attach debdiff against the package in testing

    unblock gnome-remote-desktop/48.1-4

    diffstat for gnome-remote-desktop-48.1 gnome-remote-desktop-48.1

    debian/changelog | 14 ++++
    debian/patches/rdp-renderer-Clear-VkDevice-when-vaapi-initialization-fai.patch | 34 ++++++++++
    debian/patches/series | 1
    src/grd-rdp-renderer.c | 5 +
    4 files changed, 53 insertions(+), 1 deletion(-)

    diff -Nru gnome-remote-desktop-48.1/debian/changelog gnome-remote-desktop-48.1/debian/changelog
    --- gnome-remote-desktop-48.1/debian/changelog 2025-05-13 15:01:58.000000000 +0100
    +++ gnome-remote-desktop-48.1/debian/changelog 2025-07-10 10:04:35.000000000 +0100
    @@ -1,3 +1,17 @@
    +gnome-remote-desktop (48.1-4) unstable; urgency=medium
    +
    + * Team upload
    + * Upload to unstable
    +
    + -- Simon McVittie <[email protected]> Thu, 10 Jul 2025 10:04:35 +0100
    +
    +gnome-remote-desktop (48.1-3) experimental; urgency=medium
    +
    + * Cherry-pick patch to fix gnome-remote-desktop on arm64
    + (at least as seen on Raspberry Pi 5) with mesa 25.07 (LP: #2115956)
    +
    + -- Jeremy B�cha <[email protected]> Tue, 08 Jul 2025 16:59:33 +0200
    +
    gnome-remote-desktop (48.1-2) unstable; urgency=medium

    [ Jeremy B�cha ]
    diff -Nru gnome-remote-desktop-48.1/debian/patches/rdp-renderer-Clear-VkDevice-when-vaapi-initialization-fai.patch gnome-remote-desktop-48.1/debian/patches/rdp-renderer-Clear-VkDevice-when-vaapi-initialization-fai.patch
    --- gnome-remote-desktop-48.1/debian/patches/rdp-renderer-Clear-VkDevice-when-v
  • From Simon McVittie@21:1/5 to Simon McVittie on Thu Jul 10 19:50:01 2025
    XPost: linux.debian.devel.release

    Control: tags -1 - moreinfo

    On Thu, 10 Jul 2025 at 10:26:27 +0100, Simon McVittie wrote:
    [ Reason ]

    Avoid regressions on platforms where Vulkan works but VA-API doesn't,
    notably Raspberry Pi (<https://bugs.launchpad.net/bugs/2115956>)

    [ Impact ]

    If Mesa is updated as requested in #1109007, and g-r-d is not updated,
    then g-r-d will only work on machines where VA-API initializes
    successfully.

    Proposed version now uploaded.

    A functionally equivalent version is available in experimental, with no >indication of problems. I'll smoke-test the proposed version on a trixie >GNOME system (enable remote desktop on machine under test, connect RDP
    client from another machine) before uploading.

    Manual testing was successful.

    There is a pre-existing problem with a flaky
    test that intermittently fails (I'll report a separate bug), and I was >unlucky enough to see the test failure during my first attempt to test
    this, but it does not appear to be related to this change.

    Reported as #1109043.

    smcv

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)