=== JanC_ is now known as JanC === popey_ is now known as popey === dames is now known as thedac === jdstrand_ is now known as jdstrand [16:29] \o [16:29] o/ [16:29] o/ [16:30] hello [16:30] #startmeeting [16:30] Meeting started Mon May 15 16:30:29 2017 UTC. The chair is tyhicks. Information about MeetBot at http://wiki.ubuntu.com/meetingology. [16:30] Available commands: action commands idea info link nick [16:30] The meeting agenda can be found at: [16:30] [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting [16:30] [TOPIC] Weekly stand-up report === meetingology changed the topic of #ubuntu-meeting to: Weekly stand-up report [16:30] jdstrand: you're up [16:31] last week I participated in tons of snappy discussions and a couple unplanned high priority items which took away from my ability to get to everything I planned [16:31] I did get to various PR reviews, fixed an ARM regression related to the recent netlink arg filtering PR and made changes to the classic snap (to ease working on the netlink regression) [16:31] I also spent quite a bit of time investigating at the current state of overlayfs usage in and outside of snaps on 4.4 and 4.10 kernel. Very nearly done with investigation and will report back in the bug [16:31] This week is a short week for me (off friday and out next week). I plan to: [16:31] - finish the overlayfs investigation [16:31] - fix snappy-debug to work with journald, update for snapd 2.25 and 2.26 [16:31] - work on an embargoed issue [16:31] - snappy forum discussions and PR reviews [16:31] - does a miscellaneous policy updates PR [16:31] - get back to wayland/gnome/plasma interfaces as have time [16:31] that's it from me. mdeslaur you're up [16:32] I'm in the happy place this week [16:32] I just pushed out a couple of updates (git and kde4libs) [16:32] I have libytnef to publish this afternoon [16:32] (just finished testing it) [16:33] I am still awaiting qemu test results [16:33] and will work on other updates after that [16:33] that's it from me, sbeattie [16:33] I'm on community this week [16:33] mdeslaur: fyi - tests already running [16:33] cpaelzer: sweet, thanks! [16:33] I have openjdk-7 updates from tdaitx to test and publish [16:34] I'll likely have kernel USNs to publish today or tomorrow [16:34] ... which likely means figuring out the precise/E publishing issues [16:34] after that, I'll be going down the list [16:35] I also need to check in on some apparmor issues [16:35] that's probably it for me. [16:35] tyhicks: over to you [16:35] I'm on bug triage this week [16:35] CVE triage and precise/esm UCT work consumed the majority of my week last week [16:36] still need to get back to my seccomp work [16:36] fscrypto userspace isn't yet public so I'm still waiting to review and poke at that [16:36] there are still some roadmap sprint followups that I need to do [16:37] and I have an internal issue that I'm working on [16:37] that's it for me [16:37] jjohansen: you're up [16:38] I have to finish up the 4.11 apparmor port, there are memory corruption crashing issues to track down, currently mostly likely triggered by fput, in code that hasn't changed [16:38] poke some people to review upstream securityfs patch [16:38] there is a virt-aa helper upstreaming thread to check on [16:39] I have some LSM backlog to catch up on (eg. IMA posted out some ns support that makes changes to fs/namespace.c), for now just to make sure there is nothing to be aware of for upstreaming [16:39] possibly coordinating with sbeattie on afore mentioned apparmor issues [16:39] and then hopefully back to the upstreaming work [16:40] probably working on fixing the typesplitting, which without the unix rules mediation won't be going up [16:42] I think that is it for me, I don't think sarnold is around yet, so tyhicksback to you [16:43] chrisccoulson: you're up [16:44] I spent some time last week debugging a thunderbird issue, which meant I didn't finish my firefox symbol upload script. I plan to do that this week [16:44] (here now) [16:44] Also plan to publish thunderbird (I'm just waiting for upstream to actually release it) [16:46] chrisccoulson: sounds good - is that it for you? [16:46] I've got an internal issue to resolve too [16:46] Other than that, I'll be spending some time figuring out what to work on next, so I'll probably be pinging various people this week [16:46] That's me done [16:47] thanks [16:47] sarnold: go ahead [16:47] i'm on cve triage this week; i'll start the 'free time' with xdelta3 mir and move on down the mir list; perhaps apparmor patch reviews if john's looking for another set of eyes [16:47] that's it for me, ratliff? [16:47] I'm in the happy place this week [16:47] sarnold: you have a shadow regression, fyi [16:47] sarnold: congrats [16:48] mdeslaur: argh those were too simple to have regressions :( [16:48] yeah :( [16:49] I will largely be focused on internal tasks this week. [16:49] oh, I forgot - I'm hoping will has some design guidelines for the startpage for me this week, so I can start the work to move away from http://start.ubuntu.com/ in firefox [16:49] (sorry for interrupting) [16:50] There are some technical content item, including the webinar. [16:50] *items [16:50] that is it for me this week. back to you tyhicks [16:51] thanks [16:51] [TOPIC] Highlighted packages === meetingology changed the topic of #ubuntu-meeting to: Highlighted packages [16:51] The Ubuntu Security team will highlight some community-supported packages that might be good candidates for updating and or triaging. If you would like to help Ubuntu and not sure where to start, this is a great way to do so. [16:52] See https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details and if you have any questions, feel free to ask in #ubuntu-security. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved. [16:52] http://people.canonical.com/~ubuntu-security/cve/pkg/libfpdi-php.html [16:52] http://people.canonical.com/~ubuntu-security/cve/pkg/suckless-tools.html [16:52] http://people.canonical.com/~ubuntu-security/cve/pkg/jgit.html [16:52] http://people.canonical.com/~ubuntu-security/cve/pkg/flightgear.html [16:52] http://people.canonical.com/~ubuntu-security/cve/pkg/plasma-workspace.html [16:52] [TOPIC] Miscellaneous and Questions === meetingology changed the topic of #ubuntu-meeting to: Miscellaneous and Questions [16:52] Does anyone have any other questions or items to discuss? [16:52] please help make the suckless-tools suck even less. [16:52] The team has reactived their twitter account @ubuntu_sec and are reachable there now as well. [16:53] ratliff: look forward to the stream of tweets :) [16:54] thanks, JamieBennett! [16:54] jdstrand, mdeslaur, sbeattie, jjohansen, sarnold, ChrisCoulson, ratliff, JamieBennett: Thanks! [16:54] #endmeeting === meetingology changed the topic of #ubuntu-meeting to: Ubuntu Meeting Grounds: Please leave swords by the door | Calendar/Scheduled meetings: http://fridge.ubuntu.com/calendars | Logs: https://wiki.ubuntu.com/MeetingLogs | Meetingology documentation: https://wiki.ubuntu.com/meetingology [16:54] Meeting ended Mon May 15 16:54:53 2017 UTC. [16:54] Minutes: http://ubottu.com/meetingology/logs/ubuntu-meeting/2017/ubuntu-meeting.2017-05-15-16.30.moin.txt [16:54] thank you, tyhicks! [16:55] thanks tyhicks [16:55] thanks tyhicks :) [16:55] thanks tyhicks [17:01] thanks tyhicks === jdstrand is now known as jdstrand_ === jdstrand_ is now known as jdstrand === JanC_ is now known as JanC