[08:40] rbalint, slangasek, we can take newer openssl 1.0.2[?] it's just we are not doing the whole 1.1.x transition. [08:40] i will take a look as to what's happening there. === JanC_ is now known as JanC [16:30] hello [16:30] #startmeeting [16:30] Meeting started Mon Mar 27 16:30:26 2017 UTC. The chair is tyhicks. Information about MeetBot at http://wiki.ubuntu.com/meetingology. [16:30] Available commands: action commands idea info link nick [16:30] The meeting agenda can be found at: [16:30] [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting [16:30] [TOPIC] Announcements === meetingology changed the topic of #ubuntu-meeting to: Announcements [16:30] Jeremy Bicha (jbicha) provided debdiffs for trusty-yakkety for audiofile (LP: #1674005) [16:30] Launchpad bug 1674005 in audiofile (Ubuntu Yakkety) "audiofile: Multiple security issues from March 2017" [Medium,Fix released] https://launchpad.net/bugs/1674005 [16:30] James Cowgill (jcowgill) provided debdiffs for xenial and yakkety for mbedtls (LP: #1672686) [16:30] Launchpad bug 1672686 in polarssl (Debian) "CVE-2017-2784 - Freeing of memory allocated on stack when validating a public key with a secp224k1 curve" [Unknown,Confirmed] https://launchpad.net/bugs/1672686 [16:31] Thank you for your assistance in keeping Ubuntu users secure! :) [16:31] [TOPIC] Weekly stand-up report === meetingology changed the topic of #ubuntu-meeting to: Weekly stand-up report [16:31] jdstrand: you're up [16:31] last week was dominated by store reviews, looking into a snappy regression and working through various snap declarations that exposed various interesting corner cases. I also helped triage several partner and Personal issues. I did get to a few snappy reviews, but more remain [16:31] This is a short week (off Friday) and this week I plan to: [16:31] - store reviews [16:31] - continue reviewing snappy PRs. I suspect this to take most of/if not all of my time [16:31] - if have time, move to k8s interface and picking up remaining bits of seccomp arg filtering [16:31] that's it for me. mdeslaur, you're up [16:32] I'm on bug triage this week [16:32] and I have some gstreamer updates I'm about to release [16:32] I'm also waiting for samba upstream to take a look at the regression in the current security updates [16:32] and I'll pick something up from the list [16:32] that's it for me, sbeattie? [16:33] err, he's out I think [16:33] sbeattie's out this week except for wed [16:33] who's next [16:33] I'm up [16:33] I'm in the happy place though I think I'll need to pick up cve triage this week [16:34] I'm testing an embargoed update right now [16:34] I'm helping out with another [16:34] I'll publish apparmor updates once I get the green light [16:34] and I'm still trying to return to my seccomp work [16:35] oh, I also need to finish configuring the build infrastructure for 12.04 ESM [16:35] sarnold: you're up [16:36] I'm in happy place this week, I could also pick up some cve triage; also going to do the shadow update. at this point it's been ignored enough that half of it will be re-discovering what 's done and what sitll remains to be done :/ [16:36] then back to mirs [16:37] that's it for me, is it chrisccoulson? or back to tyhicks? [16:37] Chris is out [16:37] on to ratliff [16:38] I'm on community this week. I was planning on backfilling some of the CVE triage as well. We can draw straws for days [16:38] I also have a review to request of sarnold [16:39] Some internal items to complete [16:39] and then back to updates for vivid-based core & touch [16:39] back to you tyhicks [16:40] thanks [16:40] [TOPIC] Highlighted packages === meetingology changed the topic of #ubuntu-meeting to: Highlighted packages [16:40] The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. [16:40] See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. [16:40] http://people.canonical.com/~ubuntu-security/cve/pkg/djbdns.html [16:40] http://people.canonical.com/~ubuntu-security/cve/pkg/git-annex.html [16:40] http://people.canonical.com/~ubuntu-security/cve/pkg/flightgear.html [16:40] http://people.canonical.com/~ubuntu-security/cve/pkg/t-coffee.html [16:40] http://people.canonical.com/~ubuntu-security/cve/pkg/ntop.html [16:40] djbdns ^^^ I never thought I'd see the day.. [16:40] hehe [16:40] I knew you wouldn't be able to resist :) [16:41] [TOPIC] Miscellaneous and Questions === meetingology changed the topic of #ubuntu-meeting to: Miscellaneous and Questions [16:41] Does anyone have any other questions or items to discuss? [16:41] 2008 and 2012. apparently I'm five years behind on my news. [16:43] jdstrand, mdeslaur, sarnold, ratliff: Thanks! [16:43] #endmeeting === meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds: Please leave swords by the door | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendars | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology [16:43] Meeting ended Mon Mar 27 16:43:11 2017 UTC. [16:43] Minutes: http://ubottu.com/meetingology/logs/ubuntu-meeting/2017/ubuntu-meeting.2017-03-27-16.30.moin.txt [16:43] thanks tyhicks :) [16:43] thanks tyhicks [16:43] * genii mops up and cleans the coffeepot [16:44] I wasn't done with the pot of coffee [16:46] :) [16:46] * genii puts another batch on [19:00] o/ [19:00] o/ [19:01] I'm expiring again in 7 days. [19:01] o/ [19:01] cyphermox: I think micahg might have something to say about that :-P [19:02] maybe I should run again, to make things more complicated [19:03] cyphermox: it wouldn't be more complicated because you'd be the only candidate afaik [19:04] was there a call for nominations [19:04] * sil2100 didn't see any e-mail [19:04] To u-d-a IIRC [19:05] http://fridge.ubuntu.com/2017/03/14/upcoming-vacant-developer-membership-board-seats-call-for-nominations/ [19:05] https://lists.ubuntu.com/archives/ubuntu-devel-announce/2017-March/001205.html [19:05] wow, almost 2 weeks [19:06] Before we get to far who will chair? [19:07] I have a call in 30 min, so probably shouldn't be me [19:07] I would prefer to skip, one more chairing and I'll feel like a chair myself [19:07] #startmeeting [19:07] Meeting started Mon Mar 27 19:07:57 2017 UTC. The chair is bdmurray. Information about MeetBot at http://wiki.ubuntu.com/meetingology. [19:07] Available commands: action commands idea info link nick [19:08] [TOPIC] Review of previous action items === meetingology changed the topic of #ubuntu-meeting to: Review of previous action items [19:08] rbasak added Rosco2 yes? [19:09] Yes done [19:09] I did sent a call for nominations and we'll talk about that as a separate topic [19:10] sil2100 took care of ddstreet yes? [19:10] bdmurray: yes, done [19:10] rbasak to create and add slashd to the new SRU-UPLOADERS team (done, pending TB action) [19:10] Is the TB action actioned? [19:10] Not that I'm aware [19:10] The next TB meeting is tomorrow I hope? [19:10] * rbasak isn't sure of the phase [19:11] okay but you are managing it / them? [19:11] Yes. Carry that one over please, and I'll chase as needed. [19:12] just for posterity - rbasak to announce slashd's new SRU-UPLOADERS team membership (done) [19:12] sil2100 to finalize fossfreedom's application vote situation [19:12] what's up with that? [19:12] bdmurray: that's more or less done now [19:12] I need to just send out the note [19:12] I poked infinity and got a final -1 vote from him [19:13] This means the application got rejected in the end - I'll send out an announcement to that today [19:13] sil2100: okay [19:14] I don't see any applications dated for today so [19:14] [TOPIC] Expiring DMB members === meetingology changed the topic of #ubuntu-meeting to: Expiring DMB members [19:14] I sent out a call for nominations and received none [19:15] Although sil2100 and micahg mentioned they didn't see the announcement. Is u-d-a the right place to send it? [19:15] yes [19:15] Not to put you on the spot but how did you miss it? [19:15] bdmurray: yes, I found it, got pushed to spam (?) on my gmail for unknown reasons [19:15] too busy and mailbox full might have meant it got dropped [19:15] I wonder if everyone is assuming that someone else will apply. If we send out a second call, might that help? [19:16] I motion that we extend cyphermox's membership to match infinity's membership expiration date and send out of a call at the beginning of July [19:16] I don't see how things'll get better in July. [19:17] Do we need TB approval for that? [19:17] IIRC we had a similar issue during the last election. [19:17] The issue being very few candidates. [19:17] But I half agree with bdmurray - rather than postponing, perhaps we could continue to try to find replacements and extend cyphermox's term as needed until replacements are found? [19:17] Assuming cyphermox wants to continue that is. [19:17] rbasak: we usually submit the results of the election to the TB for a final signoff, we could do that for this as well [19:18] rbasak: I have just sent a self-nomination email [19:18] cyphermox: thanks! [19:18] we're approaching the end of the cycle, I think people will be busy [19:18] July is in the middle before feature freeze which should allow people a little more time to think about it [19:18] I *did* miss the deadline though, so YMMV [19:18] micahg: I accept that. My point is that rather than pushing back to July, perhaps we should push back only as far as is necessary. [19:19] startup in May again [19:19] ? [19:20] I don't think its gonna help, but we can just place private bets on that. [19:20] we can try to run a social media campaign leading up to it maybe if someone has time [19:20] 1-3 part series on life as a DMB member? [19:21] ahah :) [19:22] There are only 86 core devs, so a social media campaign seems like a bit much. [19:22] MOTUs are allowed to run as well [19:23] Well one of their "latest members" is sil2100 which must have been some time ago. [19:24] Anyway, the proposal is to extend cyphermox's membership to end of May and send out a request for nominations in the beginning of that month? [19:24] we haven't reviewed a MOTU application in quite a while [19:24] well, it's an extra 50 people [19:26] yeah, I think people have moved to more siloed rights instead of a broader focus, which is a mixed bag [19:26] there's very little traffic in the MOTU channel [19:27] Is there anyone focusing on the non-snap development community anymore? [19:30] rbasak, cyphermox, sil2100: Are you happing with extending cyphermox's membership until the end of May and holding elections then? [19:31] No objection. [19:32] bdmurray: no objection [19:35] [ACTION] bdmurray to get cyphermox's membership extended [19:35] ACTION: bdmurray to get cyphermox's membership extended [19:35] [TOPIC] Outstanding mailing list requests to assign === meetingology changed the topic of #ubuntu-meeting to: Outstanding mailing list requests to assign [19:36] I think I saw a ping over the weekend [19:36] There were a couple I think [19:36] "Re-generate the list of my personal packageset" [19:36] "one more PPU package for ~mapreri" [19:36] The one from happyaron? [19:36] Yep [19:37] Raphaël Pinson asking for core-dev reinstatement [19:38] "Please add xfdashboard to xubuntu packageset" [19:38] That's Feb 07 - did that ever get done? [19:38] [ACTION] bdmurray to look at ~mapreri's one more package [19:38] ACTION: bdmurray to look at ~mapreri's one more package [19:38] rbasak: Can you do the re-gen? [19:38] OK [19:39] Uh [19:39] I'll sort it anyway [19:39] I don't think Aron has a personal packageset. [19:39] ACTION: rbasak to sort Aron's request [19:40] ACTION: bdmurray to add Raphaël Pinson back to core-dev [19:40] [ACTION] rbasak to sort Aron's request [19:40] ACTION: rbasak to sort Aron's request [19:40] [ACTION] bdmurray to add Raphaël Pinson back to core-dev [19:40] ACTION: bdmurray to add Raphaël Pinson back to core-dev [19:42] [ACTION] bdmurray to look into xfdashboard being in xubuntu packageset [19:42] ACTION: bdmurray to look into xfdashboard being in xubuntu packageset [19:42] There I think we got them all [19:42] actually, let me take care of xfdashboard, I'm already looking at the packageset code. [19:42] okay [19:43] [TOPIC] Any other business? === meetingology changed the topic of #ubuntu-meeting to: Any other business? [19:43] Thank you for chairing bdmurray [19:43] I'm happy to chair next. [19:44] cyphermox: noted, thanks [19:44] Okay, I guess that's a wrap. [19:45] Ask your friends to run in May though! [19:45] #endmeeting === meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds: Please leave swords by the door | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendars | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology [19:45] Meeting ended Mon Mar 27 19:45:38 2017 UTC. [19:45] Minutes: http://ubottu.com/meetingology/logs/ubuntu-meeting/2017/ubuntu-meeting.2017-03-27-19.07.moin.txt [19:46] thanks bdmurray [19:46] bdmurray: Was a date for a May mtg determined? [19:46] rcj: No, but it'd follow the usual schedule [19:47] rcj: 5/8 and 5/22 [19:51] bdmurray: Ah, so there's a 2nd April mtg on the 24th then. [19:51] rcj: indeed [19:51] Excellent