=== 16WAAA4BV is now known as wallyworld1 === lag is now known as Guest60197 === yofel_ is now known as yofel === thermi is now known as Thermi === lag is now known as Guest9916 === Ursinha-afk is now known as Ursinha === lag is now known as Guest96979 === rpinson_ is now known as raphink [18:08] hi! [18:10] HI [18:11] \o [18:11] hello [18:12] o/ [18:12] #startmeeting [18:12] Meeting started at 12:12. The chair is jdstrand. [18:12] Commands Available: [TOPIC], [IDEA], [ACTION], [AGREED], [LINK], [VOTE] [18:12] The meeting agenda can be found at: [18:12] [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting [18:12] [TOPIC] Review of any previous action items [18:12] LINK received: https://wiki.ubuntu.com/SecurityTeam/Meeting [18:12] New Topic: Review of any previous action items [18:13] micahg: you had an action item surrounding chromium, and in particular the NEWS file [18:13] jdstrand: yeah, fta included one in the update [18:14] micahg: what is the status of that update? [18:14] jdstrand: maverick uploaded to PPA, lucid will be uploaded today, I hope to test maverick today, not sure about lucid [18:17] ok [18:17] not sure as in either Wed night or hand off to someone else most likely [18:17] micahg: keep us posted. that update has been too long in coming. too bad google couldn't fix the password issue. we waited for nothing... [18:17] [TOPIC] Weekly stand-up report [18:17] New Topic: Weekly stand-up report [18:18] I'll go first [18:18] I'm in the happy place this week [18:18] I did an apparmor upload and will be testing today [18:19] I have a kdenetwork update that should go out today (and another old pending one) [18:19] (it won't go out today, I just need to work on it [18:19] ) [18:19] bisect two natty bugs, follow-up on various other bugs. Will try to get to it this week... [18:19] I will be unavailable on Wed and Thu this week, due to a managers meeting in Austin [18:20] I'll be on irc, but you know, it'll be 'conference-stype irc' [18:20] pick up something if have time [18:20] that's it from me [18:20] kees: you're up [18:21] okay, this week I'm on triage. I've almost finished getting my inbox down to 0 which is great. [18:21] there are some bits of work still to be done with the USN database merge (clean up some bits in ancient USNs, then get losas to do a full refresh) [18:22] will do some iso testing hopefully [18:22] I was wondering if we needed to coordinate our qrt testing? [18:23] anyway, I guess that can be a later topic. was going to try to sort through some of the kernel CVEs that are in the tracker still as "pending" but never went to "released", etc. [18:24] that's it from me. [18:24] I was planning on adding an apparmor test to all the stuff where we ship an enforcing profile, like I did recently with openldap [18:24] so I can take those [18:25] and test-apparmor.py (should be fiddling with it today) [18:26] ok, mdeslaur, you're up [18:26] So, I've just release postfix updates [18:26] and I have a few more updates ready for QA (need to find a way to test them...) [18:27] once they're done, I'll do some iso testing, and will go down the list [18:27] that,s it from me! [18:27] oh, and I'm on patch piloting duty this week IIRC [18:27] oh [18:27] so am I [18:30] that's it from me...who's next? micahg, you're it [18:31] so, I have a short week this week (am officially off today as well), will be testing mozilla updates for release next tuesday and if time permits, webkit cve triage [18:32] and chromium depending on what happens with the lucid upload [18:33] that's it for me I think [18:33] sbeattie: you're up [18:33] I'm on community this week. === tremolux_ is now known as tremolux [18:34] I'm working on php5 (still preparing patches) and ia32-libs (need to do a bit of testing) [18:35] I think that's it for me. [18:35] [TOPIC] Miscellaneous and Questions [18:35] New Topic: Miscellaneous and Questions [18:36] usn microsite is up and running well, and our processes have been updated accordingly. There are a few small bugs, and the site can be seen at https://launchpad.net/usn-website [18:36] err, the project site can be seen there [18:36] the actual site is at www.ubuntu.com/usn like always [18:37] one thing we need to do (and that I've done in the past but probably won't have time to do this time) is go through open natty CVEs in UCT and make sure they are accurate [18:37] I have no idea what state they are in, but they are usually a bit out of date [18:37] jdstrand: you mean the out-of-sync ones? [18:38] mdeslaur: yes those, and ones where a sync fixed it but uct wasn't updated [18:38] ah, last week, the out-of-sync ones were just a couple of kernel things [18:38] the others I took care of [18:38] ok good [18:38] mdeslaur: thanks! :) [18:38] not sure about the sync ones, didn't take a look [18:39] I think almost all the webkit ones will be closed when I'm done in natty at least [18:39] kees: since you are triager, would you mind giving them a look? ^ [18:39] (i.e. already fixed, just need verification) [18:39] kees: don't feel you have to do all of them, the triager of the week can do it next week and the week after too [18:40] jdstrand: "them" being kernel? yeah [18:40] kees: "them" being updating things where syncs [18:40] syncs fixed vulns [18:41] I know I tried to do them as I noticed them, but I'm sure we are a bit out of date [18:41] jdstrand: yeah, if it's in the upstream: tag already, it'll get caught as part of my standard updates this week [18:41] jdstrand: do you mean actually running through changelog contents? [18:42] kees: esp for things in main, I'd like to see that natty is correct accounting-wise before release. this isn't all on you, but something for the triagers to do over the next couple weeks [18:42] kees: does that make more sense? [18:43] * sbeattie is willing to help out [18:44] * jdstrand is too, next week when he is on triage [18:44] jdstrand: gotcha, sure. I'll take a look [18:44] kees: awesome thanks. and again, feel free to hand off stuff if there is a bunch [18:44] * jdstrand doesn't know the status otoh [18:44] jdstrand: I'll just work what I can get through :) [18:45] thanks [18:45] that's all I have [18:45] does anyone have any other questions or items to discuss? [18:46] should we have a formalized sign-up list for running qrt through beta2? [18:47] kees: sounds reasonable-- just in a wiki page somewhere? [18:47] jdstrand: yeah, that might be simplest. I'll get it set up. [18:48] kees: sounds great :) [18:49] thanks everyone for coming! [18:49] #endmeeting [18:49] Meeting finished at 12:49. [18:49] thanks jdstrand!~ [18:49] thanks! [18:49] thanks jdstrand [18:49] sure! :) [18:50] thanks jdstrand! === ivanka is now known as ivanka-train === Ursinha is now known as Ursinha-afk