16:31 #startmeeting 16:31 Meeting started Mon Sep 26 16:31:30 2016 UTC. The chair is tyhicks. Information about MeetBot at http://wiki.ubuntu.com/meetingology. 16:31 16:31 Available commands: action commands idea info link nick 16:31 The meeting agenda can be found at: 16:31 [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting 16:31 [TOPIC] Announcements 16:31 Otto Kekäläinen (otto) provided updates for trusty and xenial for mariadb (LP: #1605493) 16:31 Launchpad bug 1605493 in mariadb-5.5 (Ubuntu) "USN-3040-1: MySQL vulnerabilities partially applies to MariaDB too" [Medium,Fix released] https://launchpad.net/bugs/1605493 16:31 Thank you for your assistance in keeping Ubuntu users secure! :) 16:31 [TOPIC] Weekly stand-up report 16:31 jdstrand: you're up 16:32 hey 16:32 last week I focused a lot on the docker interface, ancillary interface/backend reviews and getting the docker snap to work on classic. The interface is merged and I syncd with stakeholders to get an updated docker in the store. 16:32 Also did a lot of PR reviews, updated the dbus-app interface and discussed the unity8 interface with ted 16:33 snap-declaration assertions in the review tools and other review tools updates 16:33 iterate on the dbus-app interface (hopefully, waiting for PR feedback) 16:33 PR reviews, especially wrt /run/media and udisks2 16:33 continue to investigate what a 'network-namespace' interface might look like 16:33 few more policy updates and policy bugs to look at 16:33 snap-declaration assertions in the review tools and other review tools updates 16:33 oh, I repeated one of those. it's that important :) 16:33 that's it from me 16:33 mdeslaur: you're up 16:33 I'm on triage this week 16:33 I'm currently working on an embargoed issue 16:33 and I have samba and clamav updates ready for testing 16:34 that's about it, sbeattie, you're up 16:34 I'm in the happy place this week 16:34 I made progress on some apparmor reviews last week, and will finish those up 16:34 I have kernel signoffs to get through today 16:35 I'll try to pick up an update from the list as well 16:35 that's it for me, tyhicks? 16:36 I'm in the happy place this week 16:36 I'm trying to do SRU verification (LP: #1580463) (LP: #1614215) 16:36 Launchpad bug 1580463 in im-config (Ubuntu Xenial) "Snap blocks access to system input methods (ibus, fcitx, ...)" [Medium,In progress] https://launchpad.net/bugs/1580463 16:36 Launchpad bug 1614215 in apparmor (Ubuntu Xenial) ""md5sums differ" message seems to indicate an install problem" [Low,Fix committed] https://launchpad.net/bugs/1614215 16:36 jdstrand: it looks like im-config was removed from xenial-proposed :/ 16:36 jdstrand: could you re-upload and I'll handle the SRU verification? 16:37 after that, I'll be back on trying to bring AppArmor UNIX domain socket mediation back to 14.04 + hardware enablement kernel 16:37 I hit a blocker last week and I'm now taking a different approach 16:37 I have some packaging changes to make today so that we continue to ship the 14.04 policy in the backported 16.04 package 16:37 then I'll be testing 16:37 jjohansen: you're up 16:38 sbeattie: either you or I need to look at bug #1627304 this week 16:39 bug 1627304 in lightdm (Ubuntu) "User locking problems - guest login crashing" [Critical,Triaged] https://launchpad.net/bugs/1627304 16:39 tyhicks: okay 16:39 sbeattie: I can get to it mid-week and will let you know if/when I start working on it 16:39 I think jj isn't around just yet 16:39 sarnold: are you here? 16:40 chrisccoulson: go ahead 16:40 I've got a minor Oxide update to do this week. There aren't any planned Mozilla updates 16:41 I've got a few Oxide code reviews to get through too 16:41 Also, Firefox and Thunderbird fail to build on various architectures in yakkety, so I need to spend some time on that 16:41 Other than that, I'll be working through Oxide bugs as usual 16:42 thanks chrisccoulson 16:42 ratliff: you're up 16:42 I'm on bug triage this week 16:42 I'm finalizing the pillow update 16:43 Design doc review and other internal tasks to complete 16:43 back to you, tyhicks 16:44 thanks! 16:44 [TOPIC] Highlighted packages 16:44 The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. 16:44 See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. 16:44 http://people.canonical.com/~ubuntu-security/cve/pkg/k4dirstat.html 16:44 http://people.canonical.com/~ubuntu-security/cve/pkg/iscsitarget.html 16:44 http://people.canonical.com/~ubuntu-security/cve/pkg/zeroinstall-injector.html 16:44 http://people.canonical.com/~ubuntu-security/cve/pkg/w3af.html 16:44 [TOPIC] Miscellaneous and Questions 16:44 http://people.canonical.com/~ubuntu-security/cve/pkg/minizip.html 16:44 Does anyone have any other questions or items to discuss? 16:45 hey, sorry I'm late 16:46 MIRs this week, not sure which ones to start next 16:46 tyhicks: ^ 16:46 and I'm on community 16:46 ubuntu-terminal-app 16:46 thanks ratliff :) 16:46 yep 16:46 and zmqpp after that 16:47 lets hope lukasz fixes the ftbfs :) 16:47 it sounded promising but he mentioned silos and I lost track 16:47 sarnold: a fixed upload is in the unapproved queue 16:47 sarnold: see the bug report 16:48 https://bugs.launchpad.net/ubuntu/+source/zmqpp/+bug/1617005/comments/4 16:48 Launchpad bug 1617005 in zmqpp (Ubuntu) "[MIR] zmqpp" [Undecided,New] 16:48 sarnold: might be worth kicking that build off while looking at ubuntu-terminal-app :) 16:48 does anyone have anything else? 16:49 heh, ubuntu-terminal-app doesn't even show up in umt search :/ 16:49 I'm confused by that one 16:49 maybe ratliff can get you more info? 16:49 https://bugs.launchpad.net/ubuntu-terminal-app/+bug/1625074 16:49 Launchpad bug 1625074 in ubuntu-terminal-app (Ubuntu) "[MIR] ubuntu-terminal-app" [High,Confirmed] 16:50 ratliff: it isn't in Ubuntu: https://launchpad.net/ubuntu/+source/ubuntu-terminal-app 16:50 the code is in launchpad and linked to off of that MIR 16:51 lets discuss this outside of the meeting so that everyone else can go about their day 16:51 jdstrand, mdeslaur, sbeattie, jjohansen, sarnold, ChrisCoulson, ratliff: Thanks! 16:51 #endmeeting