This daemon has unchecked string buffer copies (see nmea_gpgsv() which
passes in a string with no length details), and runs as root. These
kinds of potential faults should be fixed before it goes into main. I
would prefer disabling the geoclue-gypsy backend or doing something to
keep this daemon out of main.
** Changed in: gypsy (Ubuntu)
Status: New => Incomplete
** Changed in: gypsy (Ubuntu)
Assignee: Ubuntu Security Team (ubuntu-security) => Ubuntu Desktop
(ubuntu-desktop)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/688418
Title:
[MIR] gypsy
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
