Skip to main content
  1. Blog
  2. Article

Canonical
on 30 August 2017

Security Team Weekly Summary: August 31, 2017

The Security Team weekly reports are intended to be very short summaries of the Security Team’s weekly activities.

If you would like to reach the Security Team, you can find us at the #ubuntu-hardened channel on FreeNode. Alternatively, you can mail the Ubuntu Hardened mailing list at: ubuntu-hardened@lists.ubuntu.com

During the last week, the Ubuntu Security team:

  • Triaged 287 public security vulnerability reports, retaining the 61 that applied to Ubuntu.
  • Published 6 Ubuntu Security Notices which fixed 13 security issues (CVEs) across 6 supported packages.

Ubuntu Security Notices

Bug Triage

Mainline Inclusion Requests

Updates to Community Supported Packages

  • Simon Quigley (tsimonq2) provided a debdiff for trusty for kdepimlibs (LP: #1630700)

  • Simon Quigley (tsimonq2) provided a debdiff for xenial for kcoreaddons (LP: #1630700)

  • Simon Quigley (tsimonq2) provided debdiffs for trusty-zesty for varnish (LP: #1708354)

Development

  • Updated review tools to calculate uncompressed squashfs size and error out if too large. Update to unpack to SNAP_USER_COMMON and cleanup stale review directories.

  • review-tools fix for LP: #1712476

  • review-tools: implement new ‘reload-command’ yaml and new execstack checks
  • Submitted apparmor pull for artful to the Kernel Team.
  • Submitted seccomp logging patch set for both artful 4.12 and artful 4.13 kernels.
  • Submitted PR 3804 for user and group name lookups in snap-seccomp in support of snap privilege dropping.
  • Submitted PR 3805 to stop hardcoding uids and gids (for ‘root’ and ‘shadow’).

  • Submitted libseccomp PR for improved logging changes (https://github.com/seccomp/libseccomp/pull/92).

  • fixed a libseccomp test runner bug that was causing a class of tests to not run (https://github.com/seccomp/libseccomp/pull/91).

  • Work with design on ‘Snap interfaces GUI descriptions’
  • Perform various PR reviews in support of cross-distro and improved udev tagging
  • Meet with snapd team (Gustavo) on final designs for new desktop interfaces (PR 3719)

What the Security Team is Reading This Week

Weekly Meeting

More Info

Related posts

robgibbon
20 April 2026

Hybrid search and reranking: a deeper look at RAG

AI Article

Many of us are familiar with the retrieval augmented generative AI (RAG) pattern for building agentic AI applications – like digital concierges, frontline support chatbots and agents that can help with basic self-service troubleshooting.  At a high level, the flow for RAG is fairly clear – the user’s prompt is augmented with some relevant ...

Canonical
20 April 2026

Canonical expands Ubuntu support to next-generation MediaTek Genio 520 and 720 platforms

edge computing Canonical News

Canonical is pleased to announce the early access launch of Ubuntu 24.04 LTS for MediaTek’s Genio IoT platforms. Building on the companies’ strategic partnership, this release introduces optimized Ubuntu images for the brand-new Genio 520 and 720, while continuing to provide robust support for the Genio 350, 510, 700, and 1200.  The colla ...

ijlal-loutfi
10 April 2026

What’s new in security for Ubuntu 26.04 LTS?

Security Article

Here’s a concise excerpt you can use:> Ubuntu 26.04 LTS significantly raises the security baseline by strengthening defaults across every layer of the system without requiring manual intervention. Key improvements include production-ready hardware-backed encryption, post-quantum–aware cryptographic defaults, modern TLS configurations, and ...