--- title: 'Security Team Weekly Summary: August 24, 2017' description: 'The Security Team weekly reports are intended to be very short summaries of the Security Team’s weekly activities. If you would like to reach the Security Team, you can find us at the #ubuntu-hardened channel on FreeNode. Alternatively, you can mail the Ubuntu Hardened mailing list at: ubuntu-hardened@lists.ubuntu.com During the last week […]' url: https://canonical.com/blog/security-team-weekly-summary-august-24-2017 --- 1. [Blog](https://canonical.com/blog) 2. Article --- [Canonical](https://canonical.com/blog/author/canonical "More about Canonical") 24 August 2017 # Security Team Weekly Summary: August 24, 2017 --- Share the article The [Security Team](https://wiki.ubuntu.com/SecurityTeam) weekly reports are intended to be very short summaries of the Security Team’s weekly activities. If you would like to reach the Security Team, you can find us at the #ubuntu-hardened channel on [FreeNode](https://wiki.ubuntu.com/FreeNode). Alternatively, you can mail the Ubuntu Hardened mailing list at: [ubuntu-hardened@lists.ubuntu.com](mailto:ubuntu-hardened@lists.ubuntu.com) During the last week, the Ubuntu Security team: * Triaged 195 public security vulnerability reports, retaining the 42 that applied to Ubuntu. * Published 13 Ubuntu Security Notices which fixed 54 security issues (CVEs) across 16 supported packages. ### Ubuntu Security Notices * [[USN-3389-1] LibGD vulnerability](https://www.ubuntu.com/usn/usn-3389-1) * [[USN-3389-2] GD vulnerability](https://www.ubuntu.com/usn/usn-3389-2) * [[USN-3390-1] PostgreSQL vulnerabilities](https://www.ubuntu.com/usn/usn-3390-1) * [[USN-3391-1] Firefox vulnerabilities](https://www.ubuntu.com/usn/usn-3391-1) * [[USN-3392-1] Linux kernel regression](https://www.ubuntu.com/usn/usn-3392-1) * [[USN-3392-2] Linux kernel (Xenial HWE) regression](https://www.ubuntu.com/usn/usn-3392-2) * [[USN-3391-2] Ubufox update](https://www.ubuntu.com/usn/usn-3391-2) * [[USN-3393-1] ClamAV vulnerabilities](https://www.ubuntu.com/usn/usn-3393-1) * [[USN-3394-1] libmspack vulnerabilities](https://www.ubuntu.com/usn/usn-3394-1) * [[USN-3395-1] c-ares vulnerability](https://www.ubuntu.com/usn/usn-3395-1) * [[USN-3393-2] ClamAV vulnerabilities](https://www.ubuntu.com/usn/usn-3393-2) * [[USN-3391-3] Firefox regression](https://www.ubuntu.com/usn/usn-3391-3) * [[USN-3396-1] OpenJDK 7 vulnerabilities](https://www.ubuntu.com/usn/usn-3396-1) ### Bug Triage * Backlog:  ### Mainline Inclusion Requests * pcp (LP: #[1700827](https://bugs.launchpad.net/bugs/1700827 "Bug")) completed * websockify (LP: #[1108935](https://bugs.launchpad.net/bugs/1108935 "Bug")) underway * MIR backlog:  ### Development * [snapd on Debian discussion](https://forum.snapcraft.io/t/snapd-vs-upstream-kernel-vs-apparmor/1704/2) * add wayland interface spread test * verify wayland interface with sway and weston * reviews for snapd: solus, broadcom-asic-control interface, udev tagging, bluez implicit classic) * continue/propose desktop, accessibility and desktop-input interfaces * lots of discussion with snappy team regarding auto-connectable content snaps * fix apparmor ‘ux’ warning with lxd snap * miscellaneous policy updates (some in response to chromium snap call for testing) * review tools updates for new interfaces * [AppArmor pull request for next (4.14)](https://lkml.org/lkml/2017/8/18/525) ### What the Security Team is Reading This Week * [Dwarf Fortress Starting During Upgrade](https://askubuntu.com/questions/938606/dwarf-fortress-starting-during-apt-get-upgrade) * [Random Thoughts](https://www.openssl.org/blog/blog/2017/08/12/random/) by Rich Salz ### Weekly Meeting * Log:  * Info:  ### More Info * [Ubuntu CVE Tracker](http://people.canonical.com/~ubuntu-security/cve/) * [Ubuntu security notices](https://www.ubuntu.com/usn/) * [Follow Ubuntu Security on Twitter](https://www.twitter.com/ubuntu_sec) * [How to help improve Ubuntu security](https://wiki.ubuntu.com/SecurityTeam/GettingInvolved) [Get in touch Interested in running Ubuntu in your organization?](https://ubuntu.com/about/contact-us/form) ## Sign up for our newsletter Get the latest Canonical news and updates in your inbox. Work email: \*I agree to receive information about Canonical's products and services. In submitting this form, I confirm that I have read and agree to [Canonical's Privacy Notice](https://canonical.com/legal/data-privacy/contact) and [Privacy Policy](https://canonical.com/legal/data-privacy). Sign up ## Share on --- ## Related posts [### What designers should know about semiotics](https://canonical.com/blog/what-designers-should-know-about-semiotics) What happens when you look at an apple? When you see it, you perceive the apple and assign meaning to it based on your language, experience, and personal preferences – such as... [Sophie Carroll](https://canonical.com/blog/author/sophiecarroll) 15 October 2026 [### Canonical releases Ubuntu 26.10 Stonking Stingray](https://canonical.com/blog/canonical-releases-ubuntu-26-10-stonking-stingray) The latest interim release of Ubuntu previews privacy conscious speech-to-text, enables post-quantum package signing, completes the rollout of Rust coreutils, and improves... [Canonical](https://canonical.com/blog/author/canonical) 15 October 2026 [### Securing open source software dependencies in the public cloud](https://canonical.com/blog/securing-open-source-software-dependencies-in-the-public-cloud) Building stable and secure software requires understanding build systems and having a plan for vulnerabilities in your software dependencies. [Aaron Whitehouse](https://canonical.com/blog/author/aaron-whitehouse) 5 October 2026 [### AI infrastructure for telcos](https://canonical.com/blog/ai-infrastructure-for-telcos) Why moving from pilots to production changes the platform Artificial intelligence has moved beyond the demonstration phase. Telco operators are already exploring it for fault... [Benjamin Ryzman](https://canonical.com/blog/author/benjaminryzman) 2 October 2026