Holger Levsen <holger@layer-acht.org> writes: > On Fri, Oct 03, 2025 at 08:32:28PM +0200, Andreas Tille wrote: >> Am Fri, Oct 03, 2025 at 11:16:11AM +0300 schrieb Adrian Bunk: >> > Are we able to create new point releases of stable and oldstable within 48h, >> > to withdraw the package (and withdraw/update reverse dependencies) there? >> As far as I know currently we can't guarantee such a rapid turnaround >> across all suites. > > i'm perplexed and a bit shocked/sad that you proposed such a aggressive > and also potential harmful timeline to us, why didn't you propose 240h or 168h > or no hour value at all? > > You've put pressure on us without any need :(( I suspect that the 48h comes from the EU's new legislation, so having at least aimed to have a process that we could plausibly hope to complete within 48h strikes me as prudent, even if the specific circumstances of a case might make us fail to hit that target in reality. I doubt (but IANAL) the EU are going to come directly after projects like Debian, but when they do go after a commercial entity then perhaps that might try to drag Debian into the case by blaming us for being slow. Perhaps that means that what we really need to do is make sure that there is the option for such organisations to easily contribute to the effort needed to deal with such cases. That way, when someone tries to blame us for something we can point at the process that they could have followed in order to help address the problem. Cheers, Phil. -- Philip Hands -- https://hands.com/~phil
Attachment:
signature.asc
Description: PGP signature