20180416

Differences between revisions 90 and 93 (spanning 3 versions)
⇤ ← Revision 90 as of 2018-04-09 17:30:04 →
Size: 2704
Editor: emilyr
Comment:
← Revision 93 as of 2018-04-16 17:21:05 → ⇥
Size: 2569
Editor: emilyr
Comment:
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
## page was copied from MeetingLogs/Security/20180409
Line 7: Line 8:
 * '''When''': Mon Apr  2 16:30:59 2018 UTC
 * '''End''': 16:45:13		  * '''When''': Mon Apr 16 16:32:21 2018 UTC
 * '''End''': 16:46:35
Line 13: Line 14:
 {{{#!wiki comment
Line 14: Line 16:
  }}}
 * mdeslaur
Line 15: Line 19:
 * jjohansen
Line 16: Line 21:
 * chrisccoulson
Line 18: Line 24:
 
Line 20: Line 26:
 * mdeslaur
 * jjohansen
 * chrisccoulson		  * jdstrand
Line 27: Line 31:
   * CVE Triage: mdeslaur, Bug Triage: leosilva, Community: sarnold, Happy Place: ratliff, sbeattie    * CVE Triage: ratliff, Bug Triage: sbeattie, Community: mdeslaur, Happy Place: leosilva, sarnold
Line 29: Line 34:
  * Simon Quigley (tsimonq2) provided debdiffs for xenial-artful for atril (LP: #Bug:1759069)
  * Simon Quigley (tsimonq2) provided debdiffs for trusty-xenial for kdepim (LP: #Bug:1698180)
    * Ray Link (rlink) provided a debdiff for xenial for xmltooling (LP: #Bug:1752306)		    * James Cowgill (jcowgill) provided a debdiff for xenial for ffmpeg (LP: #Bug:1697785)
   * Simon Quigley (tsimonq2) provided debdiffs for trusty-artful for calibre (LP: #Bug:1758699)
Line 33: Line 38:
  {{{#!wiki comment
Line 34: Line 40:
   * address conntrack deprecation issues in ufw for 18.04
   * apparmor upload to 18.04 to fix webbrowser-app and mediascanner2 upgrades
Line 37: Line 41:
   * pick up the snap/usn notification work as have time
  {{{#!wiki comment		    * enable resquashfs enforcement in the review tools
   * snap/usn notification
   * attend to high priority snapd reviews
   * address conntrack deprecation issues in ufw for 18.04 SRU as time permits
  }}}
Line 40: Line 47:
   * php updates    * bionic migrations
Line 42: Line 49:
  }}}
Line 44: Line 50:
   * openjdk update publication
   * kernel USN publication		    * kernel CVE triage
Line 47: Line 52:
   * kernel CVE triage
  {{{#!wiki comment		    * security update
Line 50: Line 54:
   * !AppArmor bugs
    * LXD issue with apparmor: https://github.com/lxc/lxd/issues/4340
    * follow up on dangling symlinks apparmorfs issue: https://bugs.launchpad.net/bugs/1755563
   * update bionic LSM stacking patches with the latest upstream revision
  }}}		    * finishing up with the 2.13 bug fixes and packaging changes for SUSE
   * OpenSUSE presentation proposals with cboltz
   * merge rc1 into apparmor-next and then drop on the next set of patches targeted for 4.18
   * follow-up on on bugs LP #Bug:1750594 and #Bug:1679704
   * revisions for policy hashing and policy versioning patching
   * LSM stacking review for Casey
   * work on prompting prototype
Line 57: Line 63:
    * pysmi
  {{{#!wiki comment		     * socat
Line 60: Line 65:
   * rust/cargo updates
   * thunderbird updates
   * !AppArmor auditing changes
   * investigate gcc-6.4 and nodejs build deps for firefox
   * embargoed issues
   * internal issue
  }}}		    * rust 1.25 updates - fix armhf and arm64 test failures
Line 68: Line 67:
   * KPIs
   * miscellaneous		    * begin white paper
   * finish KPIs
   * sprint prep
Line 75: Line 75:
  * Reports of lockups with intel-microcode package. If you are affected, please mark yourself as such on LP: #Bug:1759920   * None
Line 78: Line 78:
http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-04-02-16.30.moin.txt http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-04-16-16.32.moin.txt

Meeting

  • Who: SecurityTeam

  • When: Mon Apr 16 16:32:21 2018 UTC

  • End: 16:46:35

  • Where: #ubuntu-meeting on irc.freenode.net

  • Chaired By: Emily Ratliff (ratliff)

Attendance

  • mdeslaur
  • sbeattie
  • jjohansen
  • sarnold
  • chrisccoulson
  • leosilva
  • ratliff

Not present

  • jdstrand

Agenda

  • Announcements
    • Generalist role rotation
      • CVE Triage: ratliff, Bug Triage: sbeattie, Community: mdeslaur, Happy Place: leosilva, sarnold
    • Contributions

      • James Cowgill (jcowgill) provided a debdiff for xenial for ffmpeg (LP: #1697785)

      • Simon Quigley (tsimonq2) provided debdiffs for trusty-artful for calibre (LP: #1758699)

  • Weekly stand-up report (each member discusses any pending and planned future work for the week)
    • mdeslaur
      • bionic migrations
      • security updates
    • sbeattie
      • kernel CVE triage
      • gcc retpoline backports for 12.04 ESM
      • security update
    • jjohansen
      • finishing up with the 2.13 bug fixes and packaging changes for SUSE
      • OpenSUSE presentation proposals with cboltz
      • merge rc1 into apparmor-next and then drop on the next set of patches targeted for 4.18

      • follow-up on on bugs LP #1750594 and #1679704

      • revisions for policy hashing and policy versioning patching
      • LSM stacking review for Casey
      • work on prompting prototype
    • sarnold
      • MIRs
        • socat

    • ChrisCoulson

      • rust 1.25 updates - fix armhf and arm64 test failures
    • ratliff
      • begin white paper
      • finish KPIs
      • sprint prep
    • leosilva
      • security updates
  • Highlighted packages

    The Ubuntu Security team suggests that contributors look into merging Debian security updates in community-supported packages. If you would like to help Ubuntu but are not sure where to start, this is a great way to do so. See the available merges and SecurityTeam/UpdateProcedures for details on preparing Ubuntu security updates. If you have any questions, feel free to ask in #ubuntu-hardened. To find out other ways of helping out, please see SecurityTeam/GettingInvolved.

  • Miscellaneous and Questions
    • None

Log

http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-04-16-16.32.moin.txt

MeetingLogs/Security/20180416 (last edited 2018-04-16 17:21:05 by emilyr)