[MIR] gypsy

[Ken VanDine]

I have reviewed the package and it meets the requirements for main inclusion. It is a build dependency for geoclue, which is needed for indicator-datetime.

libgypsy-dev is needed to build the geoclue-gypsy backend, which is not required for indicator-datetime and there is no plans to include this by default. Of of the build depends for gypsy are already in main.

[Matthias Klose (doko)]

could ubuntu-security please have a final look? package starts a daemon

[Kees Cook (kees)]

This daemon has unchecked string buffer copies (see nmea_gpgsv() which passes in a string with no length details), and runs as root. These kinds of potential faults should be fixed before it goes into main. I would prefer disabling the geoclue-gypsy backend or doing something to keep this daemon out of main.

[Kees Cook (kees)]

I've opened bug 690323 to track security issues and emailed the upstream authors.

[Laurent Bigonville (bigon)]

I'm currently finishing to package gypsy in debian, I will upload it soon.

Current WIP package can be found at http://git.debian.org/?p=collab-maint/gypsy.git;a=summary
I guess it will be better to not divert to much if it goes in ubuntu main

[Launchpad Janitor (janitor)]

[Expired for gypsy (Ubuntu) because there has been no activity for 60 days.]