Ubuntu Wiki

Security updates

Announcements

• Official Ubuntu Security Announcements

• Unofficial translations of Ubuntu Security Announcements:

  • French

Vulnerability Resources

• Ubuntu CVE tracker

• Common Vulnerabilities and Exposures (CVEs)

• National Vulnerabilities Database

• Open Source Software Security

Update processes

• Security Update Procedures

• StableReleaseUpdates/MicroReleaseExceptions

• StableReleaseUpdates (SRU)

• Backport Requests

Update techniques

• How to prepare an updated package

• How to handle backporting security updates

  • schroot/sbuild setup

  • virtual machine setup

• How to test the update

  • QA Regression Testing

  • Proof of Concept (PoC)
  • Build test suites (eg, 'make check')
• ABI compatibility (eg, check-symbols, nm)
• Checklists

Policies

• Ubuntu Security Policies

• Creating enforcing AppArmor profiles policy

Features

• Feature Matrix (for all releases since Dapper, see the Historical Feature Matrix.)

• Security Hardening Compiler Flags

• AppArmor Profiles

• Applications Built with PIE

• AppArmor docs

• SELinux docs

Process

• Bug Triage

• Release Cycle Actions

Problems

• DebuggingSecurity for bug reports

• DebuggingApparmor for bug reports dealing with AppArmor profiles

CategorySecurityTeam