Until now, I've been handling most of the GNOME-related security update alone, and it's an area where people can easily help too.
Is there any volunteer(s) for that? Ideally, someone else than Atri, since he's already working on various maintenace updates ;-) I also think it'd be cool to have another person than him with additional knowledge!
FWIW, security updates usually involve:
- keeping things private for a bit - looking for patches upstream, and sometimes pinging upstream maintainers - testing the fix (when possible; sometimes, there's no way to easily reproduce the issue) - when it's fine to have the issue public, push the fix in the build service, and submit it for a maintenance update; no patchinfo involved (handled by security team)
I'll obviously help the volunteer(s) (at least, at the beginning) ;-)).