GNU bug report logs -
#51976
Inquiry: gzip for NASA Use
Previous Next
To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 51976 in the body.
You can then email your comments to 51976 AT debbugs.gnu.org in the normal way.
Toggle the display of automated, internal messages from the tracker.
Report forwarded
to
bug-gzip <at> gnu.org
:
bug#51976
; Package
gzip
.
(Fri, 19 Nov 2021 19:10:01 GMT)
Full text and
rfc822 format available.
Acknowledgement sent
to
"Zhang, Cynthia X. (GSFC-705.0)[TELOPHASE CORP]" <cynthia.x.zhang <at> nasa.gov>
:
New bug report received and forwarded. Copy sent to
bug-gzip <at> gnu.org
.
(Fri, 19 Nov 2021 19:10:01 GMT)
Full text and
rfc822 format available.
Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):
[Message part 1 (text/plain, inline)]
Hello, my name is Cynthia and I am a Supply Chain Risk Management Analyst at NASA. NASA is currently conducting a supply chain assessment of gzip. As stated by Sections 208 and 514 of the Consolidated Appropriations Act, 2021, Public Law 116-260, enacted December 27, 2020, a required step of our process is to verify the Country of Origin (CoO) information for the product, aka the country where the products were developed, manufactured, and assembled. As gzip is open source, we understand that this inquiry is not directly applicable, as contributions may be made from individuals from around the world. In this case, NASA is interested in confirming whether there is an organization which sponsors/publishes the project, or a primary developer who audits the code for potential vulnerabilities, errors, or malicious code. Does gzip have overseeing organization or individual along these lines? If so, please provide the country they are established in so we can provide as much insight as possible following our federal mandate.
Thank you,
Cynthia
[Message part 2 (text/html, inline)]
Reply sent
to
Paul Eggert <eggert <at> cs.ucla.edu>
:
You have taken responsibility.
(Fri, 19 Nov 2021 19:31:02 GMT)
Full text and
rfc822 format available.
Notification sent
to
"Zhang, Cynthia X. (GSFC-705.0)[TELOPHASE CORP]" <cynthia.x.zhang <at> nasa.gov>
:
bug acknowledged by developer.
(Fri, 19 Nov 2021 19:31:02 GMT)
Full text and
rfc822 format available.
Message #10 received at 51976-done <at> debbugs.gnu.org (full text, mbox):
On 11/19/21 11:04, cynthia.x.zhang wrote:
> Does gzip have overseeing organization or individual along these lines?
Yes, the GNU project sponsored by the Free Software Foundation. For
details, please see:
https://savannah.gnu.org/projects/gzip
There's a similar web page for each GNU program that NASA uses. (I hope
you needn't send email for each program....)
Information forwarded
to
bug-gzip <at> gnu.org
:
bug#51976
; Package
gzip
.
(Fri, 19 Nov 2021 19:34:02 GMT)
Full text and
rfc822 format available.
Message #13 received at 51976-done <at> debbugs.gnu.org (full text, mbox):
Thank you for your help
-----Original Message-----
From: Paul Eggert <eggert <at> cs.ucla.edu>
Sent: Friday, November 19, 2021 2:31 PM
To: Zhang, Cynthia X. (GSFC-705.0)[TELOPHASE CORP] <cynthia.x.zhang <at> nasa.gov>
Cc: 51976-done <at> debbugs.gnu.org
Subject: [EXTERNAL] Re: bug#51976: Inquiry: gzip for NASA Use
On 11/19/21 11:04, cynthia.x.zhang wrote:
> Does gzip have overseeing organization or individual along these lines?
Yes, the GNU project sponsored by the Free Software Foundation. For details, please see:
https://gcc02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsavannah.gnu.org%2Fprojects%2Fgzip&data=04%7C01%7Ccynthia.x.zhang%40nasa.gov%7Ce41235e474ae427af81808d9ab933d6b%7C7005d45845be48ae8140d43da96dd17b%7C0%7C0%7C637729471137500485%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C1000&sdata=iaGQFUQmAZ5ZY5bSexZyCDoKhsyT1plQ8aRI0xK3RSo%3D&reserved=0
There's a similar web page for each GNU program that NASA uses. (I hope you needn't send email for each program....)
bug archived.
Request was from
Debbugs Internal Request <help-debbugs <at> gnu.org>
to
internal_control <at> debbugs.gnu.org
.
(Sat, 18 Dec 2021 12:24:09 GMT)
Full text and
rfc822 format available.
This bug report was last modified 2 years and 91 days ago.
Previous Next
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson.