Security Team Weekly Summary: August 31, 2017
Canonical
on 30 August 2017
The Security Team weekly reports are intended to be very short summaries of the Security Team’s weekly activities.
If you would like to reach the Security Team, you can find us at the #ubuntu-hardened channel on FreeNode. Alternatively, you can mail the Ubuntu Hardened mailing list at: [email protected]
During the last week, the Ubuntu Security team:
- Triaged 287 public security vulnerability reports, retaining the 61 that applied to Ubuntu.
- Published 6 Ubuntu Security Notices which fixed 13 security issues (CVEs) across 6 supported packages.
Ubuntu Security Notices
Bug Triage
Mainline Inclusion Requests
-
websockify (LP: #1108935) underway
-
MIR backlog: https://bugs.launchpad.net/~ubuntu-security/+assignedbugs?field.searchtext=%5BMIR%5D
Updates to Community Supported Packages
-
Simon Quigley (tsimonq2) provided a debdiff for trusty for kdepimlibs (LP: #1630700)
-
Simon Quigley (tsimonq2) provided a debdiff for xenial for kcoreaddons (LP: #1630700)
-
Simon Quigley (tsimonq2) provided debdiffs for trusty-zesty for varnish (LP: #1708354)
Development
- Updated review tools to calculate uncompressed squashfs size and error out if too large. Update to unpack to SNAP_USER_COMMON and cleanup stale review directories.
-
review-tools fix for LP: #1712476
- review-tools: implement new ‘reload-command’ yaml and new execstack checks
- Submitted apparmor pull for artful to the Kernel Team.
- Submitted seccomp logging patch set for both artful 4.12 and artful 4.13 kernels.
- Submitted PR 3804 for user and group name lookups in snap-seccomp in support of snap privilege dropping.
- Submitted PR 3805 to stop hardcoding uids and gids (for ‘root’ and ‘shadow’).
-
Submitted libseccomp PR for improved logging changes (https://github.com/seccomp/libseccomp/pull/92).
-
fixed a libseccomp test runner bug that was causing a class of tests to not run (https://github.com/seccomp/libseccomp/pull/91).
- Work with design on ‘Snap interfaces GUI descriptions’
- Perform various PR reviews in support of cross-distro and improved udev tagging
- Meet with snapd team (Gustavo) on final designs for new desktop interfaces (PR 3719)
What the Security Team is Reading This Week
Weekly Meeting
- Weekly meeting was cancelled this week (eclipse watching)
More Info
Ubuntu cloud
Ubuntu offers all the training, software infrastructure, tools, services and support you need for your public and private clouds.
Newsletter signup
Related posts
How we used Flask and 12-factor charms to simplify Canonical.com development
Learn how Canonical is using Python Flask and the 12-factor charm framework to simplify the development of Canonical.com and Ubuntu.com
Web Engineering: Hack Week 2024
At Canonical, the work of our teams is strongly embedded in the open source principles and philosophy. We believe open source software will become the most...
What to know when procuring Linux laptops
Technology procurement directly influences business success. The equipment you procure will determine how your teams deliver projects and contribute to your...