I don't understand how issuing an update for mpg321 is any different legally than distributing the original mpg321 from the distro in question... If we cannot make an update, then shouldn't we not be distributing the original package too? If it is really this much of a problem, how about distributing rhmask files or binary deltas as discussed in fedora-devel-list?
