removal of glpng and switching chromium-bsu to sdl-image
Hi RMs,
It was recently discovered that glpng has some security issues
(CVE-2010-1519/#595171). libglpng has one reverse dependency
(chromium-bsu) that can use SDL_image as an alternative image loading
backend. Moritz of the security team felt removing the libglpng
library from Debian would be a good idea. Would the release team
accept an upload of chromium-bsu to replace the libglpng-dev
build-dependency with libsdl-image1.2-dev? There is one known but very
minor visual regression with the SDL_image backend, I quote from the
upstream bug;
http://sf.net/support/tracker.php?aid=2998438
With the SDL_image backend, the sheild/damage bars on the left and
right flash as they rotate.
I'm guessing this is due to a difference between the GLU mipmap
building function and the duplicate of it in glpng.
This can be fixed by loading the texture using GL_CLAMP_TO_BORDER, but
that causes another issue when super-sheilds are on and get drained.
--
bye,
pabs
http://wiki.debian.org/PaulWise
Reply to: