20180730

Differences between revisions 7 and 107 (spanning 100 versions)
⇤ ← Revision 7 as of 2017-06-26 16:26:19 →
Size: 3384
Editor: tyhicks
Comment:
← Revision 107 as of 2018-07-23 17:47:02 → ⇥
Size: 2708
Editor: emilyr
Comment:
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
## page was copied from MeetingLogs/Security/20170619
== Meeting (DRAFT) ==		 ## page was copied from MeetingLogs/Security/20180625
== Meeting ==
Line 4: Line 4:
 * '''When''': Mon June 26th 2017 16:30 UTC
 * '''End''': 16:45 UTC		  * '''When''':  Mon Jul 23 16:31:43 2018 UTC
 * '''End''': 16:56:41
Line 7: Line 7:
 * '''Chaired By''': Tyler Hicks (tyhicks)  * '''Chaired By''': Emily Ratliff (ratliff)
Line 10: Line 10:
 {{{#!wiki comment
Line 11: Line 12:
 }}}
Line 13: Line 15:
 * tyhicks  {{{#!wiki comment
 }}}
 * jjohansen
Line 16: Line 20:
 * leosilva
Line 17: Line 22:
 * leosilva  * msalvatore
 * ebarretto
Line 20: Line 26:
 {{{#!wiki comment
 * mdeslaur
Line 21: Line 29:
 }}}
 * jdstrand
 * amurray
Line 24: Line 35:
  * None   * Generalist role rotation
   * CVE Triage: amurray, Bug Triage: mdeslaur, Community: leosilva, Happy Place: barretto, msalvatore, sarnold, ratliff, sbeattie
  * We welcome Mike Salvatore and Eduardo Barretto to the Ubuntu Security Team today! Welcome Mike and Eduardo! We are thrilled that you are joining us to help continue improving security for Ubuntu users!
  * Ubuntu Security Team [[https://grnh.se/8c0a6c1f1|is hiring]]
Line 26: Line 40:
 {{{#!wiki comment
Line 27: Line 42:
   * respond to greengrass-support interface feedback
    * iterate on the policy once a devmode snap is available
   * PR reviews for fixing racy profile generation
    * bpf caching
    * system-key
   * password-manager-service interface PR
   * finish overlayfs/apparmor/snaps investigation
    * file overlay/apparmor bugs
   * snappy-debug work
    * fix to work with journald
   * miscellaneous snappy policy updates PR		    * snapd PR reviews
   * adjust snap-confine to always use a device cgroup
   * follow up on unsquashfs issue (ie, work on re-enabling resquashfs enforcement
   * pick up review-tools snap USNs phase1/part ii work as have time
 }}}
Line 39: Line 48:
   * weekly role: happy place
   * release glibc and exim4 updates
   * ruby updates
   * additional security updates as time allows		    * clamav update
   * if possible, mysql update
   * security updates
Line 44: Line 52:
   * weekly role: happy place
   * embargoed issue
   * sudo update
   * add UCT tracking for some new kernels
  * tyhicks
   * weekly role: community
   * !eCryptfs patch review (userspace and kernel)
   * fscrypt evaluation
   * seccomp patches
   * book upcoming travel
   * help leosilva with the update publishing process and possibly with the bug triage role
  {{{#!wiki comment		    * intel-microcode updates
   * internal tasks
 {{{#!wiki comment
 }}}
Line 57: Line 57:
   * kernel USN publication
   * upstream linux-security-module reviews
    * new revision of LSM stacking patches
    * path based LSM changes from Tetsuo
   * !AppArmor kernel patch upstreaming
    * push out namespacing patch set for review
    * work on an RFC patch set for networking/unix socket mediation
   * LSS program committee duties
    * book travel
    * help set the schedule
  }}}		    * LSS-EU program committee duties
   * review mjg's network labeling patch
   * !AppArmor feature work
Line 69: Line 61:
   * weekly role: bug triage
   * xdelta3 mir
   * gdm3 mir
   * !AppArmor patch review to support jjohansen's upstreaming work		    * MIRs
    * xdg-desktop-portal
   * !DebConf presentaton
Line 74: Line 65:
   * thunderbird update
   * investigate spidermonkey/gjs maintenance plan		    * thunderbird 60 updates
   * !AppArmor audit
Line 78: Line 69:
   * weekly role: CVE triage
   * Ubuntu Core 15 updates
   * technical content and reporting		    * embargoed and internal work
Line 82: Line 71:
   * finished testing a libnl3 update for 12.04 ESM
    * publish it soon
   * pick up another security update
   * train for one of the generalist's roles		    * mutt update publication
   * python-cryptography updates
   * security updates
  * msalvatore
   * ant update
  * ebarretto
   * onboarding tasks
Line 87: Line 79:
 The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. The highlighted packages for this week are:
Line 90: Line 81:
  * none   * tsimonq2 asked where the highlighted packages went. A: We stopped publishing a list of highlighted packages because Debian merges were seen as more likely to succeed and known to be needed.
  * tsimonq2 commented that !QtWebEngine needs an update for its embedded Chromium. Discussion deferred to #ubuntu-hardened.
Line 93: Line 85:
Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2017/ubuntu-meeting.2017-06-19-16.30.moin.txt http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-07-23-16.31.moin.txt

Meeting

  • Who: SecurityTeam

  • When: Mon Jul 23 16:31:43 2018 UTC

  • End: 16:56:41

  • Where: #ubuntu-meeting on irc.freenode.net

  • Chaired By: Emily Ratliff (ratliff)

Attendance

  • mdeslaur
  • sbeattie
  • jjohansen
  • sarnold
  • chrisccoulson
  • leosilva
  • ratliff
  • msalvatore
  • ebarretto

Not present

  • jdstrand
  • amurray

Agenda

  • Announcements
    • Generalist role rotation
      • CVE Triage: amurray, Bug Triage: mdeslaur, Community: leosilva, Happy Place: barretto, msalvatore, sarnold, ratliff, sbeattie
    • We welcome Mike Salvatore and Eduardo Barretto to the Ubuntu Security Team today! Welcome Mike and Eduardo! We are thrilled that you are joining us to help continue improving security for Ubuntu users!

    • Ubuntu Security Team is hiring

  • Weekly stand-up report (each member discusses any pending and planned future work for the week)
    • mdeslaur
      • clamav update
      • if possible, mysql update
      • security updates
    • sbeattie
      • intel-microcode updates
      • internal tasks
    • jjohansen
      • LSS-EU program committee duties
      • review mjg's network labeling patch

      • AppArmor feature work

    • sarnold
      • MIRs
        • xdg-desktop-portal

      • DebConf presentaton

    • ChrisCoulson

      • thunderbird 60 updates

      • AppArmor audit

      • embargoed issue
    • ratliff
      • embargoed and internal work
    • leosilva
      • mutt update publication
      • python-cryptography updates
      • security updates
    • msalvatore
      • ant update
    • ebarretto
      • onboarding tasks
  • Highlighted packages

    The Ubuntu Security team suggests that contributors look into merging Debian security updates in community-supported packages. If you would like to help Ubuntu but are not sure where to start, this is a great way to do so. See the available merges and SecurityTeam/UpdateProcedures for details on preparing Ubuntu security updates. If you have any questions, feel free to ask in #ubuntu-hardened. To find out other ways of helping out, please see SecurityTeam/GettingInvolved.

  • Miscellaneous and Questions
    • tsimonq2 asked where the highlighted packages went. A: We stopped publishing a list of highlighted packages because Debian merges were seen as more likely to succeed and known to be needed.

    • tsimonq2 commented that QtWebEngine needs an update for its embedded Chromium. Discussion deferred to #ubuntu-hardened.

Log

http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-07-23-16.31.moin.txt

MeetingLogs/Security/20180730 (last edited 2018-07-30 17:52:47 by emilyr)