Hi Michael Thanks for handling both #849798, #852119.
Now, I have a bit a problem to track those. Since while I agree, and thanks for that, 1:2.8+dfsg-2, reverts the support for virtio gpu (virtglrenderer) and opengl, the *source* as per 1:2.8+dfsg-2 is still affected. In case this support get readded later, after the stretch release, presumably we just need to make sure the issues are fixed source-wise. But OTOH, at that point they will be fixed upstream already, so I gues we are safe here. I have marked those for now as unfixed, but 'unimportant' in the security-tracker, which basically means: source affected, but built binary packages are not affected. Thanks for your work, Regards, Salvatore