DRAFT to be finalized on June 9

Security

During the last week, the Ubuntu Security team:

• Triaged 169 public security vulnerability reports, retaining the 66 that applied to Ubuntu.
• Published 13 Ubuntu Security Notices which fixed 35 security issues (CVEs) across 15 supported packages.

Ubuntu Security Notices

• [USN-3306-1] libsndfile vulnerabilities

• [USN-3307-1] OpenLDAP vulnerability

• [USN-3308-1] Puppet vulnerabilities

• [USN-3309-1] Libtasn1 vulnerability

• [USN-3310-1] lintian vulnerability

• [USN-3311-1] libnl vulnerability

• [USN-3312-1] Linux kernel vulnerabilities

• [USN-3312-2] Linux kernel (Xenial HWE) vulnerabilities

• [USN-3313-1] Linux kernel vulnerability

• [USN-3313-2] Linux kernel (HWE) vulnerability

• [USN-3314-1] Linux kernel vulnerabilities

• [USN-3316-1] FreeRADIUS vulnerability

• [USN-3253-2] Nagios regression

Mainline Inclusion Requests

• xdelta3 underway (LP: #1647222)

• MIR backlog: https://bugs.launchpad.net/~ubuntu-security/+assignedbugs?field.searchtext=%5BMIR%5D

Bug Triage

• Backlog: https://bugs.launchpad.net/~ubuntu-security/+subscribedbugs

Updates to Community Supported Packages

• Balint Reczey (rbalint) provided debdiffs for xenial-zesty for kodi (LP: #1694249)

• Balint Reczey (rbalint) provided debdiffs for trusty-zesty for wireshark (LP: #1397091)

Thank you!

Weekly Meeting

• Log: https://wiki.ubuntu.com/MeetingLogs/Security/20170605

• Info: https://wiki.ubuntu.com/SecurityTeam/Meeting

More Info

• Ubuntu CVE Tracker

• Ubuntu security notices

• Follow Ubuntu Security on Twitter

• How to help improve Ubuntu security