Ubuntu Wiki

Introduction

Security team development (ie specification work) is done as time allows. This page does not include security updates, audits, investigations, etc. This page only includes information on proactive development work as it pertains to the Ubuntu Release schedule. Blueprints that the security team is committed to completing in a development cycle have an 'Essential' priority.

Specifications

Blueprints

Overview: https://wiki.ubuntu.com/SecurityTeam/UDSProceedings/Oneiric

All blueprints involving the security team:

• https://blueprints.launchpad.net/ubuntu?searchtext=security-o

Status (for all blueprints)

• http://status.ubuntu.com/ubuntu-oneiric/canonical-security.html

• Beta 1: http://people.canonical.com/~platform/workitems/oneiric/canonical-security-ubuntu-11.10-beta-1.html

• Entire cycle:

  http://people.canonical.com/~platform/workitems/oneiric/canonical-security.html

Weekly summary

(Updated manually once Beta hits, currently not being updated for Oneiric)

We fixed 0 RC bugs, got 0 new ones.

Milestoned Bugs

Fixed last week:

• None

Triaged problems:

• None

Bugs which need better understanding/debugging

• None

Planned changes for RC 1

• Upload new NSS for updated root certificates (with corresponding SRUs)

Deferred for SRU

• LP: #851986 - use of Ux in ubuntu-* abstractions and profiles is too lenient and should be improved

• LP: #864992 - "Show Containing Folder" button failed to execute err (evince)

Deferred to next release

• LP: #344878 file name too long when creating new file (ecryptfs_lookup: lookup_one_len() returned [-36] on lower_dentry)

Milestoned Bugs/Issues from other Teams

• LP: #848456 - Switch User Account does not require password entry

• LP: #863305 - Image access control is available (nova)

• DONE: LP: #772082 - certificate chain validation failure (gnutls26)

• DONE: LP: #792075 - oneiric live-cd does not work with qemu-kvm

• DONE: LP: #834079 - files written as root to user-controlled folders

• DONE: LP: #835996 - lightdm.log should not be user readable

• DONE: LP: #836521 - User can access mail client if "Add Event" is selected from Date/Time menu in Unity-Greeter

• DONE: LP: #844274 - creating a guest session does not lock the users session

• DONE: LP: #849027 - lightdm does not provide an equivalent to the gdm guest session AppArmor profile

• DONE: LP: #745836 - encrypted swap corrupts application stack/heap [was: soffice.bin SIGSEGV cppu::throwException()]

Other Oneiric-targeted bugs

• None

CategorySecurityTeam