== Meeting information == * #ubuntu-meeting Meeting, 23 Apr at 16:32 — 16:53 UTC * Full logs at [[http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-04-23-16.32.log.html]] == Meeting summary == ''LINK:'' https://wiki.ubuntu.com/SecurityTeam/Meeting === Announcements === The discussion about "Announcements" started at 16:32. === Weekly stand-up report === The discussion about "Weekly stand-up report" started at 16:33. === Highlighted packages === The discussion about "Highlighted packages" started at 16:48. === Miscellaneous and Questions === The discussion about "Miscellaneous and Questions" started at 16:48. == Vote results == == Done items == * (none) == People present (lines said) == * ratliff (20) * chrisccoulson (8) * jdstrand (8) * sbeattie (8) * jjohansen (8) * mdeslaur (7) * sarnold (5) * leosilva (5) * meetingology (3) == Full Log == 16:32 #startmeeting 16:32 Meeting started Mon Apr 23 16:32:34 2018 UTC. The chair is ratliff. Information about MeetBot at http://wiki.ubuntu.com/meetingology. 16:32 16:32 Available commands: action commands idea info link nick 16:32 The meeting agenda can be found at: 16:32 [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting 16:32 [TOPIC] Announcements 16:33 \o 16:33 18.04 gets released this week! 16:33 oww, nice! 16:33 [TOPIC] Weekly stand-up report 16:33 jdstrand: you are up! 16:35 we'll circle back around to jdstrand later, mdeslaur do you want to go ahead? 16:35 sure! 16:35 I'm in the happy place this week 16:35 I'm going to publish some mysql updates soon once I'm done with testing 16:35 I also have an embargoed issue 16:36 and I'll go down the list after that 16:36 that's it from me, sbeattie? 16:36 I'm on community this week 16:36 I need to check over the release notes and security features wiki pages for 18.04 things. 16:37 I have the usual kernel cve triage things to do 16:37 Still working on the precise gcc retpoline backport :/ 16:37 * jdstrand is here 16:38 I'm also helping jjohansen track down why the apparmor parser userspace tests are failing in some environments. 16:38 and have some misc review work to do there. 16:38 Tht's probably the major highlights for my week. 16:39 jdstrand: you want to go next, and then hand of to jjohansen? 16:39 sure 16:39 This week I plan to work on: 16:39 - focusing on snap usns 16:39 - critical priority snapd PR reviews (none atm) 16:39 - sprint prep 16:39 - will investigate resquashfs wrt electron-builder as have time 16:39 that's it from me. jjohansen, you're up 16:39 I have several new 2.13 bugs to start chasing down, and now an issue with expr-simplify as well 16:39 Mount changes from David Howells to review 16:39 do some revisions for policy hashing and policy versioning patching so I can get those up as wip: merge requests 16:39 proper upstreamable fix for 1750594 to replace the single case fix being used as a short term work around 16:39 finish up further rlimit fixes for bugs discovered while working on 1679704 16:39 continue work on my LSM stacking review for Casey 16:39 work on prompting prototype 16:40 thats it for me sarnold you are up 16:40 I'm on CVE duty this week 16:40 I'll probably hold off on starting that to try to finish up xe-guest-utilities .. the bits I haven't seen yet are all in go, so I'm hoping they're cleaner than the shell stuff I've seen so far.. 16:41 I'll keep on rolling down the MIR list and reading apparmor patches as needed 16:41 that's it for me, chrisccoulson? 16:41 I'm expecting chromium updates this week 16:42 I've got work arounds for the 2 rust issues I'm looking at, although one of those is just "fingers in ears, there are no test failures, lalalala" 16:43 I don't know whether to spend any more time this week on that, it feels a bit pointless 16:43 I've still got to work on backports to all the other releases, so there could be new issues there anyway 16:43 I need to try to find time for the python3.5 backport too 16:44 And I also need to get the thunderbird-next packaging in shape too, for the next major release (which is soon). We ship a thunderbird extension by default, which has historically been low maintenance. But the context behind https://mail.mozilla.org/pipermail/tb-planning/2018-April/005977.html means it will stop being low maintenance now :( 16:45 Given that's my extension, and the low probability of finding anyone else to hand it off to, 3 guesses who will end up with that ;) 16:45 Another fun week. I think that's me done 16:46 I'm on bug triage this week. 16:46 I will be at the product roadmap sprint next week, so the weekly meeting for next week has been cancelled and I have some more sprint prep work to do. 16:46 I am working an embargoed issue and have internal work to do. 16:47 leosilva: you are up 16:47 I'm in the happy place this week :) 16:47 I have a ghostscript update to work. I want to revisit ruby cves/triage too and I'll keep the hunting 16:47 that is me done. 16:47 ratliff: it's back to you 16:48 thanks! 16:48 [TOPIC] Highlighted packages 16:48 The Ubuntu Security team suggests that contributors look into merging Debian security updates in community-supported packages. If you would like to help Ubuntu but are not sure where to start, this is a great way to do so. 16:48 See http://people.canonical.com/~ubuntu-security/d2u/ for available merges and https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details on preparing Ubuntu security updates. If you have any questions, feel free to ask in #ubuntu-hardened. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. 16:48 [TOPIC] Miscellaneous and Questions 16:48 Does anyone have any other questions or items to discuss? 16:53 jdstrand, mdeslaur, sbeattie, jjohansen, sarnold, chrisccoulson, leosilva: Thanks! 16:53 thanks ratliff! 16:53 #endmeeting Generated by MeetBot 0.1.5 (http://wiki.ubuntu.com/meetingology)