Criteria for update release?

[Steve Snyder]

Hello.

I'm puzzled by the Fedora Legacy release policy.

There are packages in Testing that are over a month old without having 
been released as Updates.  Reading the FL mailing lists, though, I see no 
discussion of what problems are preventing the release of these packages.

(I am particularly interested in the updated OpenSSL packages, which are 
security-critical.)

Is there a formal testing/release policy that I haven't seen yet?

Thanks.