Re: Processed: severity of 818217 is grave
On 06/02/2016 03:20 AM, David A Aitcheson wrote:
> This problem was reported upstream and has been worked on.
But it has not been resolved yet in the Debian package which is the whole point.
> Additionally it IS NOT a Xastir problem; it is a "Jasper is not going to be available" problem.
Yes, but that is still a problem with Xastir in Debian because it build-depends on a library
which is no longer maintained and therefore a potential security problem. This is why Debian
is removing this library and any other package depending on Jasper is getting a bug report
to remind the maintainers to work on it.
> The SOLUTION is for people to learn how to pull Xastir from CVS and build on each platform that they use.
>
> Why? Because it is ALREADY FIXED in the CVS available source code.
How is this relevant? The only thing that is of concern for Debian is the version currently in Debian.
> Also note that Xastir is a HAM RADIO OPERATOR USE ONLY program.
Completely missing the point. Debian is concerned of the security of all packages we are shipping,
not just the popular ones unlike other distributions. If a package does not have the release criteria,
it will be removed from testing. Period.
> The Xastir team has _many Wiki's_ and numerous people willing to help those that ask for it nicely.
Again, completely irrelevant.
> Moritz, whatever version you are using is no longer valid unless you pulled it from CVS since 1800 UTC today (01June2016). Yes, the development is that active.
Moritz is not using anything. He is concerned about security, that's what he is doing in Debian. He
couldn't care less about what you are doing in your upstream project.
> The developers DO NOT create any packages for any distributions at all; the packages in the distributions are done by those that volunteer time out of very busy
> schedules.
You think Moritz doesn't know that? Did anyone here ever claim the opposite?
> My suggestion to you, provided you are a Licensed Ham Radio Operator is that you join the Xastir mailing list / reflector at
> http://xastir.org/mailman/listinfo/xastir and also read over the Wiki's available via Xastir.org.
Again, you are completely missing the point. Moritz is not a user. He is concerned about security
in Debian. The current state of Xastir in Debian makes it unfit for release which is why this
bug report exists in the first place.
Please don't accuse others of ignorance when clearly you're the one who is being ignorant since
you apparently don't understand why this bug report was filed in the first place.
> David Aitcheson - KB3EFS
Adrian Glaubitz - DL7YZ
--
.''`. John Paul Adrian Glaubitz
: :' : Debian Developer - glaubitz@debian.org
`. `' Freie Universitaet Berlin - glaubitz@physik.fu-berlin.de
`- GPG: 62FF 8A75 84E0 2956 9546 0006 7426 3B37 F5B5 F913
Reply to: