20150622
|
Size: 3029
Comment:
|
Size: 2832
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 6: | Line 6: |
| * '''When''': Mon Apr 27th 2015 16:33 UTC | * '''When''': Mon May 4th 2015 16:33 UTC |
| Line 9: | Line 9: |
| * '''Chaired By''': Tyler Hicks (tyhicks) | * '''Chaired By''': Jamie Strandboge (jdstrand) |
| Line 12: | Line 12: |
| * jdstrand | |
| Line 14: | Line 15: |
| * tyhicks | |
| Line 20: | Line 20: |
| * jdstrand | * tyhicks |
| Line 24: | Line 24: |
| * Rhonda D'Vine (rhonda) provided debdiffs for precise-utopic for wesnoth-1.10 (LP: #1445688) * Weekly stand-up report (each member discusses any pending and planned future work for the week) |
* Andreas Cadhalpun (andreas-cadhalpun) provided a debdiff for vivid for ffmpeg (LP: #1436296) * Unit 193 (unit193) provided a debdiff for trusty and utopic for icecast2 (LP: #1449771) * Felix Geyer (debfx) provided debdiffs for trusty-vivid for pdns (LP: #1450037) * Weekly stand-up report (each member discusses any pending and planned future work for the week) * jdstrand * attend UOS * seccomp SRU * seccomp policy regeneration on policy updates * ubuntu-core-security SRU * review tools updates for snaps * mdeslaur * short week * weekly role: happy place * pending updates * sbeattie * weekly role: community * attend UOS * apparmor and rsyslog SRU * apparmor upload for wiley (will look at the recent Debian upload for that) * gcc pie testing (few more test rebuilds, then can proceed with benchnmarking) |
| Line 27: | Line 45: |
| * jdstrand * Finalizing snappy seccomp glue layer today * Test the applied snappy seccomp policies and update ubuntu-core-security, if necessary * Write code to update already generated snappy seccomp policies when ubuntu-core-security-seccomp is updated * Update snappy build to fail if the package.yaml is malformed when dbus bus-name is specified * Snappy review tools updates }}} * mdeslaur * weekly role: community * sponsoring ffmpeg * patch piloting * published several updates and have a couple more queued up for testing * finish the openssl precise update to enable tlsv1.2, by default, for clients * sbeattie * weekly role: bug triage * prepare Trusty SRU of AppArmor python utils * AppArmor patch review * continue testing of gcc-5 pie-on-amd64 packages |
|
| Line 49: | Line 49: |
| }}} | |
| Line 50: | Line 51: |
| * Backported CVE kernel fixes to discuss with the kernel team * Send AppArmor bug fixes to the kernel team (LP: #1430546 and others) * AppArmor kernel cleanups and upstreaming * Triage new AppArmor kernel oops (LP: #1448912) |
* cleaning up the domain transition bits and hunting bugs, improving, extending or writing new regression tests around that |
| Line 55: | Line 53: |
| * weekly role: happy place * OpenStack security updates * AppArmor patch reviews |
* weekly role: triage * OpenStack security updates: still having issues with charms in testing lab, but working through them * attend UOS |
| Line 59: | Line 57: |
| * Chromium update * Oxide code reviews * Triage browser crash on the phone |
* short week * branch reviews (eg, camera) * media-permissions branch |
| Line 68: | Line 66: |
| Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2015/ubuntu-meeting.2015-04-27-16.33.moin.txt | Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2015/ubuntu-meeting.2015-05-04-16.38.moin.txt |
Meeting
Who: SecurityTeam
When: Mon May 4th 2015 16:33 UTC
End: 16:58 UTC
Where: #ubuntu-meeting on irc.freenode.net
Chaired By: Jamie Strandboge (jdstrand)
Attendance
- jdstrand
- mdeslaur
- sbeattie
- jjohansen
- sarnold
- chrisccoulson
Not present
- tyhicks
Agenda
- Announcements
- Andreas Cadhalpun (andreas-cadhalpun) provided a debdiff for vivid for ffmpeg (LP: #1436296)
- Unit 193 (unit193) provided a debdiff for trusty and utopic for icecast2 (LP: #1449771)
- Felix Geyer (debfx) provided debdiffs for trusty-vivid for pdns (LP: #1450037)
- Weekly stand-up report (each member discusses any pending and planned future work for the week)
- jdstrand
- attend UOS
- seccomp SRU
- seccomp policy regeneration on policy updates
- ubuntu-core-security SRU
- review tools updates for snaps
- mdeslaur
- short week
- weekly role: happy place
- pending updates
- sbeattie
- weekly role: community
- attend UOS
- apparmor and rsyslog SRU
- apparmor upload for wiley (will look at the recent Debian upload for that)
- gcc pie testing (few more test rebuilds, then can proceed with benchnmarking)
- jjohansen
- cleaning up the domain transition bits and hunting bugs, improving, extending or writing new regression tests around that
- sarnold
- weekly role: triage
OpenStack security updates: still having issues with charms in testing lab, but working through them
- attend UOS
- chriscoulson
- short week
- branch reviews (eg, camera)
- media-permissions branch
- jdstrand
- Highlighted packages
The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. The highlighted packages for this week are:
The Ubuntu Security team suggests that contributors look into merging Debian security updates in community-supported packages. If you would like to help Ubuntu but are not sure where to start, this is a great way to do so. See the available merges and SecurityTeam/UpdateProcedures for details on preparing Ubuntu security updates. If you have any questions, feel free to ask in #ubuntu-hardened. To find out other ways of helping out, please see SecurityTeam/GettingInvolved.
- Miscellaneous and Questions
Log
Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2015/ubuntu-meeting.2015-05-04-16.38.moin.txt
MeetingLogs/Security/20150622 (last edited 2015-06-22 16:51:47 by tyhicks)