16:43 #startmeeting 16:43 Meeting started Mon Feb 8 16:43:59 2016 UTC. The chair is tyhicks. Information about MeetBot at http://wiki.ubuntu.com/meetingology. 16:43 16:43 Available commands: action commands idea info link nick 16:44 we're having trouble with the wiki so there's no agenda today 16:44 [TOPIC] Announcements 16:45 Andreas Cadhalpun provided a debdiff for wily for ffmpeg (LP: #1541622) 16:45 Launchpad bug 1541622 in ffmpeg (Ubuntu) " FFmpeg security fixes February 2016" [Medium,Fix released] https://launchpad.net/bugs/1541622 16:45 Thank you for your assistance in keeping Ubuntu users secure! :) 16:45 [TOPIC] Weekly stand-up report 16:45 jdstrand: you're up 16:45 I'm working on snappy this week 16:46 I made good progress on the review tools last week for the refactor and new snap.yaml. hopefully that will be done soon (ideally today, possibly tomorrow) 16:46 then I need to work on squashfs store checks 16:46 and sync up on all the new skills work 16:46 that's it from me. mdeslaur, you're up 16:46 I'm on bug triage this week 16:47 I'm going to spend some time on all the alternate cert chain backports, leading to an updated ca-certificates package that removed the 1024-bit certs 16:47 and nss updates that do the same 16:47 I may pick something else off the list 16:48 oh, and I have nginx updates to test 16:48 that's about it, sbeattie? 16:48 mdeslaur: what all packages do you have to do the alt cert chain backports for? (nss and what else) 16:49 glib-networking, openssl, gnutls 16:49 thanks 16:49 I've just uploaded them all to the proposed security ppa 16:49 oh, and I have to fix the gnupg regression in xenial as all my packages have stop migrating 16:50 sbeattie: go ahead 16:52 * tyhicks goes 16:52 I'm in the happy place this week 16:52 my focus will be wrapping up the AppArmor parser changes needed for stacking 16:53 I'm currently finishing up a community sponsoring duty that I didn't get to last week (LP: #1540243) 16:53 Launchpad bug 1540243 in virtualbox-guest-additions-iso (Ubuntu Wily) "SRU virtualbox-ext-pack, virtualbox-guest-additions-iso to match virtualbox versions" [Low,Confirmed] https://launchpad.net/bugs/1540243 16:53 sarnold: fyi ^ 16:54 I need to sync up with jjohansen on the AppArmor kernel bug fix landing in xenial 16:54 that's it for me 16:54 sorry, I can go 16:54 oh, I'll have some followup work from my rngd investigation from last friday 16:54 sbeattie: ok 16:54 I'm on cve triage this week 16:55 I'm working on a pillow update 16:55 * mdeslaur wishes he had a pillow 16:55 I have a bunch of apparmor work I need to do 16:55 mdeslaur: no doubt. this one is not so comfy 16:55 hehe 16:56 I'm sure there's some bits of the kernel cve triage process that I'll need to handle as supporting touch/ubuntu-core shakes out. 16:56 and that'll probably consume my week 16:57 * sbeattie is not sure who goes next 16:57 jjohansen: you're up 16:57 this week I'm working on appamor stacking 16:58 I'll need to sink up with tyhicks about stacking and I guess a kernel fix 16:58 thats about it for me sarnold, you are up 17:01 i'm on community this week 17:01 I'll finish dpdk's review and start another review, or two if i'm lucky and one's small :) 17:01 I may also get an apparmor patch review or two done along the way for spice 17:01 that's it for me, chrisccoulson? 17:02 I've got a Firefox update to do (today) to fix some regressions in 44.0 17:03 I'm also going to be making some changes to Firefox to enable telemetry (something that's desired upstream), and hopefully fix our automated symbol uploads 17:05 Other than that, I'll be working on Oxide stuff. I want to fix bug 1542119 this week as it's making other work difficult. I've also identified some bugs in the way we handle device scaling that I want to fix 17:05 bug 1542119 in Oxide "Rip all input event handling and compositing glue out of oxide::WebView" [Low,Triaged] https://launchpad.net/bugs/1542119 17:05 chrisccoulson: I saw that you merged in the oxide drag and drop support - nice work! 17:05 Yeah, that's working pretty nicely now :) 17:05 I think that's me done 17:05 thanks 17:06 [TOPIC] Highlighted packages 17:06 The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. 17:06 See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. 17:06 http://people.canonical.com/~ubuntu-security/cve/pkg/openarena.html 17:06 http://people.canonical.com/~ubuntu-security/cve/pkg/sox.html 17:06 http://people.canonical.com/~ubuntu-security/cve/pkg/libguac.html 17:06 http://people.canonical.com/~ubuntu-security/cve/pkg/bcron.html 17:06 http://people.canonical.com/~ubuntu-security/cve/pkg/zeroinstall-injector.html 17:06 [TOPIC] Miscellaneous and Questions 17:06 Does anyone have any other questions or items to discuss? 17:07 sbeattie: what's the status of GCC PIE? 17:08 sbeattie: you said 'a bunch of apparmor work-- what are you going to be focusing on?" 17:09 jdstrand: I need to do some patch review and get some releases out. We also need to sort out what we want to land in xenial. 17:10 tyhicks: I still need to send my review of FTBFS email. 17:11 sbeattie: ack - that test rebuild FTBFS summary email should probably be top priority 17:12 jdstrand, mdeslaur, sbeattie, jjohansen, sarnold, ChrisCoulson: Thanks! 17:12 #endmeeting