[Secure-testing-team] packages fixed in testing-security still show in rc bug list

[Luk Claes]

Thijs Kinkhorst wrote:
> Hi!
> 
> I have a question about the following. The secure testing team regularly makes 
> uploads to the testing-security to fix security bugs. As such I think that 
> lenny shouldn't be considered as affected by those bugs anymore. Still, the 
> RC bug list at bts.turmzimmer.net shows those bugs with a fixed version that 
> is from testing-security as vulnerable.
> 
> Is that a shortcoming of the bts.t.z website or is there more to it?

There is more to it: Bugs fixed in testing-security don't reach testing
(and thus the release) without manual intervention. Currently
testing-security still doesn't reach testing-proposed-updates which
means that the package needs to be uploaded to testing first. After that
it needs to be reviewed and accepted (including be built on all
architectures) before it can enter testing.

Cheers

Luk