== Meeting information == * #ubuntu-meeting Meeting, 14 Apr at 16:34 — 17:25 UTC * Full logs at [[http://ubottu.com/meetingology/logs/ubuntu-meeting/2014/ubuntu-meeting.2014-04-14-16.34.log.html]] == Meeting summary == ''LINK:'' https://wiki.ubuntu.com/SecurityTeam/Meeting === Announcements === The discussion about "Announcements" started at 16:34. === Weekly stand-up report === The discussion about "Weekly stand-up report" started at 16:35. * ''LINK:'' https://wiki.ubuntu.com/Touch/Install#Supported_devices_and_codenames === Highlighted packages === The discussion about "Highlighted packages" started at 17:11. * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/pywbem.html * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/php-radius.html * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/ibm-3270.html * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/tpp.html * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/ltp.html === Miscellaneous and Questions === The discussion about "Miscellaneous and Questions" started at 17:12. == Vote results == == Done items == * (none) == People present (lines said) == * jdstrand (58) * mdeslaur (22) * chrisccoulson (17) * jjohansen (12) * sarnold (8) * tyhicks (8) * sbeattie (6) * meetingology (3) * ubottu (1) == Full Log == 16:34 #startmeeting 16:34 Meeting started Mon Apr 14 16:34:34 2014 UTC. The chair is jdstrand. Information about MeetBot at http://wiki.ubuntu.com/meetingology. 16:34 16:34 Available commands: action commands idea info link nick 16:34 The meeting agenda can be found at: 16:34 [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting 16:34 [TOPIC] Announcements 16:34 Thanks to Patrik Lundin (patrik-lundin) provided debdiffs for lucid-precise for OpenAFS (LP: #1305807). Your work is very much appreciated and will keep Ubuntu users secure. Great job! :) 16:34 Launchpad bug 1305807 in openafs (Ubuntu) "DSA-2899-1 openafs -- security update" [Undecided,Fix released] https://launchpad.net/bugs/1305807 16:35 [TOPIC] Weekly stand-up report 16:35 I'll go first 16:35 I've got a short week this week (off friday) and next (off monday) 16:35 I'm on triage this week 16:35 I'd like to finish up install testing. I did desktop and server already and filed a couple of bugs 16:36 still going through touch 16:36 I'd like to take a look at scopes confinement 16:36 and get to some updates 16:36 mdeslaur: you're up 16:36 I'm on community this week 16:36 I'm off on monday also 16:37 I'm working on the usual CVE updates 16:37 that's pretty much it for me, sbeattie, you're up 16:37 I'm focused on apparmor again this week. 16:37 I'm still trying to wrap up my review of jjohansen's patches 16:38 as well as writing and doing some additional tests 16:38 I need to shave some yaks and upgrade a couple of my secondary systems to trusty 16:39 That's pretty much it for me; tyhicks, you're up 16:40 I didn't get to iterate on the aa.py patches last week, so I've still got to do that 16:41 I was just reminded that I need to respin the patches in the upstream dbus-daemon AA mediation bug after some feedback I received 16:41 after that, I need to take a look at my work items and sync up w/ mdeslaur 16:41 wasn't there kdbus stuff from a bit back? 16:42 jdstrand: ah, yes! that'll be what I focus on 16:42 thanks 16:42 that's it for me 16:42 jjohansen: you're up 16:44 I'm working on apparmor this week. I need to finish up the backport kernels for ubuntu touch, and finish up with several bugs lp1306804, two refcount bugs, a pivot_root bug, as well as kick out a new iteration of patches for review 16:44 jjohansen: which kernels are you doing? 16:45 jdstrand: for the backport? 16:45 yeah 16:45 jdstrand: atm 3.4 mako/manta but will also need to do flo 16:45 after that we can see 16:46 grouper might be interesting since several people on the team have it 16:46 yeah 16:46 unity hasn't run super great on it, but I noticed that is is actually useful if you clear out /var/crash/* and kill any running apports 16:47 not saying it is a high priority though. it isn't for me know that I have flo 16:48 jjohansen: oh, goldfish too-- that probably is a high priority 16:48 s/know/now/ 16:48 jdstrand: your the only one on the team 16:48 with flo? 16:48 jdstrand: yeah goldfish too 16:49 (fyi, my flo is my personal device that I dual boot) 16:49 jdstrand: basically those 4 are all the same backport for apparmor 16:49 oh goldfish is with the others? 16:49 I either forgot or never knew that :) 16:49 what's goldfish? 16:49 emulator 16:49 emulator 16:49 oh 16:50 do we have a handy table somewhere to convert these names into what they actually are? 16:51 sarnold: I'm making one right now 16:51 sarnold: hrmm, I'm not sure we do for all of them, there is https://wiki.ubuntu.com/Touch/Devices for the earlier ones 16:51 https://wiki.ubuntu.com/Touch/Install#Supported_devices_and_codenames 16:51 sarnold: before insanity sets in 16:51 yay 16:52 oh, well, there you go 16:52 except for goldfish they're all there 16:52 anyways thats it for me sarnold you are up 16:52 I'm in my happy place this week 16:52 which this week means apparmor patch review 16:52 I'm finished with all the MIRs for trusty :) 16:53 \o/ 16:53 yay 16:53 * jjohansen is not sure that is such a happy place, but is glad sarnold is a masochist 16:53 yeah :) \o/ indeed :) 16:53 but it'll be nice to reduce the number of not-checked-in patches for apparmor, so hooray 16:54 that's me done, chrisccoulson? 16:54 hi :) 16:54 this week, i've got a chromium update 16:55 and i'm also currently investigating getting hangouts working in oxide (requires support for ppapi plugins) 16:56 other than that, it's business as usual :) 16:56 chrisccoulson: we already have those security updates in oxide 501, correct? 16:57 jdstrand, we're based on the dev channel, so I guess so. things are going to be a bit confusing until we're on the stable channel 16:57 chrisccoulson: yeah, you've got the plan to get there though. I forget when you said we'd be on stable... 16:58 i'm going to aim to branch for beta at the next chromium release. i think that's realistic now 16:58 so that would mean we'd be on stable within the next 2 releases 16:58 ie, by chromium 36 16:58 (we're on 34 now) 16:59 is that ~4 weeks? 17:00 it's a bit longer than that. the releases seem to be ~6 weeks 17:00 when do we do 14.04.1? 17:01 ah 17:01 ok 17:01 I couldn't remember if the major release was 2 weeks or 6 17:02 so, 12.04.1 was in august 17:03 that's fine 17:03 we can be on a stable channel quite a way before then :) 17:03 * jdstrand nods 17:03 I'm not worried, I just couldn't remember the timing 17:03 what's special about 14.04.1? 17:03 i'll send an e-mail later so everybody is aware, but I think the aim should be that we branch on the next chromium release (~5-6 weeks from now) 17:03 mdeslaur: its when precise users get the update-manager recommendation to upgrade 17:04 jdstrand: I know what it is, I just don't know why that has anything to do with oxide 17:04 webapp-container is used on the desktop 17:04 installed by default and uses oxide 17:04 o_O? 17:05 where? 17:05 webapps 17:05 this is so we don't need all the special code in firefox and chromium that was so brittle and either broke or blocked the updates 17:05 wow 17:06 (this was the webapps' team plan for the 14.04 dev cycle all along) 17:06 it's in an image near you right now :) 17:06 ok, hah, well it instantly segfaults for me in 14.04 17:06 uh 17:06 oh :/ 17:06 it should not. are you up to date? please file a bug 17:07 1.0.0~bzr501-0ubuntu1 is the latest 17:07 does it require 3d? 17:08 it explodes in a vm, but not on my main desktop 17:08 aha, qtquick requires a GL api 17:08 ah, ok, it segfaults because it doesn't have enough ram 17:09 bumping up the ram in the vm fixed it 17:11 jdstrand, chrisccoulson: sorry for interrupting, please continue 17:11 oh, I think I'm done now anyway :) 17:11 [TOPIC] Highlighted packages 17:11 The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. 17:12 See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. 17:12 http://people.canonical.com/~ubuntu-security/cve/pkg/pywbem.html 17:12 http://people.canonical.com/~ubuntu-security/cve/pkg/php-radius.html 17:12 http://people.canonical.com/~ubuntu-security/cve/pkg/ibm-3270.html 17:12 http://people.canonical.com/~ubuntu-security/cve/pkg/tpp.html 17:12 http://people.canonical.com/~ubuntu-security/cve/pkg/ltp.html 17:12 [TOPIC] Miscellaneous and Questions 17:12 Does anyone have any other questions or items to discuss? 17:25 mdeslaur, sbeattie, tyhicks, jjohansen, sarnold, ChrisCoulson: thanks! 17:25 #endmeeting Generated by MeetBot 0.1.5 (http://wiki.ubuntu.com/meetingology)