security-team October 2014

security-team@lists.stg.fedoraproject.org

2 participants
14 discussions

Meeting minutes from 2014-10-30
by Eric Christensen 30 Oct '14

30 Oct '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ====================================================================================================== #fedora-meeting: Security Team Meeting - Agenda: https://fedoraproject.org/wiki/Security_Team_meetings ====================================================================================================== Meeting started by Sparks at 13:00:42 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting/2014-10-30/fedora_security_… . Meeting summary - --------------- * Roll call (Sparks, 13:00:59) * Participants are reminded to make liberal use of #info #link #help in order to make the minutes "more better" (Sparks, 13:06:26) * Meeting time (Sparks, 13:06:32) * Currently we meet at 13:00UTC. After daylight savings expires this weekend (US) we'll change to 14:00UTC. (Sparks, 13:06:42) * Outstanding BZ Tickets (Sparks, 13:08:51) * Wednesday's numbers: Critical 1, Important 44, Moderate 337, Low 125, Total 507, Trend -8 (Sparks, 13:08:58) * Current tickets owned: 182 (~36%) (Sparks, 13:09:06) * Tickets closed: 144 (Sparks, 13:09:11) * LINK: https://fedoraproject.org/wiki/Security_Team#Contact (Sparks, 13:12:24) * Open floor discussion/questions/comments (Sparks, 13:13:32) * LINK: https://github.com/kholia/checksec (Sparks, 13:24:06) * ACTION: Sparks to follow up with fenrus02 (via the security list) on checksec and checksec2. (Sparks, 13:38:55) Meeting ended at 13:48:22 UTC. Action Items - ------------ * Sparks to follow up with fenrus02 (via the security list) on checksec and checksec2. Action Items, by person - ----------------------- * fenrus02 * Sparks to follow up with fenrus02 (via the security list) on checksec and checksec2. * Sparks * Sparks to follow up with fenrus02 (via the security list) on checksec and checksec2. * **UNASSIGNED** * (none) People Present (lines said) - --------------------------- * Sparks (45) * pjp (24) * mhayden (18) * fenrus02 (12) * bvincent (6) * jrusnack (4) * zodbot (3) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQGcBAEBCgAGBQJUUkZbAAoJEB/kgVGp2CYvGRAL/1XBQn0zmmy1h2C8BluojOkr 6auT8BXOVq72GQObJRy5OyQ5X5XWOAO0rKxLckOg1kiPMWUGeTBW3lWe9PLG+rZb rG1cgyLeDa0lo7ZOO2NH6QpDPnvOCkyl5auuynJ1/J0MeL/GMkY9m5ByEBYky9FD S2/tQ7J/dJyANjrOAV1d3vP0SDADyCz4CIy3vIdQ0HlKsRO8SmfS6BUFNDHBoyvz IhJxupYDi7aEH0H4BMjLCaYdIu8WA2I/DWHO+k9bIfMIrJzPfsDv5HQATjiFFFYs 9HANpg8cbiYp69TMKISJvYG7IH3lK2sPlUAK2K17SbVlAHzqkFe3XAU4ah81OFdn qcT2gxlSBijsqq8LHKm5xu7tmwqRqNNTjXmpqu5SJXTUWO9ZOIXbxKnDsFT4ss8d cUnF/DJehjZSXqZ2PvgIfCNTDGgxVXahegePgZsZbGdMANz9TUG1w03V4+TXLN55 cqztJxhGHgJRZLONm4xpGx23nB7Tcx4fmtyHV5ZNyw== =tAsN -----END PGP SIGNATURE-----

1 0

[Fedocal] Reminder meeting : Weekly Security Team meeting
by Eric Christensen 29 Oct '14

29 Oct '14

Dear all, You are kindly invited to the meeting: Weekly Security Team meeting on 2014-10-30 from 13:00:00 to 14:00:00 UTC At fedora-meeting(a)irc.freenode.net The meeting will be about: Weekly meeting of the Security Team. More information available at: [https://fedoraproject.org/wiki/Security_Team_meetings](https://fedoraprojec… Source: https://apps.fedoraproject.org/calendar//meeting/734/

1 0

Security Team Meeting minutes from 2014-10-23
by Eric Christensen 24 Oct '14

24 Oct '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ====================================================================================================== #fedora-meeting: Security Team Meeting - Agenda: https://fedoraproject.org/wiki/Security_Team_meetings ====================================================================================================== Meeting started by Sparks at 13:02:24 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting/2014-10-23/fedora_security_… . Meeting summary - --------------- * Roll Call (Sparks, 13:02:40) * Outstanding BZ Tickets (Sparks, 13:12:28) * Thursday's numbers: Critical 1, Important 50, Moderate 342, Low 122, Total 515, Trend -17 (Sparks, 13:12:45) * Tickets closed: 128 (Sparks, 13:13:00) * Open floor discussion/questions/comments (Sparks, 13:17:17) * ACTION: jsmith to figure out how to send an email to {fedora,epel}-devel regarding unhandled security bugs. (Sparks, 13:38:51) Meeting ended at 13:53:44 UTC. Action Items - ------------ * jsmith to figure out how to send an email to {fedora,epel}-devel regarding unhandled security bugs. Action Items, by person - ----------------------- * jsmith * jsmith to figure out how to send an email to {fedora,epel}-devel regarding unhandled security bugs. * **UNASSIGNED** * (none) People Present (lines said) - --------------------------- * Sparks (31) * jtaylor90 (17) * jsmith (14) * zodbot (6) * bvincent (6) * d-caf (5) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQGcBAEBCgAGBQJUSkgpAAoJEB/kgVGp2CYvHeoL/1ObYA3Z4lmiLkGrY6CAYO8K NddkghYns7saGbdDHonMNLkljTb64TYZx+7Msosv5/wU+r3Wh2HeMf6J14L8/X20 +fa+4sU+L7gigWCzlRtMqjDZYdDomJYTCCApjzh40uW0LHSONBL3QSJOX2XpZ8Bd W2Ysm4H3JATOgp0ZpVq1K4NXmcFpeZf/6VEDBGZwlamNQNRMWh1FDVnyjjUTHPG+ IMKyXsbe4DEHG4YSnBbdn1yEYOvu7/EHZ4FQpFBWmtybnaMu69WT1ctRdXe6i9hh VxggnMkpwbapide9YEeZYVKKGXqhGfleQtw7yKYZBUxS84omrzbSdKwx0AMVxRTo YZKbSMRbnmBVySeKxELQv+FmbvYGOQorApoJCJ8C9e7xF/tTT9C8bh+7EOkT7/9U RbbXaEDkoAn7oj4NXl3WPFCxk+7ojt0uY7/ceN/InfwscMx7ivuFwSZrQJC1echB LWGeXFqjIZw9AoT5NCWl1BkxOtj5C1rNhBQUgxuIMw== =qGJy -----END PGP SIGNATURE-----

1 0

[Fedocal] Reminder meeting : Weekly Security Team meeting
by Eric Christensen 22 Oct '14

22 Oct '14

Dear all, You are kindly invited to the meeting: Weekly Security Team meeting on 2014-10-23 from 09:00:00 to 10:00:00 US/Eastern At fedora-meeting(a)irc.freenode.net The meeting will be about: Weekly meeting of the Security Team. More information available at: [https://fedoraproject.org/wiki/Security_Team_meetings](https://fedoraprojec… Source: https://apps.fedoraproject.org/calendar//meeting/1661/

1 0

FAD Pune - 1 Nov
by P J P 18 Oct '14

18 Oct '14

Please see -> https://pjps.wordpress.com/2014/10/18/fedora-activity-day-1-nov-2014-theme-… --- Regards -Prasad http://feedmug.com

1 0

Security Team Meeting minutes for 2014-10-16
by Eric Christensen 16 Oct '14

16 Oct '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ====================================================================================================== #fedora-meeting: Security Team Meeting - Agenda: https://fedoraproject.org/wiki/Security_Team_meetings ====================================================================================================== Meeting started by Sparks_too at 13:00:39 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting/2014-10-16/fedora_security_… . Meeting summary - --------------- * Roll Call (Sparks_too, 13:00:45) * Participants are reminded to make liberal use of #info #link #help in order to make the minutes "more better" (Sparks_too, 13:09:46) * SSL 3.0 Vulnerability (Sparks_too, 13:10:00) * LINK: https://access.redhat.com/articles/1232123 (Sparks_too, 13:15:16) * LINK: http://fedoramagazine.org/what-you-need-to-know-about-the-sslv3-poodle-flaw… (Sparks_too, 13:21:58) * LINK: http://fedoramagazine.org/more-cve-2014-3566-information-on-red-hats-securi… (Sparks_too, 13:22:09) * Outstanding BZ Tickets (Sparks_too, 13:24:21) * Wednesday's numbers: Critical 4, Important 51, Moderate 352, Low 125, Total 532, Trend -1 (Sparks_too, 13:24:27) * Current tickets owned: 171 (~32%) (Sparks_too, 13:24:38) * Tickets closed: 115 (Sparks_too, 13:24:47) * LINK: https://bugzilla.redhat.com/show_bug.cgi?id=1145880 (d-caf, 13:26:08) * Open floor discussion/questions/comments (Sparks_too, 13:26:59) Meeting ended at 13:28:27 UTC. Action Items - ------------ Action Items, by person - ----------------------- * **UNASSIGNED** * (none) People Present (lines said) - --------------------------- * Sparks_too (37) * bvincent (15) * d-caf (12) * zodbot (5) * thoger (2) * jtaylor90 (2) * jsmith (1) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQGcBAEBCgAGBQJUP+HEAAoJEB/kgVGp2CYvtXIL/1MjVFzRGZmEvjNu18nbKGI4 AnlWwImKmQ598VhnZ/xoU6RFQRxpD744ZGcnXaIEBECLFs4lNtvByK161X42R4fO L7qPVw0qAK1IYsmWJHMGQsnY9IKDcaR2gxbaQbu2HS2sOvAjAb8wa/df19H883KH XYiIuBw9YGzrapI0nex87aObpmDIwJpeBj44oU70IdjbqyanAB86QpRtGt5X7vy1 WIaDDwVxSJOlVNGQcpUCaZxgLO09y+TeDi5PcLFq1D7Orq0pKM/ftV0vnZ+CxUfM fPxhks0smXEsrJlMsRxzOIXn7u8026rSlbpOFgFDpCwa5mMmEtwCwW6b2+q7fTwl vw2mmuuEagqoaGDbaMCF7ouwBYuNtlOCxHqsopMqDETVb3vfl0EhBfKZIjNCWd0J f+vGlK7d0jvipo10d2dQnwHPoEZ+nCxrF+Ri7YSKJVO3Ouq0DcuuN41xFbe0Zyk4 4ebZC/UAiHQDldlvejgM0LGgn8Xzk1EcgTmiNW6Y7g== =eAdU -----END PGP SIGNATURE-----

1 0

[Fedocal] Reminder meeting : Weekly Security Team meeting
by Eric Christensen 16 Oct '14

16 Oct '14

Dear all, You are kindly invited to the meeting: Weekly Security Team meeting on 2014-10-16 from 09:00:00 to 10:00:00 US/Eastern At fedora-meeting(a)irc.freenode.net The meeting will be about: Weekly meeting of the Security Team. More information available at: [https://fedoraproject.org/wiki/Security_Team_meetings](https://fedoraprojec… Source: https://apps.fedoraproject.org/calendar//meeting/734/

2 1

Security Team meeting minutes 2014-10-08
by Eric Christensen 09 Oct '14

09 Oct '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ======================================================================================================== #fedora-meeting-1: Security Team Meeting - Agenda: https://fedoraproject.org/wiki/Security_Team_meetings ======================================================================================================== Meeting started by Sparks_too at 19:00:18 UTC. The full logs are available at http://meetbot.fedoraproject.org/fedora-meeting-1/2014-10-08/fedora_securit… . Meeting summary - --------------- * Roll Call (Sparks_too, 19:00:26) * Participants are reminded to make liberal use of #info #link #help in order to make the minutes "more better" (Sparks_too, 19:03:46) * Follow up on last week's action items (10 minutes) (Sparks_too, 19:03:53) * New meeting time (Sparks_too, 19:04:45) * 9:00AM EDT/13:00 UTC Th seems to be the best time to meet. (Sparks_too, 19:04:51) * Eight people completed the survey. (Sparks_too, 19:05:15) * LINK: http://whenisgood.net/yk7nyfb/results/cnz58ai (Sparks_too, 19:06:53) * AGREED: Meeting time will be changed to 13:00 UTC Thursdays to be held in #fedora-meeting (Sparks_too, 19:13:24) * Outstanding BZ Tickets (Sparks_too, 19:13:32) * Wednesday's numbers: Critical 2, Important 50, Moderate 355, Low 126, Total 533, Trend -3 (Sparks_too, 19:13:39) * Current tickets owned: 173 (~32%) (Sparks_too, 19:13:44) * Tickets closed: 107 (Sparks_too, 19:13:50) * Open floor discussion/questions/comments (Sparks_too, 19:22:08) Meeting ended at 19:28:45 UTC. People Present (lines said) - --------------------------- * Sparks_too (41) * d-caf (10) * bvincent (10) * zodbot (5) * jsmith (1) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQGcBAEBCgAGBQJUNZb0AAoJEB/kgVGp2CYvBacMAJL5NIaf27eaSxjOXga4g3tD SLFC0AznMdC4wuOsfQ7wcuwGFNLdMKcwksrbWlDvIoawPwvynVXdjnI0soggOOEe cxd7C/aJF1qiKaCqqB474XPWPqsbeyBwxVWkiyKXD14LNet16N5BnVPhmO1X5oOe MjC+xiReWNzKJqEWM2NNwBMNP5hwqRImzB4HTEtdkFIPfApVpsnD4pLydeKZHHAR fX34w46tDDMNVuOW2jp47q7N8xcuZWT6zewoFPo/ATZetJqfadaI92A06nkuB0td BqOdx/pSZ0kn+RVTzWx7eI20cCPg1VQXm3D2UwXT8gKD1NQQWobtoakw+ars3vC0 ymR4fnmWLUVlSYVTuQ+VxZffjFvXDp8WFHcUmNxkNINGjb2kGmT8No8hYiT+9YzD Kl2WLcZkVUuYFq+aC96NP8ZltubsGYY0uKi6UzsApkHzkokctw0svvm+kXH9On3n uoNC6a5FroxVONPU1mh92KXYX9O2VWIQC2MoTcQU6w== =hCA3 -----END PGP SIGNATURE-----

2 1

Weekly meeting time survey
by Eric Christensen 08 Oct '14

08 Oct '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 When this group first started we did a survey to see when would be the best time to get people together. Since then two things have happened: 1) We've seen an interest from APAC to have a more convenient time for them. Our current meeting time is after midnight for them. 2) We seen a drastic reduction in meeting attendance. I pretty much assumed that #2 was going to happen. Really, our meetings are times when we can all agree to get together to field questions and perhaps work on problems together. I never intend to conduct actual business during these meetings since not everyone can attend. Any time anything important WRT the team needs to be discussed for a binding decision it will be done here (like we're doing now). FWIW, I'm not against hosting a second meeting or changing our current meeting time if a better time exists. That said, I've reset the survey[0] to remove everyone's availability and added some additional times that I'm willing to be available. Please complete the survey (remember to select your timezone so you can see your local time) soon so we can see when a better time is to meet. I hope we can revisit this early next week and make a change. [0] http://whenisgood.net/yk7nyfb - -- Eric - -------------------------------------------------- Eric "Sparks" Christensen Fedora Project sparks(a)fedoraproject.org - sparks(a)redhat.com 097C 82C3 52DF C64A 50C2 E3A3 8076 ABDE 024B B3D1 - -------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQGcBAEBCgAGBQJULFl6AAoJEB/kgVGp2CYv+RYL/RFOgtKYWF6+ULGTwPuuFa5u Roy7Pxe6+XNp+J4TDP2R/rMahFU4duktc527TVJsmqVozz/Aye8I+Pw1fBPbcSv6 aJklawRXpjKdroPGnNwUB7CuRlXlovRGkosITQ46qbT6y1LDIe7kA8wWGUsbhp+Y PL3SCqtl0WMihxRtEjSgbLueFZTKm3d6Nigjjh5hxw4HAAyloSSKOf07+Z7X9TuO T7aMWXk1rFcRldbxqi8wzgigbISD2yf0mU9S2s1QciTmevlqE7cWuXCcl3jPwkez HUs40k94pAdh54lbj6CKZxn9ojJyBWm53EYD7qe3SSYqj9JeCPMzJXds5Xz6wrHe JUP/mSentmD0mblzmUw2INN0OXiF9WT+BALyj7/7br46pfChdI7Dyt113znVtNs9 fyhUJrVfaX4TO4cwizO2py8cAiebYoEeQvh3x/mMHH8UnTtjDC26iY4CAUsa1flY +mWjep5YmsmXOaudG8tGwmVOd4T2VC0U1vfU+2B48g== =c8q6 -----END PGP SIGNATURE-----

2 2

[Fedocal] Reminder meeting : Weekly Security Team meeting
by Eric Christensen 07 Oct '14

07 Oct '14

Dear all, You are kindly invited to the meeting: Weekly Security Team meeting on 2014-10-08 from 15:00:00 to 16:00:00 US/Eastern At fedora-meeting-1(a)irc.freenode.net The meeting will be about: Weekly meeting of the Security Team. More information available at: [https://fedoraproject.org/wiki/Security_Team_meetings](https://fedoraprojec… Source: https://apps.fedoraproject.org/calendar//meeting/734/

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

security-team October 2014