20180416

Differences between revisions 84 and 93 (spanning 9 versions)
Revision 84 as of 2018-03-19 16:57:35
Size: 2467
Editor: tyhicks
Comment:
Revision 93 as of 2018-04-16 17:21:05
Size: 2569
Editor: emilyr
Comment:
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
## page was copied from MeetingLogs/Security/20180409
## page was copied from MeetingLogs/Security/20180402
## page was copied from MeetingLogs/Security/20180319
## page was renamed from MeetingLogs/Security/2018319
Line 4: Line 8:
 * '''When''': Mon Mar 19th 2018 16:38 UTC
 * '''End''': 16:56:40
 * '''When''': Mon Apr 16 16:32:21 2018 UTC
 * '''End''': 16:46:35
Line 7: Line 11:
 * '''Chaired By''': Tyler Hicks (tyhicks)  * '''Chaired By''': Emily Ratliff (ratliff)
Line 10: Line 14:
 {{{#!wiki comment
Line 11: Line 16:
  }}}
Line 13: Line 19:
 * tyhicks
Line 18: Line 23:
 * ratliff
 
Line 20: Line 26:
 * ratliff  * jdstrand
Line 25: Line 31:
   * CVE Triage: sarnold, Bug Triage: ratliff, Community: sbeattie, Happy Place: mdeslaur, leosilva
 * Simon Deziel provided debdiffs for xenial-artful for tor (LP: #Bug:1731698)
 * Philip Rinn provided a debdiff for artful for qtpass (LP: #Bug:1747954)
 * Emmet Hikory (persia) provided debdiffs for xenial-artful for mosquitto (LP: #Bug:1752591)
   * CVE Triage: ratliff, Bug Triage: sbeattie, Community: mdeslaur, Happy Place: leosilva, sarnold

  * Contributions
   * James Cowgill (jcowgill) provided a debdiff for xenial for ffmpeg (LP: #Bug:1697785)
   * Simon Quigley (tsimonq2) provided debdiffs for trusty-artful for calibre (LP: #Bug:1758699)
Line 30: Line 38:
  {{{#!wiki comment
Line 31: Line 40:
   * email catchup
   * snapd PR reviews
    * 18.04 desktop priorities
    * layouts
    * portals
    * steam-support interface
   * process/prioritize sprint outcomes
   * finish up miscellaneous updates branches for snapd
   * enable resquashfs enforcement in the review tools
   * snap/usn notification
   * attend to high priority snapd reviews
   * address conntrack deprecation issues in ufw for 18.04 SRU as time permits
  }}}
Line 39: Line 47:
   * php updates    * bionic migrations
Line 42: Line 50:
   * paramiko updates
   * openjdk updates
   * kernel CVE triage
Line 45: Line 52:
   * kernel CVE triage
  * tyhicks
   * merge apparmor 2.12-4 from Debian
   * upload apparmor 2.12-4ubuntu1 to Bionic
    * fix autopkgtest issues in other source packages
   * internal documentation
   * security update
Line 52: Line 54:
   * !AppArmor bugs
    * LXD issue with apparmor: https://github.com/lxc/lxd/issues/4340
    * follow up on dangling symlinks apparmorfs issue: https://bugs.launchpad.net/bugs/1755563
   * update bionic LSM stacking patches with the latest upstream revision
   * finishing up with the 2.13 bug fixes and packaging changes for SUSE
   * OpenSUSE presentation proposals with cboltz
   * merge rc1 into apparmor-next and then drop on the next set of patches targeted for 4.18
   * follow-up on on bugs LP #Bug:1750594 and #Bug:1679704
   * revisions for policy hashing and policy versioning patching
   * LSM stacking review for Casey
   * work on prompting prototype
Line 58: Line 63:
    * uvloop     * socat
Line 60: Line 65:
   * rust/cargo updates
   * thunderbird updates
   * !AppArmor auditing changes
   * investigate gcc-6.4 and nodejs build deps for firefox
   * embargoed issues
   * internal issue
  {{{#!wiki comment
   * rust 1.25 updates - fix armhf and arm64 test failures
Line 68: Line 67:
   * begin white paper
   * finish KPIs
Line 69: Line 70:
   * KPI improvements
   * improve tutorial
  }}}
Line 80: Line 78:
Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-03-19-16.38.moin.txt http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-04-16-16.32.moin.txt

Meeting

  • Who: SecurityTeam

  • When: Mon Apr 16 16:32:21 2018 UTC

  • End: 16:46:35

  • Where: #ubuntu-meeting on irc.freenode.net

  • Chaired By: Emily Ratliff (ratliff)

Attendance

  • mdeslaur
  • sbeattie
  • jjohansen
  • sarnold
  • chrisccoulson
  • leosilva
  • ratliff

Not present

  • jdstrand

Agenda

  • Announcements
    • Generalist role rotation
      • CVE Triage: ratliff, Bug Triage: sbeattie, Community: mdeslaur, Happy Place: leosilva, sarnold
    • Contributions
      • James Cowgill (jcowgill) provided a debdiff for xenial for ffmpeg (LP: #1697785)

      • Simon Quigley (tsimonq2) provided debdiffs for trusty-artful for calibre (LP: #1758699)

  • Weekly stand-up report (each member discusses any pending and planned future work for the week)
    • mdeslaur
      • bionic migrations
      • security updates
    • sbeattie
      • kernel CVE triage
      • gcc retpoline backports for 12.04 ESM
      • security update
    • jjohansen
      • finishing up with the 2.13 bug fixes and packaging changes for SUSE
      • OpenSUSE presentation proposals with cboltz
      • merge rc1 into apparmor-next and then drop on the next set of patches targeted for 4.18
      • follow-up on on bugs LP #1750594 and #1679704

      • revisions for policy hashing and policy versioning patching
      • LSM stacking review for Casey
      • work on prompting prototype
    • sarnold
      • MIRs
        • socat
    • ChrisCoulson

      • rust 1.25 updates - fix armhf and arm64 test failures
    • ratliff
      • begin white paper
      • finish KPIs
      • sprint prep
    • leosilva
      • security updates
  • Highlighted packages

    The Ubuntu Security team suggests that contributors look into merging Debian security updates in community-supported packages. If you would like to help Ubuntu but are not sure where to start, this is a great way to do so. See the available merges and SecurityTeam/UpdateProcedures for details on preparing Ubuntu security updates. If you have any questions, feel free to ask in #ubuntu-hardened. To find out other ways of helping out, please see SecurityTeam/GettingInvolved.

  • Miscellaneous and Questions
    • None

Log

http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-04-16-16.32.moin.txt

MeetingLogs/Security/20180416 (last edited 2018-04-16 17:21:05 by emilyr)