gypsy sadly isn't really maintained that much, so I'd recommend moving it to meta-oe.
In the process of moving to meta-oe, the tarball package should be removed and the git package updated to latest master. If we're going to package it up, let's not package a version with known exploits. :)
0.9 release and current git repo have the same code Both have known exploits? Ah I see, you wrote this bug report when there wasn't 0.9 yet. So the point of removing release recipe is not valid after: http://git.openembedded.org/openembedded-core/commit/?id=e5645f3ea39bfe2ec2fe7e67655c72b41bc98f0f martin@jama ~ $ diff -rq gypsy gypsy-0.9 Only in gypsy-0.9: aclocal.m4 Only in gypsy: autogen.sh Only in gypsy-0.9: config.guess Only in gypsy-0.9: config.h.in Only in gypsy-0.9: config.sub Only in gypsy-0.9: configure Only in gypsy-0.9: .configure.ac.swp Only in gypsy-0.9: depcomp Only in gypsy-0.9/docs: Makefile.in Only in gypsy-0.9/docs/reference: gypsy-overrides.txt Only in gypsy-0.9/docs/reference: html Only in gypsy-0.9/docs/reference: Makefile.in Only in gypsy-0.9/docs/reference: ref-gypsy-client.xml Only in gypsy-0.9/docs/reference: ref-gypsy-server.xml Only in gypsy-0.9/docs/reference: tmpl Only in gypsy-0.9/docs/reference: version.xml Only in gypsy-0.9/docs/tools: Makefile.in Only in gypsy/docs: why-not-gpsd.html Only in gypsy-0.9/etc: Makefile.in Only in gypsy-0.9/examples: Makefile.in Only in gypsy: .git Only in gypsy: .gitignore Only in gypsy-0.9: gtk-doc.make Only in gypsy-0.9/gypsy: gypsy-client-bindings.h Only in gypsy-0.9/gypsy: gypsy-discovery-bindings.h Only in gypsy-0.9/gypsy: gypsy-marshal.c Only in gypsy-0.9/gypsy: gypsy-marshal.h Only in gypsy-0.9/gypsy: gypsy-server-bindings.h Only in gypsy-0.9/gypsy: Makefile.in Only in gypsy-0.9: Gypsy.conf Only in gypsy: HACKING Only in gypsy-0.9: install-sh Only in gypsy-0.9/interfaces: Makefile.in Only in gypsy-0.9: ltmain.sh Only in gypsy-0.9: m4 Only in gypsy-0.9: Makefile.in Only in gypsy-0.9: missing Only in gypsy-0.9/src: gypsy-client-glue.h Only in gypsy-0.9/src: gypsy-discovery-glue.h Only in gypsy-0.9/src: gypsy-marshal-internal.c Only in gypsy-0.9/src: gypsy-marshal-internal.h Only in gypsy-0.9/src: gypsy-server-glue.h Only in gypsy-0.9/src: Makefile.in
gypsy was removed from master in OE-Core: http://git.yoctoproject.org/cgit.cgi/poky/commit/?id=7817d91970e204b8bc1b733b8a6dd86a48aa27be
verified in 3f14eb3674d44b61fe19016902d41cae57be8e6c