Ubuntu Wiki

Introduction

Security team development (ie specification work) is done as time allows. This page does not include security updates, audits, investigations, etc. This page only includes information on proactive development work as it pertains to the Ubuntu Release schedule. Blueprints that the security team is committed to completing in a development cycle have an 'Essential' priority.

Specifications

Blueprints

All blueprints involving the security team:

• https://blueprints.launchpad.net/ubuntu?searchtext=n-security

BurnDown (for all blueprints)

• Beta 2: http://people.canonical.com/~platform/workitems/natty/canonical-security-ubuntu-11.04-beta-2.html

• Entire cycle:

  http://people.canonical.com/~platform/workitems/natty/canonical-security.html

Weekly summary

(Updated manually once Beta hits, currently not being updated for Natty)

We fixed 0 RC bugs, got 0 new ones.

Milestoned Bugs

Fixed last week:

• None

Triaged problems:

• None

Bugs which need better understanding/debugging

• None

Planned changes for Beta 2

• None

Deferred for SRU

• None

Milestoned Bugs/Issues from other Teams

• FTBFS due to multiarch changes. Archive rebuilt and fallout is being addressed. The build results show main is in quite good shape, but universe is still fairly scary.

• https://launchpad.net/bugs/716703 (chromium-browser is not built PIE on ARM)

• FIXED: https://launchpad.net/bugs/690873 (latest natty sudo upgrade prompts for conffile update and potentially removes %admin from /etc/sudoers)

• FIXED: https://launchpad.net/bugs/714958 (gnome-screensaver should revoke auto-mount ability while locked)

• DEFERRED: https://bugs.launchpad.net/ecryptfs/+bug/344878 (file name too long when creating new file (ecryptfs_lookup: lookup_one_len() returned [-36] on lower_dentry))

• WON'T FIX https://launchpad.net/bugs/712662 (bash should not have /dev/net)

• DEFERRED: https://launchpad.net/bugs/714908 (gnome-keyring should verify key permissions) -- deferred do to UI work

• FIXED: https://launchpad.net/bugs/663294 (firefox is not built PIE in natty) (may try to workaround and build with gcc-4.4)

Other Natty-targeted bugs

• None

CategorySecurityTeam