Ubuntu Wiki

Security updates

Vulnerability Resources

• Ubuntu CVE tracker

• Common Vulnerabilities and Exposures (CVEs)

• National Vulnerabilities Database

• Open Source Software Security

Update processes

• Security Update Procedures

• StableReleaseUpdates/MicroReleaseExceptions

• StableReleaseUpdates (SRU)

• Backport Requests

Update techniques

• How to prepare an updated package

• How to handle backporting security updates
• How to test the update

  • QA Regression Testing

  • Proof of Concept (PoC)
  • Build test suites (eg, 'make check')
• ABI compatibility (eg, check-symbols, nm)
• Checklists

Policies

• Local denial of service (DoS) policy

• Sudo (including root password) policy

• Open network ports and local network privacy policy

• Home directory permissions policy

• Creating enforcing AppArmor profiles policy

Features

• Security Hardening Compiler Flags

• AppArmor Profiles

• Applications Built with PIE

• AppArmor docs

• SELinux docs

Process

• Bug Triage

• Release Cycle Actions

Problems

• DebuggingSecurity for bug reports

• DebuggingApparmor for bug reports dealing with AppArmor profiles

CategorySecurityTeam