Hi Otto,

On 2/12/26 15:14, Otto Kekäläinen wrote:
That is however mostly a theoretic
option, I don't recall any case where a copyright or security case
would have actually required it in practice.


I was involved in such a case with fpc. The best reference I found was the Ubuntu bug. (I was much younger at the time). Apparently upstream really rewrote history in their VCS (not git at the time) and retracted all tar balls from their ftp server.

https://bugs.launchpad.net/ubuntu/+source/fpc/+bug/275688

Paul

Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

Reply via email to