== Meeting information == * #ubuntu-meeting Meeting, 15 May at 16:30 — 16:54 UTC * Full logs at [[http://ubottu.com/meetingology/logs/ubuntu-meeting/2017/ubuntu-meeting.2017-05-15-16.30.log.html]] == Meeting summary == ''LINK:'' https://wiki.ubuntu.com/SecurityTeam/Meeting === Weekly stand-up report === The discussion about "Weekly stand-up report" started at 16:30. === Highlighted packages === The discussion about "Highlighted packages" started at 16:51. * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/libfpdi-php.html * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/suckless-tools.html * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/jgit.html * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/flightgear.html * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/plasma-workspace.html === Miscellaneous and Questions === The discussion about "Miscellaneous and Questions" started at 16:52. == Vote results == == Done items == * (none) == People present (lines said) == * tyhicks (30) * mdeslaur (12) * jdstrand (11) * sbeattie (8) * jjohansen (8) * ratliff (7) * chrisccoulson (7) * sarnold (4) * meetingology (3) * JamieBennett (1) * cpaelzer (1) == Full Log == 16:30 #startmeeting 16:30 Meeting started Mon May 15 16:30:29 2017 UTC. The chair is tyhicks. Information about MeetBot at http://wiki.ubuntu.com/meetingology. 16:30 16:30 Available commands: action commands idea info link nick 16:30 The meeting agenda can be found at: 16:30 [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting 16:30 [TOPIC] Weekly stand-up report 16:30 jdstrand: you're up 16:31 last week I participated in tons of snappy discussions and a couple unplanned high priority items which took away from my ability to get to everything I planned 16:31 I did get to various PR reviews, fixed an ARM regression related to the recent netlink arg filtering PR and made changes to the classic snap (to ease working on the netlink regression) 16:31 I also spent quite a bit of time investigating at the current state of overlayfs usage in and outside of snaps on 4.4 and 4.10 kernel. Very nearly done with investigation and will report back in the bug 16:31 This week is a short week for me (off friday and out next week). I plan to: 16:31 - finish the overlayfs investigation 16:31 - fix snappy-debug to work with journald, update for snapd 2.25 and 2.26 16:31 - work on an embargoed issue 16:31 - snappy forum discussions and PR reviews 16:31 - does a miscellaneous policy updates PR 16:31 - get back to wayland/gnome/plasma interfaces as have time 16:31 that's it from me. mdeslaur you're up 16:32 I'm in the happy place this week 16:32 I just pushed out a couple of updates (git and kde4libs) 16:32 I have libytnef to publish this afternoon 16:32 (just finished testing it) 16:33 I am still awaiting qemu test results 16:33 and will work on other updates after that 16:33 that's it from me, sbeattie 16:33 I'm on community this week 16:33 mdeslaur: fyi - tests already running 16:33 cpaelzer: sweet, thanks! 16:33 I have openjdk-7 updates from tdaitx to test and publish 16:34 I'll likely have kernel USNs to publish today or tomorrow 16:34 ... which likely means figuring out the precise/E publishing issues 16:34 after that, I'll be going down the list 16:35 I also need to check in on some apparmor issues 16:35 that's probably it for me. 16:35 tyhicks: over to you 16:35 I'm on bug triage this week 16:35 CVE triage and precise/esm UCT work consumed the majority of my week last week 16:36 still need to get back to my seccomp work 16:36 fscrypto userspace isn't yet public so I'm still waiting to review and poke at that 16:36 there are still some roadmap sprint followups that I need to do 16:37 and I have an internal issue that I'm working on 16:37 that's it for me 16:37 jjohansen: you're up 16:38 I have to finish up the 4.11 apparmor port, there are memory corruption crashing issues to track down, currently mostly likely triggered by fput, in code that hasn't changed 16:38 poke some people to review upstream securityfs patch 16:38 there is a virt-aa helper upstreaming thread to check on 16:39 I have some LSM backlog to catch up on (eg. IMA posted out some ns support that makes changes to fs/namespace.c), for now just to make sure there is nothing to be aware of for upstreaming 16:39 possibly coordinating with sbeattie on afore mentioned apparmor issues 16:39 and then hopefully back to the upstreaming work 16:40 probably working on fixing the typesplitting, which without the unix rules mediation won't be going up 16:42 I think that is it for me, I don't think sarnold is around yet, so tyhicksback to you 16:43 chrisccoulson: you're up 16:44 I spent some time last week debugging a thunderbird issue, which meant I didn't finish my firefox symbol upload script. I plan to do that this week 16:44 (here now) 16:44 Also plan to publish thunderbird (I'm just waiting for upstream to actually release it) 16:46 chrisccoulson: sounds good - is that it for you? 16:46 I've got an internal issue to resolve too 16:46 Other than that, I'll be spending some time figuring out what to work on next, so I'll probably be pinging various people this week 16:46 That's me done 16:47 thanks 16:47 sarnold: go ahead 16:47 i'm on cve triage this week; i'll start the 'free time' with xdelta3 mir and move on down the mir list; perhaps apparmor patch reviews if john's looking for another set of eyes 16:47 that's it for me, ratliff? 16:47 I'm in the happy place this week 16:47 sarnold: you have a shadow regression, fyi 16:47 sarnold: congrats 16:48 mdeslaur: argh those were too simple to have regressions :( 16:48 yeah :( 16:49 I will largely be focused on internal tasks this week. 16:49 oh, I forgot - I'm hoping will has some design guidelines for the startpage for me this week, so I can start the work to move away from http://start.ubuntu.com/ in firefox 16:49 (sorry for interrupting) 16:50 There are some technical content item, including the webinar. 16:50 *items 16:50 that is it for me this week. back to you tyhicks 16:51 thanks 16:51 [TOPIC] Highlighted packages 16:51 The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. 16:52 See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. 16:52 http://people.canonical.com/~ubuntu-security/cve/pkg/libfpdi-php.html 16:52 http://people.canonical.com/~ubuntu-security/cve/pkg/suckless-tools.html 16:52 http://people.canonical.com/~ubuntu-security/cve/pkg/jgit.html 16:52 http://people.canonical.com/~ubuntu-security/cve/pkg/flightgear.html 16:52 http://people.canonical.com/~ubuntu-security/cve/pkg/plasma-workspace.html 16:52 [TOPIC] Miscellaneous and Questions 16:52 Does anyone have any other questions or items to discuss? 16:52 please help make the suckless-tools suck even less. 16:52 The team has reactived their twitter account @ubuntu_sec and are reachable there now as well. 16:53 ratliff: look forward to the stream of tweets :) 16:54 thanks, JamieBennett! 16:54 jdstrand, mdeslaur, sbeattie, jjohansen, sarnold, ChrisCoulson, ratliff, JamieBennett: Thanks! 16:54 #endmeeting Generated by MeetBot 0.1.5 (http://wiki.ubuntu.com/meetingology)