Ubuntu Wiki

Security Team Weekly Summary for 30 June 2017

The Security Team weekly reports are intended to be very short summaries of the Security Team's weekly activities.

If you would like to reach the Security Team, you can find us at the #ubuntu-hardened channel on FreeNode. Alternatively, you can mail the Ubuntu Hardened mailing list at: ubuntu-hardened@lists.ubuntu.com

During the last week, the Ubuntu Security team:

• Triaged 163 public security vulnerability reports, retaining the 66 that applied to Ubuntu.
• Published 12 Ubuntu Security Notices which fixed 22 security issues (CVEs) across 12 supported packages.

Ubuntu Security Notices

• [USN-3340-1] Apache HTTP Server vulnerabilities

• [USN-3341-1] Systemd vulnerability

• [USN-3342-1] Linux kernel vulnerabilities

• [USN-3343-1] Linux kernel vulnerabilities

• [USN-3344-1] Linux kernel vulnerabilities

• [USN-3344-2] Linux kernel (Xenial HWE) vulnerabilities

• [USN-3345-1] Linux kernel vulnerabilities

• [USN-3338-2] Linux kernel regression

• [USN-3343-2] Linux kernel (Trusty HWE) vulnerabilities

• [USN-3323-2] GNU C Library vulnerability

• [USN-3342-2] Linux kernel (HWE) vulnerabilities

• [USN-3346-1] bind9 vulnerabilities

Bug Triage

• Backlog: https://bugs.launchpad.net/~ubuntu-security/+subscribedbugs

Mainline Inclusion Requests

• gdm3 underway (LP: #1686393)

• MIR backlog: https://bugs.launchpad.net/~ubuntu-security/+assignedbugs?field.searchtext=%5BMIR%5D

Updates to Community Supported Packages

• Otto Kekäläinen (otto) provided updates for trusty for mariadb-5.5 (LP: #1698689)

Weekly Meeting

• Log: https://wiki.ubuntu.com/MeetingLogs/Security/20170626

• Info: https://wiki.ubuntu.com/SecurityTeam/Meeting

What the Security Team is Reading This Week

• Sliding Right Into Disaster

• Recovering Passwords From Brainwaves

More Info

• Ubuntu CVE Tracker

• Ubuntu security notices

• Follow Ubuntu Security on Twitter

• How to help improve Ubuntu security