Re: [gpsd-users] GPSD on Debian 10 (buster): allowing other hosts to access gpsd

[Gary E. Miller]

Yo Bernd!

On Sun, 29 Sep 2019 22:16:12 +0200
Bernd Zeimetz <address@hidden> wrote:

> On 9/19/19 8:13 PM, Gary E. Miller wrote:
> >> No.
> >>
> >> https://metadata.ftp-master.debian.org/changelogs//main/g/gpsd/gpsd_3.17-7_changelog
> >>  
> >   
> >> The maintainer is diligent wrt those.  
> >
> > We must be using a different dictionary for "diligent".
> >  
> 
> So?
> Other upstreams are actually helpful and point those people who
> package their software to keep it uptodate and bugfree. Other
> upstreams also provide sane point-releases distributions can use.
> Even very commercial upstreams do this better than you...

Suggestions welcome.

> Since you took over the lead of gpsd, basically no information is
> flowing anymore.

Suggestions welcome.  What do you want to hear about more?

> Where are the CVEs for the other buffer overflows you've mentioned?
> Where are those bugs documented?

The answer to both is in the git logs.  Also in the NEWS file.

Suggestions for further notifications are welcome.

> If you can't handle the CVE part, we're happy to help out.

We've got that covered just fine.  It is the "backports" that are
not happening.

> If those bugs are not worth a CVE, then I guess they don't need to be
> fixed anyway?

Oh, wow, did you really just say that?  I happen to beleive all bugs,
of all severity, are important.

RGDS
GARY
---------------------------------------------------------------------------
Gary E. Miller Rellim 109 NW Wilmington Ave., Suite E, Bend, OR 97703
        address@hidden  Tel:+1 541 382 8588

            Veritas liberabit vos. -- Quid est veritas?
    "If you can't measure it, you can't improve it." - Lord Kelvin

pgpA8TU4o2OYf.pgp
Description: OpenPGP digital signature