[Secure-testing-team] DTSA for exim?

[Michael Gilbert]

Dominic Hargreaves wrote:

> On Tue, May 10, 2011 at 11:59:53AM -0400, Michael Gilbert wrote:
> > On Tue, May 10, 2011 at 5:21 AM, Dominic Hargreaves wrote:
> > > Hi,
> > >
> > > Is testing-security currently operational? If so, might it be worth
> > > an update for exim4, which is currently held up by the perl 5.12
> > > migration?
> > 
> > Would it be easier to upload to TPU and ask the release team approve
> > it for testing?  That way you can do all the work yourself (which
> > should be faster).
> 
> Just to be clear, I ask only as an interested observer. It's unlikely
> that I'll do any work on this, not being an Exim maintainer and not
> using testing myself.

I think the current climate is that testing security is solely the
responsibility of maintainers right now.  The secure-testing team
just works to keep track of issues and submit bug reports to keep
maintainers aware.  No one one the team at present seems to be
interested in doing security updates for testing directly (unstable
NMUs that eventually transition to testing are still done though).

All of that is my perspective, and I could very well be wrong.

Mike