20171127
|
Size: 2849
Comment:
|
Size: 2915
Comment:
|
| Deletions are marked like this. | Additions are marked like this. |
| Line 1: | Line 1: |
| ## page was copied from MeetingLogs/Security/20171016 ## page was copied from MeetingLogs/Security/20171002 |
## page was copied from MeetingLogs/Security/20171023 |
| Line 5: | Line 4: |
| * '''When''': Mon Oct 16th 2017 16:31 UTC * '''End''': 16:50 UTC |
* '''When''': Mon Oct 30th 2017 16:33 UTC * '''End''': 16:45 UTC |
| Line 11: | Line 10: |
| * jdstrand | |
| Line 14: | Line 14: |
| * jjohansen * sarnold |
|
| Line 21: | Line 19: |
| * jdstrand | * jjohansen * sarnold |
| Line 25: | Line 24: |
| * Simon Quigley (tsimonq2) provided debdiffs for trusty-artful for git (LP: #Bug:1719740) | * None |
| Line 27: | Line 26: |
| {{{#!wiki comment | |
| Line 29: | Line 27: |
| * finish some snappy-debug work based on sprint feedback | |
| Line 31: | Line 30: |
| * per user mounts PR | * track udev tagging and device cgroup regression * verify uhid interface is still working * broadcom-asic-control interface bug * misc snapd interface policy updates for 2.29 |
| Line 33: | Line 35: |
| * prepare for sprint }}} |
|
| Line 36: | Line 36: |
| * weekly role: happy place * wpa updates * xorg updates |
* weekly role: cve triage * quagga updates |
| Line 42: | Line 41: |
| * Perl update * testing/publishing another security update * !AppArmor maintenance tasks * additional security updates |
* followups from !AppArmor-in-Debian sprint * kernel signoffs and USN publications * openjdk-8 updates to test and publish * CVE notifications for snap owners |
| Line 47: | Line 46: |
| * weekly role: community * SRU verifications for libseccomp and seccomp kernel changes * finalize upstream work for libseccomp and libseccomp-golang * email catchup from traveling |
* weekly role: happy place * eCryptfs patch review * squashfs reproduceability * embargoed issues {{{#!wiki comment |
| Line 56: | Line 56: |
| }}} | |
| Line 57: | Line 58: |
| * weekly role: bug triage * !AppArmor kernel patch reviews |
* weekly role: happy place |
| Line 60: | Line 60: |
| * pcp MIR * !AppArmor patch review * embargoed issue |
|
| Line 61: | Line 64: |
| * update to rust 1.20 in all releases * talk with Will Cooke about the firefox startpage |
* chromium-browser update to test and publish * look into unscheduled firefox release from last week * update to rust 1.21 in all releases |
| Line 65: | Line 69: |
| * weekly role: cve triage * sprint followup |
* weekly role: community * writing assignments * integrating InfluxDB into security KPIs |
| Line 68: | Line 73: |
| * weekly role: happy place * research snap packaging * testing/publishing sssd * additional security updates |
* weekly role: bug triage * security updates |
| Line 79: | Line 82: |
| Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2017/ubuntu-meeting.2017-10-16-16.31.moin.txt | Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2017/ubuntu-meeting.2017-10-30-16.33.moin.txt |
Meeting
Who: SecurityTeam
When: Mon Oct 30th 2017 16:33 UTC
End: 16:45 UTC
Where: #ubuntu-meeting on irc.freenode.net
Chaired By: Tyler Hicks (tyhicks)
Attendance
- jdstrand
- mdeslaur
- sbeattie
- tyhicks
- chrisccoulson
- ratliff
- leosilva
Not present
- jjohansen
- sarnold
Agenda
- Announcements
- None
- Weekly stand-up report (each member discusses any pending and planned future work for the week)
- jdstrand
- finish some snappy-debug work based on sprint feedback
- snapd PR reviews
- snapd layouts feature PR reviews (PR 3621)
- track udev tagging and device cgroup regression
- verify uhid interface is still working
- broadcom-asic-control interface bug
- misc snapd interface policy updates for 2.29
- continue uid/gid work for snap privilege dropping
- mdeslaur
- weekly role: cve triage
- quagga updates
- additional security updates
- sbeattie
- weekly role: happy place
followups from AppArmor-in-Debian sprint
- kernel signoffs and USN publications
- openjdk-8 updates to test and publish
- CVE notifications for snap owners
- tyhicks
- weekly role: happy place
- eCryptfs patch review
- squashfs reproduceability
- embargoed issues
- sarnold
- weekly role: happy place
- spice-vdagent MIR
- pcp MIR
AppArmor patch review
- embargoed issue
ChrisCoulson
- chromium-browser update to test and publish
- look into unscheduled firefox release from last week
- update to rust 1.21 in all releases
AppArmor kernel auditing changes
- ratliff
- weekly role: community
- writing assignments
- integrating InfluxDB into security KPIs
- leosilva
- weekly role: bug triage
- security updates
- jdstrand
- Highlighted packages
The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. The highlighted packages for this week are:
The Ubuntu Security team suggests that contributors look into merging Debian security updates in community-supported packages. If you would like to help Ubuntu but are not sure where to start, this is a great way to do so. See the available merges and SecurityTeam/UpdateProcedures for details on preparing Ubuntu security updates. If you have any questions, feel free to ask in #ubuntu-hardened. To find out other ways of helping out, please see SecurityTeam/GettingInvolved.
- Miscellaneous and Questions
- None
Log
Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2017/ubuntu-meeting.2017-10-30-16.33.moin.txt
MeetingLogs/Security/20171127 (last edited 2017-11-27 16:53:47 by tyhicks)