== Meeting information == * #ubuntu-meeting Meeting, 23 Mar at 16:36 — 16:57 UTC * Full logs at [[http://ubottu.com/meetingology/logs/ubuntu-meeting/2015/ubuntu-meeting.2015-03-23-16.36.log.html]] == Meeting summary == ''LINK:'' https://wiki.ubuntu.com/SecurityTeam/Meeting === Announcements === The discussion about "Announcements" started at 16:36. === Weekly stand-up report === The discussion about "Weekly stand-up report" started at 16:36. === Highlighted packages === The discussion about "Highlighted packages" started at 16:55. * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/pam-pgsql.html * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/libextlib-ruby.html * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/spice-gtk.html * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/smb4k.html * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/nsd3.html === Miscellaneous and Questions === The discussion about "Miscellaneous and Questions" started at 16:55. == Vote results == == Done items == * (none) == People present (lines said) == * tyhicks (34) * mdeslaur (7) * chrisccoulson (7) * jdstrand (6) * sarnold (5) * sbeattie (5) * ubottu (4) * meetingology (3) == Full Log == 16:36 #startmeeting 16:36 Meeting started Mon Mar 23 16:36:17 2015 UTC. The chair is tyhicks. Information about MeetBot at http://wiki.ubuntu.com/meetingology. 16:36 16:36 Available commands: action commands idea info link nick 16:36 The meeting agenda can be found at: 16:36 [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting 16:36 [TOPIC] Announcements 16:36 Artur Rona (ari-tczew) provided a debdiff for jakarta-taglibs-standard in vivid (LP: #1433365) 16:36 Launchpad bug 1433365 in jakarta-taglibs-standard (Ubuntu) "Merge jakarta-taglibs-standard 1.1.2-3 (main) from Debian unstable (main)" [Medium,Fix released] https://launchpad.net/bugs/1433365 16:36 Artur's work is very much appreciated and will keep Ubuntu users secure. Great job! :) 16:36 [TOPIC] Weekly stand-up report 16:36 jdstrand: You're up 16:37 I was happy last week to finally get the frameworks rfc to the snappy list 16:37 I'll be nailing that down this week 16:37 also working with mvo, et al on seccomp in the snappy launcher 16:38 we also defined the snappy security yamllast week, so updating docs/trello cards for that 16:38 beyond snappy I have one embargoed item 16:38 mdeslaur: you're up 16:39 hey! 16:39 I'm on bug triage this week 16:39 and I have a few updates that I'm currently testing 16:39 I should be publishing them this afternoon or tomorrow morning 16:39 after that, I've got more in the pipeline 16:39 that's about it 16:39 sbeattie: you're up! 16:39 I'm on cve triage this week 16:40 I've got some apparmor patch review to do as well as pulling in fixes to the apparmor package 16:40 I need to continue testing my gcc-5 pie-on-amd64 packages 16:41 that's pretty much it for me 16:41 tyhicks: you're up 16:41 I'm in the happy place this week 16:42 Wrap up security review of the python-bcrypt MIR (LP: #1427861) 16:42 Launchpad bug 1427861 in python-bcrypt (Ubuntu) "[MIR] python-bcrypt (b-d of python-django)" [Undecided,New] https://launchpad.net/bugs/1427861 16:42 Review the initial snappy launcher code 16:42 Land the libapparmor policy cache API changes 16:42 (a few more patches need to be reviewed but I think they're all from jjohansen and are ones that I can review/ack) 16:43 Restart work on AppArmor kernel keyring mediation for user data encryption 16:43 Finish up the patches to fix bug #1430532 and send them out for review 16:43 bug 1430532 in AppArmor "libapparmor needs a public function to break a context into a label and mode" [Medium,In progress] https://launchpad.net/bugs/1430532 16:43 Embargoed item 16:44 that's it for me 16:44 jj is out 16:44 sarnold: you're up 16:45 I'm on community this week 16:46 I'm working on the backlog of openstack security fixes, I've made less progress than I had hoped with the serverstack testing framework, but wow is it nice to run a few commands and ahve two dozen machines come into existence and do my bidding 16:46 nice 16:46 my first plan for specifying per-service package sources didn't work out, the updated packages weren't being installed, but beis ner suggested a small change that seems likely to succeed 16:47 I'm also repsonding to some last-minute MIR questions, it'd be nice to get all the needed ones moved forward for everyone, but that would probably require openstack to behave a bit more friendly for me. 16:48 that's it for me, chrisccoulson? 16:48 Hi :) 16:49 This week, I plan to finish https://code.launchpad.net/~chrisccoulson/oxide/arale-fixes and get it merged in to trunk. It's running ok at the moment, and appears to fix the crashing. I've also found some future opportunities for optimising the new compositing path too 16:49 I also plan to make a start on bug 1428754 16:49 bug 1428754 in Oxide "Persist permission request decisions for a session" [High,Triaged] https://launchpad.net/bugs/1428754 16:50 Which will mean no more popup every single time you go to Google on the phone 16:50 And it's also needed to unblock https://code.launchpad.net/~zaspire/oxide/web-notifications/+merge/251598 16:52 I think that's me done 16:54 chrisccoulson: Thanks for taking time out of your weekend to prepare, test, and publish the firefox updates 16:54 sure, no problem :) 16:54 :) 16:55 [TOPIC] Highlighted packages 16:55 The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. 16:55 See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. 16:55 http://people.canonical.com/~ubuntu-security/cve/pkg/pam-pgsql.html 16:55 http://people.canonical.com/~ubuntu-security/cve/pkg/libextlib-ruby.html 16:55 http://people.canonical.com/~ubuntu-security/cve/pkg/spice-gtk.html 16:55 Does anyone have any other questions or items to discuss? 16:55 http://people.canonical.com/~ubuntu-security/cve/pkg/smb4k.html 16:55 http://people.canonical.com/~ubuntu-security/cve/pkg/nsd3.html 16:55 [TOPIC] Miscellaneous and Questions 16:57 jdstrand, mdeslaur, sbeattie, sarnold, chriscoulson: Thanks! 16:57 #endmeeting Generated by MeetBot 0.1.5 (http://wiki.ubuntu.com/meetingology)