=== JanC_ is now known as JanC [16:30] \o [16:30] o/ [16:30] #startmeeting [16:30] Meeting started Mon Oct 31 16:30:57 2016 UTC. The chair is ratliff. Information about MeetBot at http://wiki.ubuntu.com/meetingology. [16:30] Available commands: action commands idea info link nick [16:31] The meeting agenda can be found at: [16:31] [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting [16:31] [TOPIC] Announcements === meetingology changed the topic of #ubuntu-meeting to: Announcements [16:31] Nikita Yerenkov-Scott (arthur-dent) provided debdiffs for trusty-xenial for tracker (LP: #1178402) [16:31] Launchpad bug 1178402 in tracker (Ubuntu Xenial) "tracker-extract crashed with signal 5 in g_malloc()" [High,Fix released] https://launchpad.net/bugs/1178402 [16:31] Scott Kitterman (ScottK) provided a debdiff for trusty for kdepimlibs (LP: #1631237) [16:31] Launchpad bug 1631237 in kdepimlibs (Ubuntu Trusty) "KMail: HTML injection in plain text viewer" [High,Fix released] https://launchpad.net/bugs/1631237 [16:31] Simon Quigley (tsimonq2) provided a debdiff for precise for kdepimlibs (LP: #1630700) [16:31] Launchpad bug 1630700 in kcoreaddons (Ubuntu Xenial) "CVE - KMail - HTML injection in plain text viewer" [High,Confirmed] https://launchpad.net/bugs/1630700 [16:32] Nikita Yerenkov-Scott (arthur-dent) provided debdiffs for xenial-yakkety for openjpeg2 (LP: #1630702) [16:32] Launchpad bug 1630702 in openjpeg2 (Ubuntu Yakkety) "Fix for CVE-2016-8332 and CVE-2016-7163" [Medium,Fix released] https://launchpad.net/bugs/1630702 [16:32] Andreas Cadhalpun (andreas-cadhalpun) provided a debdiff for xenial for ffmpeg (LP: #1581156) [16:32] Launchpad bug 1581156 in ffmpeg (Ubuntu) "Update to bugfix release 2.8.8 in Xenial" [High,Fix released] https://launchpad.net/bugs/1581156 [16:32] Thank you for your assistance in keeping Ubuntu users secure! :) [16:32] [TOPIC] Weekly stand-up report === meetingology changed the topic of #ubuntu-meeting to: Weekly stand-up report [16:32] mdeslaur: you're up [16:32] I'm still in the happy place this week [16:32] I have a couple of updates I'm testing [16:32] and I'm working on a couple of embargoed issues [16:32] that's about it for me [16:32] hrm, who's next? [16:33] chrisccoulson ? [16:33] hi :) [16:33] this week, I'll be mostly working on https://blueprints.launchpad.net/oxide/+spec/ubuntu-webview-implementation, which is blocking a bunch of personal-related work we discussed at the sprint [16:34] I need to publish Oxide (it's all tested already). I don't have any other updates planned [16:34] that's me done [16:35] I'll jump in and go next. We have some team members out due to illness, appointments, and vacation. [16:35] I'm on CVE triage this week. [16:36] I'm working on a project to review open CVEs for universe packages. [16:37] for the record, sarnold is on bug triage and tyhicks is on community this week [16:38] jjohansen: do you want to go next? [16:38] sure [16:40] I'm trying to finish up some gsettings review and related work, and I have some bugs to look at (and file), there is a memory leak, and lxd related issue with some files being passed into the container. Neither of which have bugs yet [16:40] oh and I need to upstream the change_hat() fix [16:40] cboltz really needs that one [16:40] thats it for me ratliff back to you [16:40] thank you! [16:40] [TOPIC] Highlighted packages === meetingology changed the topic of #ubuntu-meeting to: Highlighted packages [16:41] The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. [16:41] See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. [16:41] http://people.canonical.com/~ubuntu-security/cve/pkg/pykerberos.html [16:41] http://people.canonical.com/~ubuntu-security/cve/pkg/maven-indexer.html [16:41] http://people.canonical.com/~ubuntu-security/cve/pkg/revelation.html [16:41] http://people.canonical.com/~ubuntu-security/cve/pkg/sanlock.html [16:41] http://people.canonical.com/~ubuntu-security/cve/pkg/lib3ds.html [16:41] [TOPIC] Miscellaneous and Questions === meetingology changed the topic of #ubuntu-meeting to: Miscellaneous and Questions [16:41] Does anyone have any other questions or items to discuss? [16:43] mdeslaur, jjohansen, ChrisCoulson: Thanks! [16:43] #endmeeting === meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds: Please leave swords by the door | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendars | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology [16:43] Meeting ended Mon Oct 31 16:43:35 2016 UTC. [16:43] Minutes: http://ubottu.com/meetingology/logs/ubuntu-meeting/2016/ubuntu-meeting.2016-10-31-16.30.moin.txt === JanC_ is now known as JanC [16:43] thanks ratliff ! [16:46] thanks ratliff [20:58] ratliff: Thanks for the mention. ;)