20180423

Differences between revisions 82 and 94 (spanning 12 versions)
⇤ ← Revision 82 as of 2018-03-19 14:39:27 →
Size: 2797
Editor: tyhicks
Comment:
← Revision 94 as of 2018-04-23 17:15:15 → ⇥
Size: 2624
Editor: emilyr
Comment:
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
## page was copied from MeetingLogs/Security/20180416
## page was copied from MeetingLogs/Security/20180409
## page was copied from MeetingLogs/Security/20180402
## page was copied from MeetingLogs/Security/20180319
## page was renamed from MeetingLogs/Security/2018319
Line 4: Line 9:
 * '''When''': Mon Feb 26th 2018 16:33 UTC
 * '''End''': 16:53 UTC		  * '''When''': Mon Apr 16 16:32:21 2018 UTC
 * '''End''': 16:46:35
Line 7: Line 12:
 * '''Chaired By''': Tyler Hicks (tyhicks)  * '''Chaired By''': Emily Ratliff (ratliff)
Line 10: Line 15:
 {{{#!wiki comment
Line 11: Line 17:
  }}}
Line 13: Line 20:
 * tyhicks  * jjohansen
Line 15: Line 22:
 * chrisccoulson
 * leosilva
Line 16: Line 25:
 * leosilva
  
Line 19: Line 27:
 * jjohansen
 * chrisccoulson		  * jdstrand
Line 25: Line 32:
   * CVE Triage: mdeslaur, Bug Triage: leosilva, Community: sarnold, Happy Place: ratliff, sbeattie
  * An all new version of the [[https://usn.ubuntu.com|USN website]] will be deployed today
   * Please [[https://github.com/canonical-websites/usn.ubuntu.com/issues/|report a bug]] for any issue that you discover
  * Simon Deziel (sdeziel) provided a debdiff for artful for unbound (LP: #Bug:1723900)		    * CVE Triage: ratliff, Bug Triage: sbeattie, Community: mdeslaur, Happy Place: leosilva, sarnold

  * Contributions
   * James Cowgill (jcowgill) provided a debdiff for xenial for ffmpeg (LP: #Bug:1697785)
   * Simon Quigley (tsimonq2) provided debdiffs for trusty-artful for calibre (LP: #Bug:1758699)
Line 30: Line 39:
  {{{#!wiki comment
Line 31: Line 41:
   * snapd PR reviews
    * layouts
    * portals
    * steam-support interface
   * stric mode snaps on livecd
   * miscellaneous policy investigations and updates
   * prepare for sprint
   * lxd snap regression wrt confinement
   * create screencast interface		    * finish up miscellaneous updates branches for snapd
   * enable resquashfs enforcement in the review tools
   * snap/usn notification
   * attend to high priority snapd reviews
   * address conntrack deprecation issues in ufw for 18.04 SRU as time permits
  }}}
Line 41: Line 48:
   * sensible-utils updates
   * embargoed issue		    * bionic migrations
   * security updates
Line 44: Line 51:
   * final testing of enabling retpoline by default in 18.04
    * gcc-8, gcc-7, gcc-6, and gcc-5
   * add the documentation bits to a patch to hardening retpoline options to dpkg, to support hardening=[+-]retpoline and submit to debian		    * kernel CVE triage
Line 48: Line 53:
  * tyhicks
   * address issues found in the new USN website once it goes live
   * finalize LSM stacking demo
   * embargoed issue
   * involved in the retpoline by default discussions/, uploads, etc.
  {{{#!wiki comment		    * security update
Line 55: Line 55:
   * !AppArmor bugs
    * target domain name bug
    * stacking bug for px transitions
   * update bionic LSM stacking patches with the latest upstream revision
   * !AppArmor community meeting
  }}}		    * finishing up with the 2.13 bug fixes and packaging changes for SUSE
   * OpenSUSE presentation proposals with cboltz
   * merge rc1 into apparmor-next and then drop on the next set of patches targeted for 4.18
   * follow-up on on bugs LP #Bug:1750594 and #Bug:1679704
   * revisions for policy hashing and policy versioning patching
   * LSM stacking review for Casey
   * work on prompting prototype
Line 62: Line 63:
   * !AppArmor patch review
   * brotli MIR
   * respond to openjpeg2 bugs stemming from MIR review
  {{{#!wiki comment		    * MIRs
    * socat
Line 67: Line 66:
   * firefox updates
   * ubuntu-drivers-common updates
   * !AppArmor auditing changes
  }}}		    * rust 1.25 updates - fix armhf and arm64 test failures
Line 72: Line 68:
   * begin white paper
   * finish KPIs
Line 73: Line 71:
   * KPI improvements
   * improve tutorial
Line 76: Line 72:
   * qpdf updates
   * additional security updates		    * security updates
Line 84: Line 79:
Logs available at http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-02-26-16.33.moin.txt http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-04-16-16.32.moin.txt

Meeting

  • Who: SecurityTeam

  • When: Mon Apr 16 16:32:21 2018 UTC

  • End: 16:46:35

  • Where: #ubuntu-meeting on irc.freenode.net

  • Chaired By: Emily Ratliff (ratliff)

Attendance

  • mdeslaur
  • sbeattie
  • jjohansen
  • sarnold
  • chrisccoulson
  • leosilva
  • ratliff

Not present

  • jdstrand

Agenda

  • Announcements
    • Generalist role rotation
      • CVE Triage: ratliff, Bug Triage: sbeattie, Community: mdeslaur, Happy Place: leosilva, sarnold
    • Contributions

      • James Cowgill (jcowgill) provided a debdiff for xenial for ffmpeg (LP: #1697785)

      • Simon Quigley (tsimonq2) provided debdiffs for trusty-artful for calibre (LP: #1758699)

  • Weekly stand-up report (each member discusses any pending and planned future work for the week)
    • mdeslaur
      • bionic migrations
      • security updates
    • sbeattie
      • kernel CVE triage
      • gcc retpoline backports for 12.04 ESM
      • security update
    • jjohansen
      • finishing up with the 2.13 bug fixes and packaging changes for SUSE
      • OpenSUSE presentation proposals with cboltz
      • merge rc1 into apparmor-next and then drop on the next set of patches targeted for 4.18

      • follow-up on on bugs LP #1750594 and #1679704

      • revisions for policy hashing and policy versioning patching
      • LSM stacking review for Casey
      • work on prompting prototype
    • sarnold
      • MIRs
        • socat

    • ChrisCoulson

      • rust 1.25 updates - fix armhf and arm64 test failures
    • ratliff
      • begin white paper
      • finish KPIs
      • sprint prep
    • leosilva
      • security updates
  • Highlighted packages

    The Ubuntu Security team suggests that contributors look into merging Debian security updates in community-supported packages. If you would like to help Ubuntu but are not sure where to start, this is a great way to do so. See the available merges and SecurityTeam/UpdateProcedures for details on preparing Ubuntu security updates. If you have any questions, feel free to ask in #ubuntu-hardened. To find out other ways of helping out, please see SecurityTeam/GettingInvolved.

  • Miscellaneous and Questions
    • None

Log

http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-04-16-16.32.moin.txt

MeetingLogs/Security/20180423 (last edited 2018-04-23 17:26:40 by emilyr)