On Fri, Oct 03, 2025 at 08:40:57AM +0200, Andreas Tille wrote:
...
One task not yet covered in the draft is package removals. These were
missing from the last delegation, though they remain an important
responsibility. Most are routine, but exceptional cases may need faster
action:
* If a copyright holder claims a package infringes their rights,
Debian should be able to withdraw it quickly (e.g. within 48h) until
the claim is clarified or resolved. This requires a clearly
responsible team and a visible contact point (e.g. e-mail or web form).
...
Are we able to create new point releases of stable and oldstable within 48h,
to withdraw the package (and withdraw/update reverse dependencies) there?
A well-known case of claimed copyright infringement that was in the
courts for two decades affected the Linux kernel.[1] Even in the best
case where a code fix is available immediately, updating src:linux and
then rebuilding the installers and then creating new point releases
would be challenging to do within 48h.