== Meeting information == * #ubuntu-meeting Meeting, 20 Jul at 16:35 — 16:58 UTC * Full logs at [[http://ubottu.com/meetingology/logs/ubuntu-meeting/2015/ubuntu-meeting.2015-07-20-16.35.log.html]] == Meeting summary == ''LINK:'' https://wiki.ubuntu.com/SecurityTeam/Meeting === Weekly stand-up report === The discussion about "Weekly stand-up report" started at 16:35. === Highlighted packages === The discussion about "Highlighted packages" started at 16:56. * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/sssd.html * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/squidclamav.html * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/ncpfs.html * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/nusoap.html * ''LINK:'' http://people.canonical.com/~ubuntu-security/cve/pkg/php-mail.html === Miscellaneous and Questions === The discussion about "Miscellaneous and Questions" started at 16:56. == Vote results == == Done items == * (none) == People present (lines said) == * tyhicks (30) * sbeattie (9) * jdstrand (6) * jjohansen (5) * chrisccoulson (4) * ubottu (3) * meetingology (3) * sarnold (2) == Full Log == 16:35 #startmeeting 16:35 Meeting started Mon Jul 20 16:35:07 2015 UTC. The chair is tyhicks. Information about MeetBot at http://wiki.ubuntu.com/meetingology. 16:35 16:35 Available commands: action commands idea info link nick 16:35 The meeting agenda can be found at: 16:35 [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting 16:35 [TOPIC] Weekly stand-up report 16:35 jdstrand: you're up 16:36 hi! 16:37 I've got an embargoed issue I am working on 16:37 I also plan to pickup an openstack update this week 16:38 I gathered up some ufw patches and will try to release 0.34 this week, time permitting 16:38 I'll also look at trello and see what's up next 16:39 m deslaur is out, sbeattie, you're up 16:39 I'm on security bug triage this week. 16:40 I've also got a preliminary apparmor 2.10 package for wily prepared and have done some local testing with, that I'm hoping to have sponsered later this week. 16:40 nice :) 16:41 I'm trying to find out what's up with upstream icedtea releases, as we need to prepare updates for openjdk 16:41 I also have some arm64 and kernel 4.1 qrt test failures to track down. 16:42 And I'm also trying to find time for gcc-pie. 16:42 that's pretty much my week. tyhicks? 16:42 sbeattie: did I understand correctly that you plan on doing openjdk updates this week? 16:43 yes 16:44 it's a bit contingent on seeing an upstream icedtea release. 16:44 ok 16:45 they announced a new 2.6.0 release, but nothing for older releases yet. 16:45 sbeattie: that's a full week - put gcc-pie on the backburner and revisit it next week 16:45 I'm on cve triage this week 16:46 I'm working on several embargoed issues 16:46 I still need to review the kdbus LSM hook patch set 16:46 Verify kernel auditing bug fix in the phone images (LP: #1473584) 16:46 Launchpad bug 1473584 in linux-manta (Ubuntu Vivid) "AUDIT_USER_AVC messages are not printk'ed when auditd is not running" [Undecided,Fix committed] https://launchpad.net/bugs/1473584 16:46 Investigate supportability of io.js 16:46 that's it for me 16:46 jjohansen: you're up 16:47 I have an embargoed issue I am working on 16:47 and then I am going to finish up the fix for bug #1448912 16:47 bug 1448912 in AppArmor "BUG: unable to handle kernel NULL pointer dereference (aa_label_merge)" [Medium,Confirmed] https://launchpad.net/bugs/1448912 16:48 and get together a pull request for the kernel team, and patch series for upstream 16:50 then if I am really lucky I'll look into overlayfs issues 16:51 I think that is it from me, sarnold you are up 16:51 I'm in the happy place this week; I'm going to finish the ppc64-diag follow-on MIR audits today or tomorrow, and then I'll be free to pick up an update 16:51 that's it for me, chrisccoulson? 16:52 I'm hoping to have a less crazy week this week - I plan to get Thunderbird 31.8.0 out today. Also, people have been asking why we're not updating to Thunderbird 38.1.0 yet (yeah, terrible version numbering), so I've opened bug 1476169 and plan to upload it to proposed 16:52 bug 1476169 in thunderbird (Ubuntu Vivid) "Update Thunderbird to 38.1.0" [Wishlist,Triaged] https://launchpad.net/bugs/1476169 16:53 I'll also be preparing the next Oxide release 16:53 Other than that, I've got a tonne of Oxide reviews to work through 16:53 I think that's me done 16:56 chrisccoulson: here's to a sane week in the browser security world :) 16:56 thanks! 16:56 [TOPIC] Highlighted packages 16:56 The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. 16:56 See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. 16:56 http://people.canonical.com/~ubuntu-security/cve/pkg/sssd.html 16:56 http://people.canonical.com/~ubuntu-security/cve/pkg/squidclamav.html 16:56 http://people.canonical.com/~ubuntu-security/cve/pkg/ncpfs.html 16:56 http://people.canonical.com/~ubuntu-security/cve/pkg/nusoap.html 16:56 http://people.canonical.com/~ubuntu-security/cve/pkg/php-mail.html 16:56 [TOPIC] Miscellaneous and Questions 16:56 Does anyone have any other questions or items to discuss? 16:58 jdstrand, sbeattie, jjohansen, sarnold, ChrisCoulson: Thanks! 16:58 #endmeeting Generated by MeetBot 0.1.5 (http://wiki.ubuntu.com/meetingology)