[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bits from the DPL



On Fri, Oct 03, 2025 at 08:40:57AM +0200, Andreas Tille wrote:
>...
> One task not yet covered in the draft is package removals. These were
> missing from the last delegation, though they remain an important
> responsibility.  Most are routine, but exceptional cases may need faster
> action:
> 
>   * If a copyright holder claims a package infringes their rights,
>     Debian should be able to withdraw it quickly (e.g. within 48h) until
>     the claim is clarified or resolved. This requires a clearly
>     responsible team and a visible contact point (e.g. e-mail or web form).
>...

Are we able to create new point releases of stable and oldstable within 48h,
to withdraw the package (and withdraw/update reverse dependencies) there?

A well-known case of claimed copyright infringement that was in the 
courts for two decades affected the Linux kernel.[1] Even in the best 
case where a code fix is available immediately, updating src:linux and 
then rebuilding the installers and then creating new point releases 
would be challenging to do within 48h.

> Kind regards
>     Andreas.

cu
Adrian

[1] https://en.wikipedia.org/wiki/Timeline_of_SCO–Linux_disputes


Reply to: