Annabelle wrote:but these sentences stated by rarified are worst to me than a horror movie... Do I have the right "frightful" sensation?
Sorry, Annabelle. I didn't mean to alarm anyone
I tend to write a very dry terse response such as these when I'm acknowledging something that needs to be done while I'm in the process of performing the task. Which doesn't provide any context for someone unfamiliar with what is being done to understand the big picture of what is going on.
As Mac and JW have already noted, this is more a bookkeeping issue from your perspective than a loss of anything. Even though a file in the source code had material that presents a problem, that code was never used in current open source clients. It was just mistakenly made available. But to correct the mistake as quickly as we can, the right thing to do is make the inappropriate code unavailable at all (which right now means limiting access to current code repositories). A big hammer to be sure, but one that can be used quickly. Then while they are unavailable we can do the work to "change history" in the context of the repository, to rebuild it In a way as though the inappropriate code never existed. Since that code wasn't being used when we build a client, that won't really change things from your perspective at all.
That rebuild process will take a bit of time to do properly, which is why is not the first step to solve the problem in the most expedient way.
There are a cascade of other obligations we (anyone making a program available whose source code is licensed under the GPL) are subject to, which is what Lyrositor is referring to. The salient requirement is that a program built from GPL licensed source code must be accompanied by the exact source code used to build it. Since any client built from the source base prior to today was built with the errant file, providing that client without the source files runs afoul of the GPL. So the best thing to do is stop distributing the program until it can be rebuilt without the problem material.
So in short, no horror is required on your part, just an understanding that a lot of paperwork is being shuffled.
_R