Your submission was sent successfully! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates from Canonical and upcoming events where you can meet our team.Close

Thank you for contacting our team. We will be in touch shortly.Close

  1. Blog
  2. Article

Canonical
on 30 August 2017

Security Team Weekly Summary: August 31, 2017


The Security Team weekly reports are intended to be very short summaries of the Security Team’s weekly activities.

If you would like to reach the Security Team, you can find us at the #ubuntu-hardened channel on FreeNode. Alternatively, you can mail the Ubuntu Hardened mailing list at: ubuntu-hardened@lists.ubuntu.com

During the last week, the Ubuntu Security team:

  • Triaged 287 public security vulnerability reports, retaining the 61 that applied to Ubuntu.
  • Published 6 Ubuntu Security Notices which fixed 13 security issues (CVEs) across 6 supported packages.

Ubuntu Security Notices

Bug Triage

Mainline Inclusion Requests

Updates to Community Supported Packages

  • Simon Quigley (tsimonq2) provided a debdiff for trusty for kdepimlibs (LP: #1630700)

  • Simon Quigley (tsimonq2) provided a debdiff for xenial for kcoreaddons (LP: #1630700)

  • Simon Quigley (tsimonq2) provided debdiffs for trusty-zesty for varnish (LP: #1708354)

Development

  • Updated review tools to calculate uncompressed squashfs size and error out if too large. Update to unpack to SNAP_USER_COMMON and cleanup stale review directories.
  • review-tools fix for LP: #1712476

  • review-tools: implement new ‘reload-command’ yaml and new execstack checks
  • Submitted apparmor pull for artful to the Kernel Team.
  • Submitted seccomp logging patch set for both artful 4.12 and artful 4.13 kernels.
  • Submitted PR 3804 for user and group name lookups in snap-seccomp in support of snap privilege dropping.
  • Submitted PR 3805 to stop hardcoding uids and gids (for ‘root’ and ‘shadow’).
  • Submitted libseccomp PR for improved logging changes (https://github.com/seccomp/libseccomp/pull/92).

  • fixed a libseccomp test runner bug that was causing a class of tests to not run (https://github.com/seccomp/libseccomp/pull/91).

  • Work with design on ‘Snap interfaces GUI descriptions’
  • Perform various PR reviews in support of cross-distro and improved udev tagging
  • Meet with snapd team (Gustavo) on final designs for new desktop interfaces (PR 3719)

What the Security Team is Reading This Week

Weekly Meeting

More Info

Related posts


Carlos Bravo
27 March 2024

Generative AI with Ubuntu on AWS. Part II: Text generation

AI Article

In our previous post, we discussed how to generate Images using Stable Diffusion on AWS. In this post, we will guide you through running LLMs for text generation in your own environment with a GPU-based instance in simple steps, empowering you to create your own solutions. Text generation, a trending focus in generative AI, facilitates ...


Chris Schnabel
27 March 2024

Profile workloads on x86-64-v3 to enable future performance gains

Ubuntu Article

Ubuntu 23.10 experimental image with x86-64-v3 instruction set now available on Azure Canonical is enabling enterprises to evaluate the performance of their most critical workloads in an experimental Ubuntu image on Azure compiled with x86-64-v3, which is a microarchitecture level that has the potential for performance gains. Developers c ...


Hugo Huang
27 March 2024

Canonical at Google Next – What you need to know

Cloud and server Article

Learn how Canonical and Google Cloud are collaborating to secure and scale solutions for cloud computing at Google Next 2024. ...