[14:00]  * micahg waves
[14:02] <Laney> ola
[14:05] <tumbleweed> hi
[14:05] <tumbleweed> bdrung_ said he may be late
[14:08]  * bdrung_ is here
[14:09] <bdrung> !dmb-ping
[14:10] <stgraber> heya
[14:11] <Laney> winning
[14:11] <Laney> no cody I assume?
[14:12] <Laney> let us go
[14:12] <Laney> #startmeeting
[14:12] <meetingology> Meeting started Mon Dec 19 14:12:42 2011 UTC.  The chair is Laney. Information about MeetBot at http://wiki.ubuntu.com/AlanBell/mootbot.
[14:12] <meetingology> Available commands: #accept #accepted #action #agree #agreed #chair #commands #endmeeting #endvote #halp #help #idea #info #link #lurk #meetingname #meetingtopic #nick #progress #rejected #replay #restrictlogs #save #startmeeting #subtopic #topic #unchair #undo #unlurk #vote #voters #votesrequired
[14:13] <Laney> #topic Review of previous action items
[14:13] <Laney> [ignoring cody's one]
[14:13] <Laney> #subtopic micahg to ping all packageset teams to get a description we can use for future changes
[14:13] <micahg> so, I did start this this time :)
[14:13]  * Laney got a mail indeed :-)
[14:14] <micahg> I got the answer back from the bzr packageset, how should we do this?  should we take a quick vote on the criteria for the packageset?
[14:14] <micahg> or should I propose the criteria to the ML and vote at the next meeting?
[14:14] <Laney> I guess post to ML and have a confirmation vote next time
[14:14] <micahg> ok, sounds good
[14:15] <Laney> sweet
[14:15] <Laney> did you send them all out or are some left to do?
[14:15] <micahg> I think the only one that's left was the kernel one (I also didn't send for the mozilla packageset, but having a conversation with oneself is kinda boring :))
[14:15] <Laney> heh
[14:16] <Laney> ok, good work
[14:16] <Laney> #topic Package set application: desktop-extra
[14:17] <Laney> jbicha isn't here, but I think we can go on anyway
[14:17] <Laney> did you see my mail?
[14:17] <tumbleweed> yup, just read it
[14:17] <Laney> let me bounce it to devel-permissions to make it public
[14:17] <micahg> yes
[14:18] <Laney> #link https://lists.ubuntu.com/archives/devel-permissions/2011-December/000315.html
[14:18] <Laney> WDYT to that list and description then?
[14:19] <tumbleweed> description works for me
[14:19] <micahg> yeah, I think that's fine
[14:20] <tumbleweed> list too
[14:20] <Laney> bdrung: stgraber: ?
[14:20] <stgraber> looks good
[14:21] <bdrung> looks good
[14:23] <Laney> ok, one second
[14:25] <Laney> #vote Create desktop-extra packageset with description "Every package that is NOT in ubuntu-desktop, desktop-core or core, but needed for a vanilla GNOME. Vanilla GNOME is defined by upstream in gnome-suites-core, gnome-suites-core-deps, and gnome-apps: http://git.gnome.org/browse/jhbuild/tree/modulesets" and initial packages "abiword accerciser alacarte anjuta caribou cheese clutter ekiga epiphany-browser fonts-cantarell f-spot ...
[14:25] <meetingology> Please vote on: Create desktop-extra packageset with description "Every package that is NOT in ubuntu-desktop, desktop-core or core, but needed for a vanilla GNOME. Vanilla GNOME is defined by upstream in gnome-suites-core, gnome-suites-core-deps, and gnome-apps: http://git.gnome.org/browse/jhbuild/tree/modulesets" and initial packages "abiword accerciser alacarte anjuta caribou cheese clutter ekiga epiphany-browser fonts-cantarell 
[14:25] <meetingology> Public votes can be registered by saying +1, +0 or -1 in channel, (private votes don't work yet, but when they do it will be by messaging the channel followed by +1/-1/+0 to me)
[14:25] <Laney> ... gdm ghex gjs gnome-backgrounds gnome-color-manager gnome-contacts gnome-devel-docs gnome-documents gnome-icon-theme-extras gnome-packagekit gnome-scan gnome-shell gnome-sushi gnome-tweak-tool gnome-video-effects gnote gnumeric goffice gthumb gtksourceviewmm gupnp-av gupnp-dlna gupnp-vala java-gnome libchamplain monkey-bubble mutter mx nemiver opal packagekit ptlib rygel seed sound-juicer tomboy tracker" and initial member ...
[14:25] <Laney> ... ~ubuntu-desktop
[14:25] <Laney> :-)
[14:25] <Laney> +1
[14:25] <meetingology> +1 received from Laney
[14:26] <micahg> +1
[14:26] <meetingology> +1 received from micahg
[14:26] <tumbleweed> +1
[14:26] <meetingology> +1 received from tumbleweed
[14:26] <stgraber> +1
[14:26] <meetingology> +1 received from stgraber
[14:26] <bdrung> +1
[14:26] <meetingology> +1 received from bdrung
[14:26] <Laney> #endvote
[14:26] <meetingology> Voting ended on: Create desktop-extra packageset with description "Every package that is NOT in ubuntu-desktop, desktop-core or core, but needed for a vanilla GNOME. Vanilla GNOME is defined by upstream in gnome-suites-core, gnome-suites-core-deps, and gnome-apps: http://git.gnome.org/browse/jhbuild/tree/modulesets" and initial packages "abiword accerciser alacarte anjuta caribou cheese clutter ekiga epiphany-browser fonts-cantarell
[14:26] <meetingology> Votes for:5 Votes against:0 Abstentions:0
[14:26] <meetingology> Motion carried
[14:26] <Laney> sweeeeeeet
[14:26] <Laney> stgraber: can you take the action to create that?
[14:27] <stgraber> yeah, already started doing it
[14:27] <Laney> cool
[14:27] <Laney> #action stgraber to create desktop-extra set
[14:27] <meetingology> ACTION: stgraber to create desktop-extra set
[14:27] <bdrung> that was a very long question. ;)
[14:27] <micahg> I just want to point out, this comes with the expectation that stuff will flow between ubuntu-desktop and desktop-extra as needed
[14:27] <Laney> yes
[14:27] <bdrung> micahg: that's implied
[14:27] <Laney> #topic Ubuntu Core Developer reapplication for Daniel T Chen
[14:27] <Laney> not sure that we need to vote given that he only expired a few days ago
[14:27] <bdrung> do we really need to vote about such cases?
[14:27] <stgraber> do I have stuff to move at this point or just create the new package set with the package list we just approved?
[14:28] <stgraber> I don't think we vote for these usually, just re-activate
[14:28] <micahg> bdrung: well, I don't want people who apply for desktop-extra to be shocked one day when they can't upload something :)
[14:28] <Laney> I am curious about why we didn't get an email though
[14:28] <micahg> stgraber: I've seen quick votes when things expire
[14:28] <Laney> because I would probably have pingedh im
[14:28] <tumbleweed> Laney: we don't own core-dev
[14:28] <micahg> tumbleweed: yes we do :)
[14:28] <tumbleweed> err I mean we aren't an ad min of it, we own it
[14:29] <Laney> owner should get such emails too, then?
[14:29]  * micahg thought owner got mails as well
[14:29] <stgraber> micahg: yeah, and I've seen a lot of cases where they just send a "oops I forgot to click on the link" and get re-activated without any vote :)
[14:29] <bdrung> we should just re-activate people if they ask timely
[14:29]  * tumbleweed hasn't seen any core-dev expiration e-mail
[14:29] <Laney> indeed
[14:29] <micahg> stgraber: true :)
[14:29] <Laney> ok, investigate with LP why we don't get them
[14:29] <Laney> I don't think we need to vote on this, anyone disagree?
[14:30] <bdrung> no
[14:30] <Laney> done
[14:30] <Laney> #topic AOB
[14:30] <tumbleweed> we need to kick off restaffing soon
[14:30] <bdrung> and i don't think that we even need to wait for a meeting
[14:31] <Laney> ah, indeed
[14:31] <tumbleweed> Laney and geser expire in mid-feb
[14:31] <tumbleweed> 6 weeks earlier is 2 jan (which I assume we won't meet on?)
[14:31] <micahg> well, that's another AOB topic :)
[14:32] <tumbleweed> ah, there's the page: https://wiki.ubuntu.com/CommunityCouncil/Restaffing
[14:33] <Laney> dear wiki, please load.
[14:34] <Laney> bah. oh well.
[14:34] <Laney> call for nominations 4 weeks out, call for votes 2 weeks out?
[14:34] <tumbleweed> Prepare announce and requirements. (1 day)
[14:34] <tumbleweed> Optional: Call for nominations. (2 weeks)
[14:34] <tumbleweed> Optional: Shortlisting by CC. (1 week)
[14:34] <tumbleweed> Optional: Vote process. (2 weeks)
[14:34] <tumbleweed> Announcement, necessary implementation. (1 day)
[14:35] <Laney> ok, got some time then
[14:35] <stgraber> Shortlisting by CC? isn't supposed to be by the TB in the case of the DMB? (not really sure, these things are usually a bit blurry ;))
[14:35] <Laney> we didn't bother with that last time
[14:36] <stgraber> indeed, easier to just not do it ;)
[14:36] <Laney> the tb said they didn't mind us running it all
[14:36] <Laney> there is some contention there: the CC extending its icy grasp over this way
[14:37] <tumbleweed> in that case, we can get away with starting it on jan 16th, but only just
[14:37] <Laney> I think that technically our UCD delegation comes from them, for example
[14:38] <Laney> anyway yeah, confirmation can be on feb 13th - works out quite nicely
[14:38] <stgraber> btw, http://people.canonical.com/~stgraber/package_sets/precise/desktop-extra
[14:38] <Laney> nice
[14:39] <Laney> ok, anything else?
[14:39] <Laney> skipping jan 2nd?
[14:39] <tumbleweed> works for me, I may not be available then, anyway
[14:39] <bdrung> depends if there are application in between
[14:40] <stgraber> I'll be around on the 2nd (working) but I'm fine with us skipping it
[14:40] <bdrung> i am fine with it if we don't accumulate too many applications
[14:40] <micahg> I should be around
[14:40] <bdrung> i should be around
[14:40] <micahg> well, we should have the packageset descriptions to vote on, but that could wait I guess
[14:41] <tumbleweed> so see who turns up?
[14:41] <bdrung> yes
[14:41] <bdrung> yes
[14:41] <Laney> ok
[14:41] <Laney> i'll probably be around
[14:42] <Laney> anything else?
[14:42] <tumbleweed> next chair? still cody :P
[14:42] <Laney> #topic chair for next meeting
[14:42] <bdrung> regarding the restaffing
[14:42] <Laney> cody (micah)
[14:42] <Laney> bdrung: yes?
[14:43] <bdrung> i will expire in nearly one year, but i would be only one person. i think it impractical to setup a vote only for me.
[14:44] <bdrung> it would make more sense to group the votes
[14:44] <micahg> bdrung: we could just extend your membership to 02/2013
[14:44] <bdrung> that would work for me
[14:44] <micahg> since your membership would expire in nov
[14:44] <Laney> mmm, potentially losing 6/8 of the team at once
[14:45] <Laney> oh no, not you and stefano
[14:45] <Laney> yeah that wfm
[14:45] <Laney> ask the tb?
[14:45] <bdrung> a optimal solution would be to have four members selected every year
[14:45] <micahg> well, other boards usually restaff almost all at the same time
[14:46] <Laney> maybe we can add the new people until 2013-09/10 and make micahg and tumbleweed have the same expiration date
[14:46]  * micahg would prefer it being referred to as membership expiration :P
[14:46] <tumbleweed> heh
[14:47]  * Laney puts the uzi away
[14:47] <bdrung> :)
[14:47] <Laney> #action bdrung to talk to the TB about harmonising DMB members' expiration dates for easier restaffing
[14:47] <meetingology> ACTION: bdrung to talk to the TB about harmonising DMB members' expiration dates for easier restaffing
[14:48] <Laney> :-)
[14:48] <tumbleweed> Laney: that'd be neat, yes
[14:48] <Laney> great
[14:48] <Laney> thanks all
[14:48]  * Laney gives you all an orange
[14:48] <Laney> #endmeeting
[14:48]  * bdrung sees the action item and tries to take the uzi.
[14:48] <meetingology> Meeting ended Mon Dec 19 14:48:51 2011 UTC.
[14:48] <meetingology> Minutes:        http://ubottu.com/meetingology/logs/ubuntu-meeting/2011/ubuntu-meeting.2011-12-19-14.12.moin.txt
[14:48] <micahg> thanks Laney
[14:49] <Laney> easy meetings are fun to chair
[16:00] <roadmr> hello everyone!
[16:00] <brendand> hi
[16:01] <roadmr> so it's time for your weekly friendly Ubuntu Friendly meeting!
[16:01] <roadmr> let's get this show on the road
[16:01] <roadmr> #startmeeting Ubuntu Friendly
[16:01] <meetingology> Meeting started Mon Dec 19 16:01:54 2011 UTC.  The chair is roadmr. Information about MeetBot at http://wiki.ubuntu.com/AlanBell/mootbot.
[16:01] <meetingology> Available commands: #accept #accepted #action #agree #agreed #chair #commands #endmeeting #endvote #halp #help #idea #info #link #lurk #meetingname #meetingtopic #nick #progress #rejected #replay #restrictlogs #save #startmeeting #subtopic #topic #unchair #undo #unlurk #vote #voters #votesrequired
[16:02] <roadmr> Hi everyone, welcome to the Ubuntu Friendly meeting!
[16:02] <roadmr> Today we have the following topics to talk about:
[16:02] <roadmr> Checkbox (Ubuntu Friendly, System Testing) new version available in -proposed, you can help with testing!
[16:02] <roadmr> Any Other Business
[16:02] <roadmr> As usual, you're welcome to participate, indicate you want to speak by raising your hand (o/). Don't forget to also signal when you're done using ..
[16:02] <roadmr> Let's get started!
[16:02] <roadmr> [TOPIC] Checkbox (Ubuntu Friendly, System Testing) new version available in -proposed, you can help with testing! (brendand)
[16:02] <roadmr> brendand, all yours
[16:03] <brendand> After the Ubuntu Friendly programme was launched along with Oneiric back in October we got a lot of feedback about pain points for users of the Checkbox system testing tool
[16:04] <brendand> We of course seek to improve Checkbox in whatever way we can, so many of these issues have been addressed and will be resolved in Precise
[16:04] <brendand> For some of the issues, we felt the problem was significant enough that it was worth making the effort to include them in the Oneiric version of Checkbox via an SRU
[16:05] <brendand> (Stable Release Update)
[16:06] <brendand> So we proposed a bunch of fixes and now they are available in the next version of the Checkbox package in Oneiric. This version is still at the 'verification' phase where the fixes need to be tested to make sure they work and don't break anything else
[16:06] <brendand> We need your help to do this
[16:06] <brendand> There are three bugs left to verify:
[16:07] <brendand> https://bugs.launchpad.net/bugs/862322
[16:07] <brendand> https://bugs.launchpad.net/bugs/877752
[16:07] <brendand> https://bugs.launchpad.net/bugs/887049
[16:07] <brendand> To test these fixes, you should enable the -proposed pocket in your sources.list. This can be done in the settings of update-manager
[16:08] <brendand> Then run 'apt-get install checkbox'
[16:08] <brendand> and carry out the test described in the bug to confirm the fix is working. If it is then change the 'verification-needed' tag to 'verification-done'
[16:09] <brendand> If not then set it to 'verification-failed' (although it would be worth commenting to explain what failure you're seeing before doing this)
[16:10] <brendand> When you're done with this, you can disable -proposed, otherwise you might get some unwanted updates
[16:10] <brendand> Any volunteers?
[16:10] <brendand> ...
[16:11] <roadmr> o/
[16:12] <brendand> roadmr - aren't you the chair?
[16:12]  * roadmr gives roadmr the go-ahead
[16:12] <roadmr> heh yes!
[16:12] <roadmr> brendand: do you think it'd be worthwhile sending this to the UF mailing list?
[16:13] <brendand> roadmr - yes
[16:13] <roadmr> ok, great. Also, do you know if there's like a deadline for bug verification, and if so, what happens once we hit the deadline?
[16:15] <brendand> roadmr - i would check on ubuntu-release if there is a deadline. i know there is for kernel bugs, but otherwise i'm not sure
[16:15] <brendand> roadmr - if there is then i assume the change which fixes the bug would be reverted
[16:15] <brendand> (this is all going on my Kernel SRU knowledge)
[16:16] <roadmr> brendand: ok, thanks, just something to keep in mind.
[16:17] <roadmr> so anyone else on the checkbox SRU verification topic?
[16:17]  * roadmr looks for raised hands
[16:17] <roadmr> nobody? :)
[16:18] <roadmr> Well then, let's continue with our agenda
[16:18] <roadmr> Let's move on to AOB.
[16:18] <roadmr> [TOPIC] Any Other Business
[16:18] <roadmr> Anything you'd like to talk about with the UF team? Now's your chance!
[16:19]  * roadmr again looks for any more participants
[16:20] <roadmr> no takers?
[16:20] <roadmr> oh, me!
[16:20] <roadmr> I just have one more thing to comment on, we still don't know if we'll have a meeting next Monday (Dec 26th), please check the UF agenda page regularly for an update on this.
[16:21] <roadmr> ok, last chance, speak now or until the next UF meeting hold your peace
[16:22] <roadmr> heheh well I tried!
[16:22] <roadmr> Well I guess this wraps things up for today. Thanks for attending! please remember to help with the Checkbox verification if you can. And remember the mailing list is open to all your UF-related comments and inquiries.
[16:22] <roadmr> Thanks! have a good day!
[16:22] <roadmr> #endmeeting
[16:22] <meetingology> Meeting ended Mon Dec 19 16:22:45 2011 UTC.
[16:22] <meetingology> Minutes:        http://ubottu.com/meetingology/logs/ubuntu-meeting/2011/ubuntu-meeting.2011-12-19-16.01.moin.txt
[18:02] <jdstrand> hi!
[18:02] <tyhicks> Hello
[18:02] <mdeslaur> hi!
[18:04] <jdstrand> let's get started
[18:04] <jdstrand> #startmeeting
[18:04] <meetingology> Meeting started Mon Dec 19 18:04:23 2011 UTC.  The chair is jdstrand. Information about MeetBot at http://wiki.ubuntu.com/AlanBell/mootbot.
[18:04] <meetingology> Available commands: #accept #accepted #action #agree #agreed #chair #commands #endmeeting #endvote #halp #help #idea #info #link #lurk #meetingname #meetingtopic #nick #progress #rejected #replay #restrictlogs #save #startmeeting #subtopic #topic #unchair #undo #unlurk #vote #voters #votesrequired
[18:04] <jdstrand> The meeting agenda can be found at:
[18:04] <jdstrand> [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting
[18:04] <jdstrand> [TOPIC] Announcements
[18:04] <jdstrand> While the team is off next week, we will be monitoring lists, bugs and email for critical issues.
[18:04] <jdstrand> [TOPIC] Weekly stand-up report
[18:05] <jdstrand> jjohansen is off this week and next. I wish him well deserved rest :)
[18:05] <jdstrand> I'll go first
[18:05] <jdstrand> I've got another short week this week
[18:05] <jdstrand> and am off Thu and Fri (and like everyone else, next week)
[18:06] <jdstrand> I'm on community
[18:06] <jdstrand> I have a couple of pending updates. if I don't get them out today I will likely wait until after the break
[18:06] <jdstrand> I have some archive admin work and will look into some bugs that have been accumulating if I have time
[18:06] <jdstrand> that's it from me
[18:06] <jdstrand> mdeslaur: you're up
[18:08] <mdeslaur> I've just released some libarchive updates
[18:08] <mdeslaur> and am currently working on jasper and ghostscript
[18:08] <mdeslaur> and will also be testing some embargoed backports too this week
[18:08] <mdeslaur> since jj's off, guess I'm the stu^H^H^Hfortunate to be doing the kernel USN publication
[18:09] <mdeslaur> and I'm in the happy place
[18:09] <mdeslaur> that's about it for me!
[18:09] <mdeslaur> sbeattie: you're up
[18:09] <sbeattie> I'm in the happy place this week
[18:10] <sbeattie> I'm planning to poke at my work items and finish up the glibc update I'm working on
[18:10] <sbeattie> I also need to respond to jj on a couple of apparmor things.
[18:11] <sbeattie> I've got a short week this week, I'm off wednesday and friday
[18:11] <sbeattie> That's it for me.
[18:11] <sbeattie> micahg: poke
[18:12] <micahg> I've got Mozilla updates this week along with Chromium (time permitting), we're starting the Rapid release migration in Lucid/Maverick as well (announcement to come this week), Chromium updates as well time permitting, short week for me (not sure which day yet)
[18:12] <micahg> tyhicks: you're up
[18:12] <tyhicks> I'm in the triage role this week
[18:13] <tyhicks> I'll be around the entire week
[18:13] <tyhicks> I plan on getting a t1lib update out today and then primarily focusing on improving eCryptfs testing
[18:13] <tyhicks> but I'll take another update (tbd) to work off and on
[18:13] <tyhicks> That's all I've got, jdstrand
[18:14] <jdstrand> thanks
[18:14] <jdstrand> [TOPIC] Highlighted packages
[18:14] <jdstrand> The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so.
[18:14] <jdstrand> See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved.
[18:15] <jdstrand> http://people.canonical.com/~ubuntu-security/cve/pkg/libsmi.html
[18:15] <jdstrand> http://people.canonical.com/~ubuntu-security/cve/pkg/wxwidgets2.6.html
[18:15] <jdstrand> http://people.canonical.com/~ubuntu-security/cve/pkg/libdigest-perl.html
[18:15] <jdstrand> http://people.canonical.com/~ubuntu-security/cve/pkg/phpgroupware.html
[18:15] <jdstrand> http://people.canonical.com/~ubuntu-security/cve/pkg/clearsilver.html
[18:15] <jdstrand> [TOPIC] Miscellaneous and Questions
[18:15] <kees> heya. The Chrome folks asked me to see if this was getting any attention: http://rcvalle.com/post/14261796328/more-on-exploiting-glibc-tzfile-read-integer-overflow
[18:16] <kees> it boils down to two things: glibc malloc has predictable allocation behavior, and some part of the FILE structure doesn't use PTR_MANGLE.
[18:17] <mdeslaur> kees: it hasn't gotten any attention yet, as I don't think we were aware of it
[18:17]  * mdeslaur will read
[18:17]  * sbeattie will, too
[18:17] <sbeattie> kees: thanks for pointing it out
[18:17] <kees> it's more about an exploitation technique than a vuln, really.
[18:17] <jdstrand> yeah, I didn't know about it either
[18:18] <jdstrand> kees: thanks!
[18:18] <kees> I'm probably going to send some patches to glibc to further harden the FILE structures.
[18:18] <kees> but I don't really know what to do about the predictable allocation behavior. that's been a long-time problem.
[18:19] <mdeslaur> kees: any CVEs been assigned?
[18:19] <mdeslaur> or is it not actually a flaw?
[18:19] <kees> mdeslaur: I don't really think it qualifies as a flaw.
[18:19] <jdstrand> kees: cool. would you mind opening an ubuntu bug when you open the upstream one, so we can track it?
[18:19] <kees> mdeslaur: it's more of a technique to stabilize the environment during an attack.
[18:19] <kees> jdstrand: sure!
[18:20] <mdeslaur> I lack too much context, I'll catch up on it first
[18:20] <kees> cool, no worries. I don't think it's high priority at all, but I just wanted to point it out.
[18:22] <jdstrand> kees: thank you for doing so :)
[18:23] <kees> sure! :)
[18:23] <jdstrand> Any other questions or items to discuss?
[18:23] <kees> that was it from me.
[18:25] <jdstrand> mdeslaur, sbeattie, micahg, tyhicks, kees: thanks!
[18:26] <jdstrand> #endmeeting
[18:26] <meetingology> Meeting ended Mon Dec 19 18:26:00 2011 UTC.
[18:26] <meetingology> Minutes:        http://ubottu.com/meetingology/logs/ubuntu-meeting/2011/ubuntu-meeting.2011-12-19-18.04.moin.txt
[18:26] <mdeslaur> thanks jdstrand
[18:26] <tyhicks> thanks!
[18:26] <sbeattie> jdstrand: thanks