Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.project > #9953

Re: Do we need embargoes for GPL compliance issues?

From Russ Allbery <rra@debian.org>
Newsgroups linux.debian.project
Subject Re: Do we need embargoes for GPL compliance issues?
Date 2018-09-13 04:00 +0200
Message-ID <wxp5g-6gJ-1@gated-at.bofh.it> (permalink)
References <wxiZP-2Rt-3@gated-at.bofh.it>
Organization The Eyrie

Show all headers | View raw


Florian Weimer <fw@deneb.enyo.de> writes:

> Do you think Debian should welcome embargoes for GPL compliance issues?
> Security embargoes are a huge pain, but one would hope that GPL
> violations by Linux distributions are much rarer events.

I'm sorry, I think I'm missing some basic context required to make sense
of this question (and therefore I suspect other people on this list are as
well).

What exactly would we be embargoing, and why?

For security embargoes, what we're embargoing is the description of the
vulnerability, and we're doing that to keep attackers from having an
opportunity to write exploits before a patch is released (putting aside
the question of whether this works).  I'm having a lot of difficulty
mapping those concepts onto license violations, so I don't understand what
you're proposing.

-- 
Russ Allbery (rra@debian.org)               <http://www.eyrie.org/~eagle/>

Back to linux.debian.project | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

Do we need embargoes for GPL compliance issues? Florian Weimer <fw@deneb.enyo.de> - 2018-09-12 21:30 +0200
  Re: Do we need embargoes for GPL compliance issues? Jonathan Carter <jcc@debian.org> - 2018-09-12 22:40 +0200
    Re: Do we need embargoes for GPL compliance issues? Florian Weimer <fw@deneb.enyo.de> - 2018-09-12 22:50 +0200
  Re: Do we need embargoes for GPL compliance issues? Ian Jackson <ijackson@chiark.greenend.org.uk> - 2018-09-13 01:00 +0200
    Re: Do we need embargoes for GPL compliance issues? Ian Jackson <ijackson@chiark.greenend.org.uk> - 2018-09-13 01:10 +0200
  Re: Do we need embargoes for GPL compliance issues? Russ Allbery <rra@debian.org> - 2018-09-13 04:00 +0200
    Re: Do we need embargoes for GPL compliance issues? Paul Wise <pabs@debian.org> - 2018-09-13 05:50 +0200
      Re: Do we need embargoes for GPL compliance issues? Russ Allbery <rra@debian.org> - 2018-09-13 06:40 +0200
        Re: Do we need embargoes for GPL compliance issues? Paul Wise <pabs@debian.org> - 2018-09-13 07:20 +0200
          Re: Do we need embargoes for GPL compliance issues? Russ Allbery <rra@debian.org> - 2018-09-13 07:50 +0200
    Re: Do we need embargoes for GPL compliance issues? Florian Weimer <fw@deneb.enyo.de> - 2018-09-13 08:00 +0200
      Re: Do we need embargoes for GPL compliance issues? Russ Allbery <rra@debian.org> - 2018-09-13 18:10 +0200
        Re: Do we need embargoes for GPL compliance issues? Florian Weimer <fw@deneb.enyo.de> - 2018-09-13 18:50 +0200
        Re: Do we need embargoes for GPL compliance issues? Ben Hutchings <ben@decadent.org.uk> - 2018-09-14 03:30 +0200
          Re: Do we need embargoes for GPL compliance issues? Ian Jackson <ijackson@chiark.greenend.org.uk> - 2018-09-17 13:50 +0200
            Re: Do we need embargoes for GPL compliance issues? Philip Hands <phil@hands.com> - 2018-09-17 22:00 +0200
              so-called "Common Cure" provision, GPL enforcement within Debian, Patrick McHardy's enforcement, etc. (was Re: Do we need embargoes for GPL compliance issues?) "Bradley M. Kuhn" <bkuhn@sfconservancy.org> - 2018-09-20 00:20 +0200

csiph-web