[Benjamin_Dobell]

Thanks, edited for clarity. In this case it's GPLv2, so no "cure the violation" clause.

However, even if this were GPLv3, and you were to "cure the violation" that only reinstates your license i.e. the GPLv3 license. Replacing a dependency won't make previously infringing releases any less infringing.