#fedora-meeting-1: fedora_coreos_meeting

Meeting summary

1. roll call (dustymabe, 16:29:43)
   
2. Action items from last meeting (dustymabe, 16:33:12)
   1. bgilbert addressed VMWare concerns in https://github.com/coreos/fedora-coreos-tracker/issues/567#issuecomment-1294655290 (dustymabe, 16:34:05)
   
   
3. Update OpenSSL for CVE-2022-3786 and CVE-2022-3602 (dustymabe, 16:35:10)
   1. https://github.com/coreos/fedora-coreos-tracker/issues/1329 (dustymabe, 16:35:16)
   2. the `testing` and `next` streams have a fix for the OpenSSL CVEs - `stable` will roll out later today (dustymabe, 16:35:53)
   
   
4. Non-default OSTree deployments accessible without GRUB password (CVE-2022-3675) (dustymabe, 16:37:22)
   1. https://github.com/coreos/fedora-coreos-tracker/issues/1333 (dustymabe, 16:37:28)
   2. please see the announcement for more context on the nature of the security issue and the release fix schedule: https://discussion.fedoraproject.org/t/non-default-ostree-deployments-accessible-without-grub-password-cve-2022-3675/43715 (dustymabe, 16:48:24)
   
   
5. open floor (dustymabe, 16:51:47)
   1. https://github.com/openshift/os/issues/1036#issuecomment-1299168792 (jlebon, 16:54:21)

Action items

1. (none)

People present (lines said)

1. dustymabe (42)
2. bgilbert (21)
3. zodbot (20)
4. jdoss (14)
5. jlebon (11)
6. fifofonix (3)
7. walters (3)
8. c4rt0 (2)
9. jmarrero (2)
10. jbrooks (1)
11. gursewak (1)
12. lucab (1)
13. copperi[m] (1)
14. spresti[m] (1)