mpg321 decision needed

[Charles R. Anderson]

I don't understand how issuing an update for mpg321 is any different
legally than distributing the original mpg321 from the distro in
question...  If we cannot make an update, then shouldn't we not be
distributing the original package too?

If it is really this much of a problem, how about distributing rhmask
files or binary deltas as discussed in fedora-devel-list?