Bug#1109041: unblock: gnome-remote-desktop/48.1-4

[Simon McVittie]

Package: release.debian.org
Severity: normal
Tags: moreinfo
X-Debbugs-Cc: gnome-remote-desktop at packages.debian.org, mesa at packages.debian.org
Control: affects -1 + src:gnome-remote-desktop
Control: block 1109007 by -1
User: release.debian.org at packages.debian.org
Usertags: unblock

I haven't actually uploaded this version yet, hence moreinfo tag, but 
I'm opening the unblock request in advance to flag it as being related 
to #1109007.

[ Reason ]

Avoid regressions on platforms where Vulkan works but VA-API doesn't, 
notably Raspberry Pi (<https://bugs.launchpad.net/bugs/2115956>)

[ Impact ]

If Mesa is updated as requested in #1109007, and g-r-d is not updated, 
then g-r-d will only work on machines where VA-API initializes 
successfully.

I think we do want #1109007 for trixie, to avoid the gfxstream driver 
closing unrelated fds and breaking Vulkan games by merely being 
available, even when a different driver is the one actually used for 
rendering (this is an especially visible failure mode with Proton).

Note that the proposed version *does not* fix CVE-2025-5024 (#1106527) 
which is a denial of service via resource exhaustion. The proposed 
change for that CVE has some known issues and as a result has not been 
merged upstream yet, and is a considerably more intrusive change than 
fixing the VA-API-related regression (therefore higher risk), while the 
CVE is also not particularly serious IMO. Someone can follow up on that 
one when the fix has landed upstream.

[ Tests ]

A functionally equivalent version is available in experimental, with no 
indication of problems. I'll smoke-test the proposed version on a trixie 
GNOME system (enable remote desktop on machine under test, connect RDP 
client from another machine) before uploading.

I don't have any hardware that I know to be affected by the issue that's 
being fixed here, but Mesa maintainer Timo Aaltonen said that he 
successfully tested the upstream change on an affected Ubuntu system and 
it fixed the regression, so I think that's good enough.

Autopkgtests "mostly" pass. There is a pre-existing problem with a flaky 
test that intermittently fails (I'll report a separate bug), and I was 
unlucky enough to see the test failure during my first attempt to test 
this, but it does not appear to be related to this change.

[ Risks ]

Low risk, targeted minimal change from upstream to fix a regression.

[ Checklist ]
  [x] all changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in testing

unblock gnome-remote-desktop/48.1-4
-------------- next part --------------
A non-text attachment was scrubbed...
Name: gnome-remote-desktop_48.1-4.diff
Type: text/x-diff
Size: 4199 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnome-maintainers/attachments/20250710/d704efb3/attachment.diff>