Security Team meeting minutes for 2014-11-06

[Eric Christensen]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

======================================================================================================
#fedora-meeting: Security Team Meeting - Agenda: https://fedoraproject.org/wiki/Security_Team_meetings
======================================================================================================

Meeting started by Sparks at 14:00:40 UTC. The full logs are available
at
http://meetbot.fedoraproject.org/fedora-meeting/2014-11-06/fedora_security_t...
.

Meeting summary
- ---------------
* Roll Call  (Sparks, 14:00:45)
  * Participants are reminded to make liberal use of #info #link #help
    in order to make the minutes "more better"  (Sparks, 14:07:33)

* Follow up on last week's action items  (Sparks, 14:07:41)
  * ACTION: Sparks to follow up with fenrus02 (via the security list) on
    checksec and checksec2.  (Sparks, 14:08:33)

* Outstanding BZ Tickets  (Sparks, 14:08:39)
  * Wednesday's numbers: Critical 1, Important 46, Moderate 346, Low
    122, Total 507, Trend +8  (Sparks, 14:08:45)
  * Current tickets owned: 212 (~36%)  (Sparks, 14:08:49)
  * Tickets closed: 148  (Sparks, 14:08:54)
  * EPEL will start retiring packages that are orphaned for more than
    six weeks (including dependencies).  (Sparks, 14:09:48)
  * LINK: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8517
    (Sparks, 14:12:35)
  * LINK: https://fedorahosted.org/rel-eng/ticket/5886   (Sparks,
    14:15:51)
  * LINK: http://xenbits.xen.org/xsa/   (mhayden, 14:20:01)

* Open floor discussion/questions/comments  (Sparks, 14:25:14)

Meeting ended at 14:58:47 UTC.

Action Items
- ------------
* Sparks to follow up with fenrus02 (via the security list) on checksec
  and checksec2.

Action Items, by person
- -----------------------
* Sparks
  * Sparks to follow up with fenrus02 (via the security list) on
    checksec and checksec2.
* **UNASSIGNED**
  * (none)

People Present (lines said)
- ---------------------------
* Sparks (53)
* pjp (44)
* bvincent (27)
* mhayden (9)
* zodbot (5)
* D-Caf (2)
* sgallagh (1)
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1
>
> iQGcBAEBCgAGBQJUW4z3AAoJEB/kgVGp2CYvm18L/3nTgwxdAW4aq/JKOVAFcH7a
> SAoAf9q+hOLq+8seDm3lD7bxcTZ6RhMY/kjbDYa2mm6CB9zQp81P2E5fqhBPis5K
> EVuBUHKnaSF8TqEjeBkfphmqVOB37NZ7BDIIF8EysCsjjDMsbbuh1oxhHwO7OWZN
> kcuosDd25GBuTarpqb+ocQCdxbwoafzwV6yDbgI0ZFkLrpXkkcvWup7S7lB0DS95
> abs6mtYKnBF6nDuXjZXc7H6T4/JiGR5vGQV1Tr2Io5WUvyz9aTV36nQrpZ15DT6/
> 22EW/4j4Oa2MD7QflHtUMUe1hA3CYys/FUq8i6W4rqKz1785Q9xr4K00k1HE8BST
> NawjAsYfBZSh9BgeRGBqhYFhA3jC2BI9Dk55Kq+1foiYs5INtfrmaOOthT1dCPko
> F5dsQbBJnouXVtLTxxBPcmha8Wf6PfchdJKrGvh+5CKBK1FD5nEWjrzWhNpzTfSE
> aKgsvCU9oJ2f7EJnFgGMt6M5f7Oud3pYCCysXzYrWA==
> =Dw2M
> -----END PGP SIGNATURE-----