News for hackers. Stuff that matters.
Re:The modern packager’s security nightmare by lmm on Monday February 22, 2021 @01:48AM (#26221567)
> If you're creating open source software, they quite literally do! https://www.gnu.org/licenses/gpl-3.0.en.html

Clearly you missed the disclaimer of warranty in the licensing terms.

Packagers are welcome to maintain their own patches, or their own fork, if they like. But they don't have any right to tell upstream what to do or demand particular guarantees from upstream.

Re:The modern packager’s security nightmare by drran on Monday February 22, 2021 @03:26AM (#26222110)
It's temporary, I'm sure. When broken software or a weaponized patch will slip through weak fence of maintainers and then break critical infrastructure, Congress will vote for something to stop that.