20150622
|
Size: 3029
Comment:
|
← Revision 73 as of 2015-06-22 16:51:47 ⇥
Size: 2574
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 1: | Line 1: |
| ## page was copied from MeetingLogs/Security/20150427 ## page was copied from MeetingLogs/Security/20150420 |
## page was copied from MeetingLogs/Security/20150615 |
| Line 6: | Line 5: |
| * '''When''': Mon Apr 27th 2015 16:33 UTC * '''End''': 16:58 UTC |
* '''When''': Mon June 22nd 2015 16:31 UTC * '''End''': 16:50 UTC |
| Line 12: | Line 11: |
| * jdstrand | |
| Line 20: | Line 20: |
| * jdstrand | * None |
| Line 24: | Line 24: |
| * Rhonda D'Vine (rhonda) provided debdiffs for precise-utopic for wesnoth-1.10 (LP: #1445688) * Weekly stand-up report (each member discusses any pending and planned future work for the week) {{{#!wiki comment |
* Otto Kekaelaeinen (otto) provided debdiffs for trusty-utopic for mariadb-5.5 (LP: #1464895) * Weekly stand-up report (each member discusses any pending and planned future work for the week) |
| Line 28: | Line 27: |
| * Finalizing snappy seccomp glue layer today * Test the applied snappy seccomp policies and update ubuntu-core-security, if necessary * Write code to update already generated snappy seccomp policies when ubuntu-core-security-seccomp is updated * Update snappy build to fail if the package.yaml is malformed when dbus bus-name is specified * Snappy review tools updates }}} |
* embargoed items (2) * work planning/tracking * defining security update processes for system image based systems |
| Line 36: | Line 32: |
| * sponsoring ffmpeg * patch piloting * published several updates and have a couple more queued up for testing * finish the openssl precise update to enable tlsv1.2, by default, for clients |
* embargoed issue * python2.7 updates * tomcat updates |
| Line 42: | Line 37: |
| * prepare Trusty SRU of AppArmor python utils * AppArmor patch review * continue testing of gcc-5 pie-on-amd64 packages |
* gcc pie testing * !AppArmor patch review in prep for the 2.10 release * verify 14.04 apparmor SRU |
| Line 47: | Line 42: |
| * circle back to a number of things that were ignored during the ramp up to the Vivid release * finish kernel patches for AppArmor kernel keyring mediation |
* embargoed issue * publishing patch updates * work tracking improvements * !AppArmor userspace support for kernel keyring mediation |
| Line 50: | Line 47: |
| * Backported CVE kernel fixes to discuss with the kernel team * Send AppArmor bug fixes to the kernel team (LP: #1430546 and others) * AppArmor kernel cleanups and upstreaming * Triage new AppArmor kernel oops (LP: #1448912) |
* Advising on the work to add dconf mediation to !AppArmor * finish !AppArmor 2.10 patch reviews/responses * !AppArmor kernel delta upstreaming |
| Line 56: | Line 52: |
| * OpenStack security updates * AppArmor patch reviews |
* serverstack brain dump for !OpenStack testing * ppc64-diag MIR (and depends) * !AppArmor patch reviews |
| Line 59: | Line 56: |
| * Chromium update * Oxide code reviews * Triage browser crash on the phone |
* embargoed issue * working on ubufox to meet Mozilla's requirements for add-on signing * oxide merge reviews * working on oxide 1.9 milestones |
| Line 66: | Line 64: |
| * None | |
| Line 68: | Line 67: |
| Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2015/ubuntu-meeting.2015-04-27-16.33.moin.txt | Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2015/ubuntu-meeting.2015-06-22-16.31.moin.txt |
Meeting
Who: SecurityTeam
When: Mon June 22nd 2015 16:31 UTC
End: 16:50 UTC
Where: #ubuntu-meeting on irc.freenode.net
Chaired By: Tyler Hicks (tyhicks)
Attendance
- jdstrand
- mdeslaur
- sbeattie
- tyhicks
- jjohansen
- sarnold
- chrisccoulson
Not present
- None
Agenda
- Announcements
- Otto Kekaelaeinen (otto) provided debdiffs for trusty-utopic for mariadb-5.5 (LP: #1464895)
- Weekly stand-up report (each member discusses any pending and planned future work for the week)
- jdstrand
- embargoed items (2)
- work planning/tracking
- defining security update processes for system image based systems
- mdeslaur
- weekly role: community
- embargoed issue
- python2.7 updates
- tomcat updates
- sbeattie
- weekly role: bug triage
- gcc pie testing
AppArmor patch review in prep for the 2.10 release
- verify 14.04 apparmor SRU
- tyhicks
- weekly role: cve triage
- embargoed issue
- publishing patch updates
- work tracking improvements
AppArmor userspace support for kernel keyring mediation
- jjohansen
Advising on the work to add dconf mediation to AppArmor
finish AppArmor 2.10 patch reviews/responses
AppArmor kernel delta upstreaming
- sarnold
- weekly role: happy place
serverstack brain dump for OpenStack testing
- ppc64-diag MIR (and depends)
AppArmor patch reviews
- chriscoulson
- embargoed issue
- working on ubufox to meet Mozilla's requirements for add-on signing
- oxide merge reviews
- working on oxide 1.9 milestones
- jdstrand
- Highlighted packages
The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. The highlighted packages for this week are:
The Ubuntu Security team suggests that contributors look into merging Debian security updates in community-supported packages. If you would like to help Ubuntu but are not sure where to start, this is a great way to do so. See the available merges and SecurityTeam/UpdateProcedures for details on preparing Ubuntu security updates. If you have any questions, feel free to ask in #ubuntu-hardened. To find out other ways of helping out, please see SecurityTeam/GettingInvolved.
- Miscellaneous and Questions
- None
Log
Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2015/ubuntu-meeting.2015-06-22-16.31.moin.txt
MeetingLogs/Security/20150622 (last edited 2015-06-22 16:51:47 by tyhicks)