[18:02] <mdeslaur> jjohansen, sbeattie, tyhicks, micahg, sarnold, jdstrand: meeting?
[18:02] <jjohansen> \o
[18:02] <tyhicks> Hello
[18:03] <sarnold> ack
[18:03]  * sbeattie waves
[18:04] <mdeslaur> #startmeeting
[18:04] <meetingology> Meeting started Mon Nov  5 18:04:03 2012 UTC.  The chair is mdeslaur. Information about MeetBot at http://wiki.ubuntu.com/meetingology.
[18:04] <meetingology> Available commands: #accept #accepted #action #agree #agreed #chair #commands #endmeeting #endvote #halp #help #idea #info #link #lurk #meetingname #meetingtopic #nick #progress #rejected #replay #restrictlogs #save #startmeeting #subtopic #topic #unchair #undo #unlurk #vote #voters #votesrequired
[18:04] <mdeslaur> The meeting agenda can be found at:
[18:04] <mdeslaur> [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting
[18:04] <mdeslaur> [TOPIC] Announcements
[18:04] <mdeslaur> Natty is now EoL. jdstrand did the process for retiring it, so if you have not done it already, please do the checklist for removing natty from your security tools configuration.
[18:05] <mdeslaur> [TOPIC] Weekly stand-up report
[18:05] <mdeslaur> I'll go first I guess
[18:05] <mdeslaur> This week, I'm in the happy place
[18:05] <mdeslaur> I just released mysql, munin and mesa
[18:05] <mdeslaur> and I have some other things to start working on
[18:05] <mdeslaur> and I'll be gong down the list
[18:05] <mdeslaur> that's pretty much it from me
[18:06] <mdeslaur> sbeattie: you're up
[18:06] <sbeattie> I'm trying to recover from UDS
[18:06] <mdeslaur> sbeattie: did you get the Ubuflu?
[18:06] <sbeattie> mdeslaur: no, but my inbox did
[18:06] <mdeslaur> oh, haha
[18:06] <mdeslaur> canonimailplague
[18:07] <sbeattie> (I pre-fetched UbuFlu for myself)
[18:07] <sbeattie> I'll be looking at the display manager notes and stuff that jjohansen handed off to me.
[18:07] <sbeattie> which is pretty much it for me
[18:08] <mdeslaur> I've been popping vitamin C like candy as a placebo preventative measure
[18:08] <sbeattie> heh, yeah, me too
[18:08]  * jjohansen wishes he had some of that placebo
[18:08] <sarnold> mm, something to do at lunch time..
[18:08] <sbeattie> I don't think micahg is here, so tyhicks, I think you're up.
[18:09] <tyhicks> Sorry, too busy laughing at your weak immune systems
[18:09] <tyhicks> ;)
[18:09] <mdeslaur> lol
[18:09] <tyhicks> arges asked me to SRU the fix for bug 1052038
[18:10] <tyhicks> The fix already exists and a test case already exists, so it shouldn't be bad
[18:10]  * jjohansen coughs in tyhicks direction
[18:10] <tyhicks> I want to wrap up things (from my end, at least) for the audit MIR this week
[18:10] <mdeslaur> \o/
[18:10] <tyhicks> sgrubb merged my patch upstream this morning
[18:11] <mdeslaur> oh, nice
[18:11] <sarnold> nice
[18:11] <tyhicks> I've got a little inbox backlog to take care of
[18:11] <tyhicks> and then I'm back on the apparmor dbus work
[18:11] <tyhicks> that's it for me
[18:11] <tyhicks> jjohansen: you're up
[18:12] <jjohansen> I am going to get the dbus kernel up and then I'm am diving back into the stacking work this week
[18:12] <tyhicks> thanks jjohansen
[18:12] <mdeslaur> jjohansen: is that like the big jenga game at UDS?
[18:12] <jjohansen> mdeslaur: nah, much less stable
[18:12] <mdeslaur> hehe
[18:12] <tyhicks> oof
[18:12] <jjohansen> :)
[18:13] <jjohansen> I think that is it for /me sarnold your up
[18:13] <sarnold> good think you're a talented swordsman...
[18:13] <sarnold> I'm on triage this week.
[18:13] <jjohansen> sarnold: sadly only when my opponent is two feet tall
[18:13] <sarnold> I'm pretty sure I've got the udsflu, you guys never mentioned that uds lasts another week...
[18:14] <mdeslaur> sarnold: oh, let me know when you do bug triage if you want me to ride along
[18:14] <sarnold> mdeslaur: thanks
[18:15] <sarnold> before uds flights, I made sure qt4-x11 update worked well enough in natty, but didn't get around to the other distros in time to get the qt4-x11 update out the door for natty's goodbye party
[18:15] <jjohansen> sarnold: ha yes, uds does seem to have a way of chewing up 2 weeks of your time
[18:15] <sarnold> but it does help provide overall credibility to the reliability of the patch,  and the time spent with qrt feels well-spent.
[18:16] <sarnold> I thikn that's it, but maybe that's just the sinuses thinking...
[18:16] <mdeslaur> sarnold: ok, you can remove the natty update from the secppa before publishing
[18:16] <sarnold> mdeslaur: back to you?
[18:16] <mdeslaur> sarnold: so you'll be testing the other releases this week, and hopefully publish it?
[18:16] <sarnold> mdeslaur: can I ask for your hlep for that later today?
[18:16] <sarnold> mdeslaur: yes.
[18:16] <mdeslaur> sarnold: certainly
[18:16] <sarnold> thanks
[18:17] <mdeslaur> [TOPIC] Highlighted packages
[18:17] <mdeslaur> The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so.
[18:17] <mdeslaur> See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved.
[18:17] <mdeslaur> http://people.canonical.com/~ubuntu-security/cve/pkg/sun-javadb.html
[18:17] <mdeslaur> http://people.canonical.com/~ubuntu-security/cve/pkg/msmtp.html
[18:17] <mdeslaur> http://people.canonical.com/~ubuntu-security/cve/pkg/libparallel-forkmanager-perl.html
[18:17] <mdeslaur> http://people.canonical.com/~ubuntu-security/cve/pkg/libsdp.html
[18:17] <mdeslaur> http://people.canonical.com/~ubuntu-security/cve/pkg/geshi.html
[18:17] <mdeslaur> [TOPIC] Miscellaneous and Questions
[18:17] <mdeslaur> Does anyone have any other questions or items to discuss?
[18:18] <sarnold> one thing, probably long-term discussion point..
[18:18] <sarnold> we get our entropy from keyboard timing and hard drive timing data; but ssds are on the rise. are they still a reasonable source of entropy data?
[18:19] <mdeslaur> hrm, interesting question
[18:19] <mdeslaur> probably should be asked upstream
[18:19] <sarnold> one hopes ssds are going into systems with good cpu-provided rngs but that may only be true on server-scale machinery.
[18:20] <mdeslaur> yeah, it's a good question
[18:21] <tyhicks> sarnold: FYI, Ted Ts'o made some changes to the kernel's entropy gathering code over the last month or two. I don't recall what all the changes were atm.
[18:22] <sarnold> tyhicks: ah :) thanks
[18:23] <mdeslaur> ok, thanks everyone!
[18:23] <mdeslaur> #endmeeting
[18:23] <meetingology> Meeting ended Mon Nov  5 18:23:21 2012 UTC.
[18:23] <meetingology> Minutes (wiki):        http://ubottu.com/meetingology/logs/ubuntu-meeting/2012/ubuntu-meeting.2012-11-05-18.04.moin.txt
[18:23] <meetingology> Minutes (html):        http://ubottu.com/meetingology/logs/ubuntu-meeting/2012/ubuntu-meeting.2012-11-05-18.04.html
[18:23] <jjohansen> thanks mdeslaur
[18:23] <sarnold> thanks mdeslaur
[18:23] <tyhicks> thanks!