Package: ftp.debian.org
Severity: wishlist
This was discussed at one of the past security team meetings, but
there was never a bug for that:
(This is a first high level view, the exact requirements can be hashed
out later.)
It would be great to have a simple (single command) method to simplify
testing security updates. Right now these need to copied manually to
the respective test hosts. If it's not available via apt, this is a
problem for many people since they are unable to find out which binary
packages are installed and how to update them via dpkg.
There should be a method to allow
- publishing a public security issue to a permanent staging repository
ala jessie-security-staging, which people can keep in their apt source
- publishing an non-public security issue to a protected apt
repository to simplify testing for members of the security team
Cheers,
Moritz
