Meeting

• Who: SecurityTeam

• When: Mon Feb 26th 2018 16:33 UTC

• End: 16:53 UTC

• Where: #ubuntu-meeting on irc.freenode.net

• Chaired By: Tyler Hicks (tyhicks)

Attendance

• jdstrand
• mdeslaur
• sbeattie
• tyhicks
• sarnold
• ratliff
• leosilva

Not present

• jjohansen
• chrisccoulson

Agenda

• Announcements
  • Generalist role rotation
    • CVE Triage: mdeslaur, Bug Triage: leosilva, Community: sarnold, Happy Place: ratliff, sbeattie

  • An all new version of the USN website will be deployed today

    • Please report a bug for any issue that you discover

  • Simon Deziel (sdeziel) provided a debdiff for artful for unbound (LP: #1723900)

• Weekly stand-up report (each member discusses any pending and planned future work for the week)
  • jdstrand
    • snapd PR reviews
      • layouts
      • portals
      • steam-support interface
    • stric mode snaps on livecd
    • miscellaneous policy investigations and updates
    • prepare for sprint
    • lxd snap regression wrt confinement
    • create screencast interface
  • mdeslaur
    • sensible-utils updates
    • embargoed issue
  • sbeattie
    • final testing of enabling retpoline by default in 18.04
      • gcc-8, gcc-7, gcc-6, and gcc-5
    • add the documentation bits to a patch to hardening retpoline options to dpkg, to support hardening=[+-]retpoline and submit to debian
    • gcc retpoline backports for 12.04 ESM
  • tyhicks
    • address issues found in the new USN website once it goes live
    • finalize LSM stacking demo
    • embargoed issue
    • involved in the retpoline by default discussions/, uploads, etc.
    • jjohansen

      • AppArmor bugs

        • target domain name bug
        • stacking bug for px transitions
      • update bionic LSM stacking patches with the latest upstream revision

      • AppArmor community meeting

  • sarnold

    • AppArmor patch review

    • brotli MIR
    • respond to openjpeg2 bugs stemming from MIR review

    • ChrisCoulson

      • firefox updates
      • ubuntu-drivers-common updates

      • AppArmor auditing changes

  • ratliff
    • sprint prep
    • KPI improvements
    • improve tutorial
  • leosilva
    • qpdf updates
    • additional security updates
• Highlighted packages

  The Ubuntu Security team suggests that contributors look into merging Debian security updates in community-supported packages. If you would like to help Ubuntu but are not sure where to start, this is a great way to do so. See the available merges and SecurityTeam/UpdateProcedures for details on preparing Ubuntu security updates. If you have any questions, feel free to ask in #ubuntu-hardened. To find out other ways of helping out, please see SecurityTeam/GettingInvolved.

• Miscellaneous and Questions
  • None

Log

Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-02-26-16.33.moin.txt