/srv/irclogs.ubuntu.com/2015/01/12/#ubuntu-meeting.txt

=== kickinz1|afk is now known as kickinz1
=== greyback_ is now known as greyback
=== chrisccoulson_ is now known as chrisccoulson
jdstrandhi!17:12
mdeslaur\o17:12
sarnoldhello17:12
tyhickshello17:12
jdstrand#startmeeting17:12
meetingologyMeeting started Mon Jan 12 17:12:45 2015 UTC.  The chair is jdstrand. Information about MeetBot at http://wiki.ubuntu.com/meetingology.17:12
meetingologyAvailable commands: action commands idea info link nick17:12
jdstrandThe meeting agenda can be found at:17:12
jdstrand[LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting17:12
jdstrand[TOPIC] Announcements17:12
=== meetingology changed the topic of #ubuntu-meeting to: Announcements
jdstrandLev Lazinskiy (levlaz) provided a debdiff for precise for nginx (LP: #1370478). Your work is very much appreciated and will keep Ubuntu users secure. Great job! :)17:13
ubottuLaunchpad bug 1370478 in nginx (Ubuntu Utopic) "[CVE-2014-3616] "possible to reuse cached SSL sessions in unrelated contexts"" [Undecided,Fix released] https://launchpad.net/bugs/137047817:13
jdstrand[TOPIC] Weekly stand-up report17:13
=== meetingology changed the topic of #ubuntu-meeting to: Weekly stand-up report
jdstrandI'll go first17:13
jdstrandI'm on triage this week17:13
chrisccoulsonhi17:13
jdstrandI have some stuff to look at regarding snappy for this week17:13
jdstrandand need to get to my pending updates17:13
jdstrandmdeslaur: you're up17:14
mdeslaurI'm on community this week17:14
mdeslaurI'm currently testing openssl which should go out in a few minutes17:14
mdeslaurI also have an embargoed issue to look at17:14
mdeslaurand have a bunch of other pending CVE updates I'm working on17:14
mdeslaurthat's it for me, sbeattie17:14
* mdeslaur pokes sbeattie with stick17:15
jdstrandperhaps go to tyhicks and circle back around to sbeattie?17:16
tyhicksI'm currently working on git updates17:17
tyhicksthe precise backport was failing the in-tree tests but I think I've just identified the problem so they should be going out today or tomorrow17:17
tyhicksthen I plan on helping out wherever possible with bug #140810617:17
ubottubug 1408106 in AppArmor "attach_disconnected not sufficient for overlayfs" [Critical,In progress] https://launchpad.net/bugs/140810617:17
jdstrandtyhicks: where are we on that dbus apparmor bug?17:18
tyhicksjdstrand: that's next on my list :)17:18
jdstrandah ok17:18
tyhicksjdstrand: I haven't been able to look at it in some time17:19
tyhicksbut I expect to spend most of my time this week on bug #136246917:19
ubottubug 1362469 in dbus (Ubuntu) "AppArmor unrequested reply protection generates unallowable denials" [Medium,In progress] https://launchpad.net/bugs/136246917:19
tyhicksthat's it for me17:19
* sbeattie is here17:19
jdstrandnot meaning to rush or reprioritize it. it came up in a meeting today that we'll likely be looking at moving rtm branch to vivid in the coming couple/few months17:19
jdstrandtyhicks: ^17:20
tyhicksjdstrand: yep, I need to get it fixed and then post the latest set of revisions to the upstream dbus bug17:20
jdstrandcool, thanks17:20
tyhicksso there are two good reasons to get it fixed asap17:20
tyhicksgo ahead, sbeattie17:20
jdstrand(that's it from me-- sbeattie and then jjohansen?)17:20
sbeattieI have a set of yaml updates to go out later today.17:20
sbeattieI have some upstream apparmor patches to review17:21
sbeattieI need to get the pie stuff back on the front burner17:21
sbeattieI'll also probably pick up the binutils update to work on in the background17:21
sbeattieSorry, I'm also expecting to work on bug 1408106 as needed as well.17:22
ubottubug 1408106 in AppArmor "attach_disconnected not sufficient for overlayfs" [Critical,In progress] https://launchpad.net/bugs/140810617:22
sbeattiethat's it for me, jjohansen?17:22
jjohansenThere are a couple of things to prep for the monthly apparmor meeting, some outstanding apparmor patches to finish reviewing, finish up the work on Bug #1408833, some work with tyhicks on the interaction of overlayfs and apparmor (as mentioned already Bug #1408106), and of course continuing the apparmor upstreaming work.17:22
ubottubug 1408833 in AppArmor "broken postinst test for uvtool-libvirt on utopic" [Undecided,Confirmed] https://launchpad.net/bugs/140883317:22
jjohansenthats it for me, sarnold17:24
sarnoldI'm in the happy place this week; I'm working on an update to coreutils, and there are five packages needing MIR auditing -- I probably can't get to all of them this week unless several of them are smaller than I expect17:25
sarnoldthanks to those filing early MIR requests :) much appreciated17:25
sarnoldthat's it for me, chrisccoulson17:26
jdstrandsarnold: fyi, I assigned one more to you today17:26
chrisccoulsonit's mozilla updates for me this week17:26
jdstrandoh, I didn't try the new firefox yet17:26
chrisccoulsonI'm fixing a build failure (armhf) at the moment17:27
tyhicksI thought chrisccoulson wanted us to do that tomorrow17:27
jdstrandI thought by tomorrow17:27
tyhicksah17:27
chrisccoulsonother than mozilla updates, I'm working on bug 1377198 which fixes some weird behaviour in an API that the browser is using17:27
sbeattiechrisccoulson: I'm running the new firefox, not seeing issues.17:27
ubottubug 1377198 in Oxide "CertificateError is not cancelled if you stop the pending navigation" [High,Triaged] https://launchpad.net/bugs/137719817:28
chrisccoulsonexcellent, thanks17:28
chrisccoulsonI think that's me done17:28
jdstrand[TOPIC] Highlighted packages17:29
=== meetingology changed the topic of #ubuntu-meeting to: Highlighted packages
jdstrandThe Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so.17:30
jdstrandSee https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved.17:30
jdstrandhttp://people.canonical.com/~ubuntu-security/cve/pkg/gcc-4.9-powerpc-cross.html17:30
jdstrandhttp://people.canonical.com/~ubuntu-security/cve/pkg/ldap-account-manager.html17:30
jdstrandhttp://people.canonical.com/~ubuntu-security/cve/pkg/bfgminer.html17:30
jdstrandhttp://people.canonical.com/~ubuntu-security/cve/pkg/ganeti.html17:30
jdstrandhttp://people.canonical.com/~ubuntu-security/cve/pkg/rawstudio.html17:30
jdstrand[TOPIC] Miscellaneous and Questions17:30
=== meetingology changed the topic of #ubuntu-meeting to: Miscellaneous and Questions
jdstrandDoes anyone have any other questions or items to discuss?17:30
tyhicksI've got one for jjohansen, sarnold, and sbeattie regarding the libapparmor patches waiting for review17:31
tyhickshow can I help the review process there?17:31
jjohansentyhicks: can you please provide 48h to my day17:31
tyhickswould it help if I wrote up a man page for the new functions?17:31
tyhicksjjohansen: :)17:32
jjohansentyhicks: no, its just spending the time to give them a proper review17:32
tyhicksI need to write a man page before release, anyways, so it might help show the "bigger picture" during review17:32
tyhicksjjohansen: ack - I figured that was the bottleneck but wanted to make sure there was nothing else I could do17:33
jjohansentyhicks: I would suggest holding off on that, I already have nacks on some of it17:33
tyhicksok17:33
sarnoldtyhicks: sorry, I was daunted by just how many patches are still outstanding..17:33
tyhicks(please send out nacks asap so I can start on new revisions)17:33
tyhicksjdstrand: that's all that I had17:34
jjohansensarnold: he was just trying to make sure you would have your fill over the christmas break17:34
jjohansentyhicks: ack17:34
sarnoldjjohansen: no fear there, it was an impressive patch dump :)17:35
jjohansensure, now /me has to give sarnold an even bigger patch dump to keep him happy17:36
sarnold:)17:36
jdstrandmdeslaur, sbeattie, tyhicks, jjohansen, sarnold, chrisccoulson: thanks!17:38
jdstrand#endmeeting17:38
=== meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendar | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology
meetingologyMeeting ended Mon Jan 12 17:38:54 2015 UTC.17:38
meetingologyMinutes:        http://ubottu.com/meetingology/logs/ubuntu-meeting/2015/ubuntu-meeting.2015-01-12-17.12.moin.txt17:38
mdeslaurthanks jdstrand!17:38
jjohansenthanks jdstrand17:38
sarnoldthanks jdstrand17:39
tyhicksthanks!17:39
sbeattiejdstrand: thanks!17:40
=== tumbleweed_ is now known as tumbleweed
=== xnox_ is now known as xnox

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!