20180813

Differences between revisions 112 and 113
⇤ ← Revision 112 as of 2018-08-13 16:45:44 →
Size: 2303
Editor: emilyr
Comment:
← Revision 113 as of 2018-08-13 17:00:00 → ⇥
Size: 2229
Editor: emilyr
Comment:
Deletions are marked like this. Additions are marked like this.
Line 1: Line 1:
## page was copied from MeetingLogs/Security/20180806
## page was copied from MeetingLogs/Security/20180730
Line 5: Line 3:
 * '''When''':  Mon Aug  6 16:31:08 2018 UTC
 * '''End''': 16:48:29		  * '''When''': Mon Aug 13 16:30:28 2018 UTC
 * '''End''': 16:43:16
Line 13: Line 11:
 {{{#!wiki comment
Line 14: Line 13:
 }}}
Line 16: Line 16:
 {{{#!wiki comment
Line 19: Line 18:
 {{{#!wiki comment
 * leosilva
Line 20: Line 21:
 * leosilva
Line 30: Line 30:
 * sarnold
 * chrisccoulson		  * mdeslaur
 * leosilva
Line 37: Line 37:
   * CVE Triage: ratliff, Bug Triage: sbeattie, Community: amurray, Happy Place: mdeslaur, leosilva, ebarretto, msalvatore, sarnold    * CVE Triage: msalvatore, Bug Triage: sarnold, Community: sbeattie, Happy Place: amurray, mdeslaur, leosilva, ebarretto
Line 41: Line 41:
   * continue ESM alignment
   * various snapd policy updates for 2.35
   * brand store snap declarations
   * anbox-support
   * kubernetes-support interfaces
Line 42: Line 47:
   * brand store snap declarations
   * an embargoed item
   * kubernetes-support interfaces		    * two embargoed items
Line 48: Line 51:
   * security updates
Line 49: Line 53:
   * intel-microcode updates (Community testing welcome!)
   * kernel triage and signoffs
   * internal tasks		    * bind9 updates
   * !AppArmor work
   * embargoed issues
Line 53: Line 57:
   * !AppArmor bug work LP: #Bug:1783922
   * report regression around bind mounts on 4.18		    * !AppArmor 4.19 pull request
Line 56: Line 59:
   * review David's mount patches
   * !AppArmor 3.0
 {{{#!wiki comment		    * review David's mount patches and plan !AppArmor changes
   * !AppArmor 3.0 alpha
Line 60: Line 62:
   * [[https://debconf18.debconf.org/talks/106-apparmor-30/|DebConf presentation]]    * MIRs
Line 62: Line 64:
   * thunderbird 60 updates
   * Chromium updates
   * embargoed issue
 }}}		    * GDM update
   * rust / cargo update
   * firefox update
Line 67: Line 68:
   * submit CVE details to MITRE
   * embargoed and internal work		    * internal work
Line 70: Line 70:
   * libxcursor and lftp updates    * libarchive USN
   * libxml2 update
   * wpa update is in security-proposed. Community testers welcome!
Line 73: Line 75:
   * tooling work    * Node.js update
   * ESM alignment
   * Re-triage redis
Line 76: Line 80:
   * libtomcrypt update    * tooling updates
   * CVE re-triage
Line 84: Line 89:
http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-08-06-16.31.moin.txt http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-08-13-16.30.moin.txt

Meeting

  • Who: SecurityTeam

  • When: Mon Aug 13 16:30:28 2018 UTC

  • End: 16:43:16

  • Where: #ubuntu-meeting on irc.freenode.net

  • Chaired By: Emily Ratliff (ratliff)

Attendance

  • jdstrand
  • sbeattie
  • jjohansen
  • sarnold
  • chrisccoulson
  • ratliff
  • msalvatore
  • ebarretto

Not present

  • mdeslaur
  • leosilva
  • amurray

Agenda

  • Announcements
    • Generalist role rotation
      • CVE Triage: msalvatore, Bug Triage: sarnold, Community: sbeattie, Happy Place: amurray, mdeslaur, leosilva, ebarretto

    • Ubuntu Security Team is hiring

  • Weekly stand-up report (each member discusses any pending and planned future work for the week)
    • jdstrand
      • continue ESM alignment
      • various snapd policy updates for 2.35
      • brand store snap declarations
      • anbox-support
      • kubernetes-support interfaces
      • various snapd PR reviews
      • two embargoed items
    • mdeslaur
      • work related travel
      • embargoed issue
      • security updates
    • sbeattie
      • bind9 updates

      • AppArmor work

      • embargoed issues
    • jjohansen

      • AppArmor 4.19 pull request

      • review mjg's secmark patch for AppArmor

      • review David's mount patches and plan AppArmor changes

      • AppArmor 3.0 alpha

    • sarnold
      • MIRs

    • ChrisCoulson

      • GDM update
      • rust / cargo update
      • firefox update
    • ratliff
      • internal work
    • leosilva
      • libarchive USN
      • libxml2 update
      • wpa update is in security-proposed. Community testers welcome!
      • security updates
    • msalvatore
      • Node.js update
      • ESM alignment
      • Re-triage redis
      • security updates
    • ebarretto
      • tooling updates
      • CVE re-triage
      • security updates
  • Highlighted packages

    The Ubuntu Security team suggests that contributors look into merging Debian security updates in community-supported packages. If you would like to help Ubuntu but are not sure where to start, this is a great way to do so. See the available merges and SecurityTeam/UpdateProcedures for details on preparing Ubuntu security updates. If you have any questions, feel free to ask in #ubuntu-hardened. To find out other ways of helping out, please see SecurityTeam/GettingInvolved.

  • Miscellaneous and Questions
    • None

Log

http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-08-13-16.30.moin.txt

MeetingLogs/Security/20180813 (last edited 2018-08-13 17:00:00 by emilyr)