[16:32] <ratliff> #startmeeting
[16:32] <meetingology> Meeting started Mon Apr 23 16:32:34 2018 UTC.  The chair is ratliff. Information about MeetBot at http://wiki.ubuntu.com/meetingology.
[16:32] <meetingology> Available commands: action commands idea info link nick
[16:32] <ratliff> The meeting agenda can be found at:
[16:32] <ratliff> [LINK] https://wiki.ubuntu.com/SecurityTeam/Meeting
[16:32] <ratliff> [TOPIC] Announcements
[16:33] <mdeslaur> \o
[16:33] <ratliff> 18.04 gets released this week!
[16:33] <leosilva> oww, nice!
[16:33] <ratliff> [TOPIC] Weekly stand-up report
[16:33] <ratliff> jdstrand: you are up!
[16:35] <ratliff> we'll circle back around to jdstrand later, mdeslaur do you want to go ahead?
[16:35] <mdeslaur> sure!
[16:35] <mdeslaur> I'm in the happy place this week
[16:35] <mdeslaur> I'm going to publish some mysql updates soon once I'm done with testing
[16:35] <mdeslaur> I also have an embargoed issue
[16:36] <mdeslaur> and I'll go down the list after that
[16:36] <mdeslaur> that's it from me, sbeattie?
[16:36] <sbeattie> I'm on community this week
[16:36] <sbeattie> I need to check over the release notes and security features wiki pages for 18.04 things.
[16:37] <sbeattie> I have the usual kernel cve triage things to do
[16:37] <sbeattie> Still working on the precise gcc retpoline backport :/
[16:37]  * jdstrand is here
[16:38] <sbeattie> I'm also helping jjohansen track down why the apparmor parser userspace tests are failing in some environments.
[16:38] <sbeattie> and have some misc review work to do there.
[16:38] <sbeattie> Tht's probably the major highlights for my week.
[16:39] <sbeattie> jdstrand: you want to go next, and then hand of to jjohansen?
[16:39] <jdstrand> sure
[16:39] <jdstrand> This week I plan to work on:
[16:39] <jdstrand> - focusing on snap usns
[16:39] <jdstrand> - critical priority snapd PR reviews (none atm)
[16:39] <jdstrand> - sprint prep
[16:39] <jdstrand> - will investigate resquashfs wrt electron-builder as have time
[16:39] <jdstrand> that's it from me. jjohansen, you're up
[16:39] <jjohansen> I have several new 2.13 bugs to start chasing down, and now an issue with expr-simplify as well
[16:39] <jjohansen> Mount changes from David Howells to review
[16:39] <jjohansen> do some revisions for policy hashing and policy versioning patching so I can get those up as wip: merge requests
[16:39] <jjohansen> proper upstreamable fix for 1750594 to replace the single case fix being used as a short term work around
[16:39] <jjohansen> finish up further rlimit fixes for bugs discovered while working on 1679704
[16:39] <jjohansen> continue work on my LSM stacking review for Casey
[16:39] <jjohansen> work on prompting prototype
[16:40] <jjohansen> thats it for me sarnold you are up
[16:40] <sarnold> I'm on CVE duty this week
[16:40] <sarnold> I'll probably hold off on starting that to try to finish up xe-guest-utilities .. the bits I haven't seen yet are all in go, so I'm hoping they're cleaner than the shell stuff I've seen so far..
[16:41] <sarnold> I'll keep on rolling down the MIR list and reading apparmor patches as needed
[16:41] <sarnold> that's it for me, chrisccoulson?
[16:41] <chrisccoulson> I'm expecting chromium updates this week
[16:42] <chrisccoulson> I've got work arounds for the 2 rust issues I'm looking at, although one of those is just "fingers in ears, there are no test failures, lalalala"
[16:43] <chrisccoulson> I don't know whether to spend any more time this week on that, it feels a bit pointless
[16:43] <chrisccoulson> I've still got to work on backports to all the other releases, so there could be new issues there anyway
[16:43] <chrisccoulson> I need to try to find time for the python3.5 backport too
[16:44] <chrisccoulson> And I also need to get the thunderbird-next packaging in shape too, for the next major release (which is soon). We ship a thunderbird extension by default, which has historically been low maintenance. But the context behind https://mail.mozilla.org/pipermail/tb-planning/2018-April/005977.html means it will stop being low maintenance now :(
[16:45] <chrisccoulson> Given that's my extension, and the low probability of finding anyone else to hand it off to, 3 guesses who will end up with that ;)
[16:45] <chrisccoulson> Another fun week. I think that's me done
[16:46] <ratliff> I'm on bug triage this week.
[16:46] <ratliff> I will be at the product roadmap sprint next week, so the weekly meeting for next week has been cancelled and I have some more sprint prep work to do.
[16:46] <ratliff> I am working an embargoed issue and have internal work to do.
[16:47] <ratliff> leosilva: you are up
[16:47] <leosilva> I'm in the happy place this week :)
[16:47] <leosilva> I have a ghostscript update to work. I want to revisit ruby cves/triage too and I'll keep the hunting
[16:47] <leosilva> that is me done.
[16:47] <leosilva> ratliff: it's back to you
[16:48] <ratliff> thanks!
[16:48] <ratliff> [TOPIC] Highlighted packages
[16:48] <ratliff> The Ubuntu Security team suggests that contributors look into merging Debian security updates in community-supported packages. If you would like to help Ubuntu but are not sure where to start, this is a great way to do so.
[16:48] <ratliff> See http://people.canonical.com/~ubuntu-security/d2u/ for available merges and https://wiki.ubuntu.com/SecurityTeam/UpdateProcedures for details on preparing Ubuntu security updates. If you have any questions, feel free to ask in #ubuntu-hardened. To find out other ways of helping out, please see https://wiki.ubuntu.com/SecurityTeam/GettingInvolved.
[16:48] <ratliff> [TOPIC] Miscellaneous and Questions
[16:48] <ratliff> Does anyone have any other questions or items to discuss?
[16:53] <ratliff> jdstrand, mdeslaur, sbeattie, jjohansen, sarnold, chrisccoulson, leosilva: Thanks!
[16:53] <sarnold> thanks ratliff!
[16:53] <ratliff> #endmeeting
[16:53] <meetingology> Meeting ended Mon Apr 23 16:53:09 2018 UTC.
[16:53] <meetingology> Minutes:        http://ubottu.com/meetingology/logs/ubuntu-meeting/2018/ubuntu-meeting.2018-04-23-16.32.moin.txt
[16:53] <jjohansen> thanks ratliff
[16:53] <leosilva> tks ratliff !
[16:53] <mdeslaur> thanks ratliff!
[16:54] <sbeattie> ratliff: thanks!