Ubuntu Wiki

Security updates

Vulnerability Resources

• Ubuntu CVE tracker

• Common Vulnerabilities and Exposures (CVEs)

• National Vulnerabilities Database

• Open Source Software Security

Update processes

• Security Update Procedures

• StableReleaseUpdates/MicroReleaseExceptions

• StableReleaseUpdates (SRU)

• Backport Requests

Update techniques

• How to handle backporting security updates
• How to test the update

  • QA Regression Testing

  • Proof of Concept (PoC)
  • Build test suites (eg, 'make check')
• ABI compatibility (eg, check-symbols, nm)
• Checklists

Policies

(FAQ could link to KnowledgeBase)

• policy on local DoS

• policy on root passwords/sudo

• policy on open network ports
• policy on sudo
• policy on home directory permissions

• policy on creating enforcing AppArmor profiles

Features

• Security Hardening Compiler Flags

• AppArmor Profiles

• Applications Built with PIE

• AppArmor docs

• SELinux docs

Problems

• DebuggingSecurity for bug reports

• DebuggingApparmor for bug reports dealing with AppArmor profiles

CategorySecurityTeam