== Meeting information == * #ubuntu-meeting Meeting, 21 Mar at 16:36 — 16:56 UTC * Full logs at [[http://ubottu.com/meetingology/logs/ubuntu-meeting/2016/ubuntu-meeting.2016-03-21-16.36.log.html]] == Meeting summary == ''LINK:'' https://wiki.ubuntu.com/SecurityTeam/Meeting === Weekly stand-up report === The discussion about "Weekly stand-up report" started at 16:36. === Highlighted packages === The discussion about "Highlighted packages" started at 16:54. * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/gamera.html * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/python-soappy.html === Miscellaneous and Questions === The discussion about "Miscellaneous and Questions" started at 16:55. * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/python-rsa.html * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/libguac.html * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/wesnoth-1.10.html == Vote results == == Done items == * (none) == People present (lines said) == * tyhicks (34) * jdstrand (15) * mdeslaur (7) * sarnold (4) * chrisccoulson (4) * meetingology (3) == Full Log == 16:36 #startmeeting 16:36 Meeting started Mon Mar 21 16:36:33 2016 UTC. The chair is tyhicks. Information about MeetBot at http://wiki.ubuntu.com/meetingology. 16:36 16:36 Available commands: action commands idea info link nick 16:36 The meeting agenda can be found at: 16:36 [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting 16:36 [TOPIC] Weekly stand-up report 16:36 jdstrand: you're up 16:36 hello 16:37 so I'll start by saying that I am using the stacking patches and did quite a few apparmor-y things and it is solid 16:37 \o/ 16:37 (for the kernel) 16:37 woo :) 16:37 it has been solid for me, as well 16:38 today I'm working on getting the ubuntu-core-security policy and ubuntu-core-launcher adjusted for changes as a result of this kernel 16:38 * mdeslaur sheds a tear that stacking has arrived 16:38 the first is uploaded to xenial. the second I have a patch for but would like to review, test it, etc a bit more before asking for an MP 16:39 when I do, I'll want either tyhicks or sarnold to review that branch 16:39 I'll be working on landing that today 16:39 since it is needed today, it is feeling like a sarnold review to me 16:40 for the rest of the week I'd like to land a change in the snappy launcher for devpts newinstance. I have a patch for that and will request an MP soon 16:40 tyhicks: note, I already told mvo to ping me if he is planning a kernel snap update 16:40 that doesn't help desktop users though who are trying out snappy 16:41 anyhoo, trying to get that landed 16:41 after that, going to look at seccomp arg filtering in the launcher 16:41 I also have a couple of embargoed issues 16:41 mdeslaur: you're up 16:41 I'm testing webkitgtk updates, which I'll probably publish this afternoon 16:42 I have some thing to look at in our uvt script regarding some apt changes 16:42 and after that, I'll be going down the list as usual 16:42 that's about it 16:42 who's next? 16:42 me 16:42 I'm on bug triage this week 16:43 I'll be pushing out git updates shortly 16:43 I have some cve triage duties to finish up from last week 16:44 I'll be preparing an apparmor userspace upload based on the apparmor 2.11 beta 1 release that was cut last week 16:44 the ecryptfs kernel maintenance work has been piling up on me while working on stacking so I need to spend a couple days on it later this week 16:44 that's it for me 16:44 sarnold: you're up 16:46 i'm on cve triage this week though thankfully spared from it for today to review ubuntu-core-launcher, then hopefully a return to the fwupd tool.. I haven't yet found any chain-of-trust that's equivalen to apt's security, and I feel like that's a blocking issue for the tool 16:47 it's a short week for me, I'm off friday 16:47 that's it, chrisccoulson ? 16:47 I've got thunderbird, firefox and chromium updates to do (will hopefully get those out today) 16:48 Other than that, I plan to do some work improving unit testing in Oxide this week 16:49 I think it's a short week for me as well this week 16:49 That's me done 16:52 thanks 16:53 (I fell behind on note taking) 16:53 mdeslaur, sarnold: lets all three pitch in to help cover the community role this week 16:53 I don't think we need to put a specific person on the hook 16:53 I'll take community, I don't mind 16:54 mdeslaur: ok, hollar if you need help 16:54 holler* 16:54 sounds good 16:54 [TOPIC] Highlighted packages 16:54 The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. 16:54 See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. 16:54 http://people.canonical.com/~ubuntu-security/cve/pkg/gamera.html 16:55 http://people.canonical.com/~ubuntu-security/cve/pkg/python-soappy.html 16:55 [TOPIC] Miscellaneous and Questions 16:55 http://people.canonical.com/~ubuntu-security/cve/pkg/python-rsa.html 16:55 Does anyone have any other questions or items to discuss? 16:55 http://people.canonical.com/~ubuntu-security/cve/pkg/libguac.html 16:55 http://people.canonical.com/~ubuntu-security/cve/pkg/wesnoth-1.10.html 16:56 jdstrand, mdeslaur, sarnold, ChrisCoulson: Thanks! 16:56 #endmeeting Generated by MeetBot 0.1.5 (http://wiki.ubuntu.com/meetingology)