20180416

Differences between revisions 75 and 93 (spanning 18 versions)
Revision 75 as of 2018-02-12 15:37:48
Size: 2303
Editor: tyhicks
Comment:
Revision 93 as of 2018-04-16 17:21:05
Size: 2569
Editor: emilyr
Comment:
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
## page was copied from MeetingLogs/Security/20180205
## page was copied from MeetingLogs/Security/20180129
## page was copied from MeetingLogs/Security/20180409
## page was copied from MeetingLogs/Security/20180402
## page was copied from MeetingLogs/Security/20180319
## page was renamed from MeetingLogs/Security/2018319
## page was copied from MeetingLogs/Security/20180226
Line 5: Line 8:
 * '''When''': Mon Feb 5th 2018 16:36 UTC
 * '''End''': 16:57 UTC
 * '''When''': Mon Apr 16 16:32:21 2018 UTC
 * '''End''': 16:46:35
Line 8: Line 11:
 * '''Chaired By''': Tyler Hicks (tyhicks)  * '''Chaired By''': Emily Ratliff (ratliff)
Line 11: Line 14:
 {{{#!wiki comment
Line 12: Line 16:
  }}}
Line 14: Line 19:
 * tyhicks  * jjohansen
Line 17: Line 22:
 * leosilva
Line 18: Line 24:
 * leosilva
 
Line 21: Line 26:
 * jjohansen  * jdstrand
Line 25: Line 30:
  * None   * Generalist role rotation
   * CVE Triage: ratliff, Bug Triage: sbeattie, Community: mdeslaur, Happy Place: leosilva, sarnold

  * Contributions
   * James Cowgill (jcowgill) provided a debdiff for xenial for ffmpeg (LP: #Bug:1697785)
   * Simon Quigley (tsimonq2) provided debdiffs for trusty-artful for calibre (LP: #Bug:1758699)
Line 27: Line 38:
  {{{#!wiki comment
Line 28: Line 40:
   * attend snapcraft sprint
   * snapd PR reviews
    * layouts
    * portals
    * x11 interface slot policy
    * steam-support interface
   * lxd snap regression wrt confinement
   * LSM stacking demo
   * create screencast interface
   * stric mode snaps on livecd
   * finish up miscellaneous updates branches for snapd
   * enable resquashfs enforcement in the review tools
   * snap/usn notification
   * attend to high priority snapd reviews
   * address conntrack deprecation issues in ufw for 18.04 SRU as time permits
  }}}
Line 39: Line 47:
   * weekly role: community
   * QEMU updates for Spectre
   * libvirt updates in for Spectre
   * systemd updates
   * squid3 updates
   * php7.0 updates
   * bionic migrations
   * security updates
Line 46: Line 50:
   * weekly role: bug triage
   * gcc-4.6 retpoline backports
   * gcc-7 and gcc-5 uploads
   * gcc cross compiler updates
   * gcc 4.8 update testing
   * look into enabling retpoline compiler options by default in Bionic
  * tyhicks
   * LSM stacking demo
   * embargoed issues
  {{{#!wiki comment
   * kernel CVE triage
   * gcc retpoline backports for 12.04 ESM
   * security update
Line 57: Line 54:
   * update bionic LSM stacking patches with the latest upstream revision
   * !AppArmor mount mediation
   * FOSDEM prep
   * 4.16 pull request
  }}}
   * finishing up with the 2.13 bug fixes and packaging changes for SUSE
   * OpenSUSE presentation proposals with cboltz
   * merge rc1 into apparmor-next and then drop on the next set of patches targeted for 4.18
   * follow-up on on bugs LP #Bug:1750594 and #Bug:1679704
   * revisions for policy hashing and policy versioning patching
   * LSM stacking review for Casey
   * work on prompting prototype
Line 63: Line 62:
   * weekly role: happy place
   * papi MIR
   * openjpeg2 MIR
   * MIRs
    * socat
Line 67: Line 65:
   * chromium-browser update to test and publish
   * rust 1.23 updates
    * investigate test failures
   * cargo updates
   * rust 1.25 updates - fix armhf and arm64 test failures
Line 72: Line 67:
   * weekly role: CVE triage
   * internal work
   * KPI improvements
   * begin white paper
   * finish KPIs
   * sprint prep
Line 76: Line 71:
   * weekly role: happy place
   * clamav update
   * additional security updates
   * security updates
Line 85: Line 78:
Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-02-05-16.36.moin.txt http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-04-16-16.32.moin.txt

Meeting

  • Who: SecurityTeam

  • When: Mon Apr 16 16:32:21 2018 UTC

  • End: 16:46:35

  • Where: #ubuntu-meeting on irc.freenode.net

  • Chaired By: Emily Ratliff (ratliff)

Attendance

  • mdeslaur
  • sbeattie
  • jjohansen
  • sarnold
  • chrisccoulson
  • leosilva
  • ratliff

Not present

  • jdstrand

Agenda

  • Announcements
    • Generalist role rotation
      • CVE Triage: ratliff, Bug Triage: sbeattie, Community: mdeslaur, Happy Place: leosilva, sarnold
    • Contributions
      • James Cowgill (jcowgill) provided a debdiff for xenial for ffmpeg (LP: #1697785)

      • Simon Quigley (tsimonq2) provided debdiffs for trusty-artful for calibre (LP: #1758699)

  • Weekly stand-up report (each member discusses any pending and planned future work for the week)
    • mdeslaur
      • bionic migrations
      • security updates
    • sbeattie
      • kernel CVE triage
      • gcc retpoline backports for 12.04 ESM
      • security update
    • jjohansen
      • finishing up with the 2.13 bug fixes and packaging changes for SUSE
      • OpenSUSE presentation proposals with cboltz
      • merge rc1 into apparmor-next and then drop on the next set of patches targeted for 4.18
      • follow-up on on bugs LP #1750594 and #1679704

      • revisions for policy hashing and policy versioning patching
      • LSM stacking review for Casey
      • work on prompting prototype
    • sarnold
      • MIRs
        • socat
    • ChrisCoulson

      • rust 1.25 updates - fix armhf and arm64 test failures
    • ratliff
      • begin white paper
      • finish KPIs
      • sprint prep
    • leosilva
      • security updates
  • Highlighted packages

    The Ubuntu Security team suggests that contributors look into merging Debian security updates in community-supported packages. If you would like to help Ubuntu but are not sure where to start, this is a great way to do so. See the available merges and SecurityTeam/UpdateProcedures for details on preparing Ubuntu security updates. If you have any questions, feel free to ask in #ubuntu-hardened. To find out other ways of helping out, please see SecurityTeam/GettingInvolved.

  • Miscellaneous and Questions
    • None

Log

http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-04-16-16.32.moin.txt

MeetingLogs/Security/20180416 (last edited 2018-04-16 17:21:05 by emilyr)