14:02:26 #startmeeting Security Team Meeting - Agenda: https://fedoraproject.org/wiki/Security_Team_meetings 14:02:26 Meeting started Thu Aug 13 14:02:26 2015 UTC. The chair is Sparks. Information about MeetBot at http://wiki.debian.org/MeetBot. 14:02:26 Useful Commands: #action #agreed #halp #info #idea #link #topic. 14:02:29 #meetingname Fedora Security Team 14:02:29 The meeting name has been set to 'fedora_security_team' 14:02:31 #topic Roll Call 14:02:33 * Sparks 14:02:40 * scorneli 14:02:43 * d-caf 14:03:28 14:06:19 Okay, lets get started 14:06:51 #info Participants are reminded to make liberal use of #info #link #help in order to make the minutes "more better" 14:06:56 #topic Follow up on last week's tasks 14:07:09 #action Sparks to update the FST_numbers script to show the %age of tickets owned for each category. 14:07:42 * Sparks is pondering a complete script rewrite to make this addition much less BZ process intensive 14:08:12 #topic Outstanding BZ Tickets 14:08:22 #info Thursday's numbers: Critical 0 (0), Important 46 (+1), Moderate 369 (-4), Low 152 (+4), Total 523, Trend +1 14:08:30 #info Current tickets owned: 91 (~17%) 14:08:34 #info Tickets closed: 360 (+5) 14:08:54 Anyone have anything to talk about ticket-wise? 14:08:58 had a lot of movement on my important tickets, lots in QA now 14:09:09 d-caf: nice 14:09:21 I'm still slacking on submitting my non-reponsive tickets though 14:09:30 ditto 14:09:31 keep meaning to and keep getting distracted.. 14:10:40 but, felt nice to see good movement this week, even if I get blamed for the people not updating their packages :-/ 14:13:59 scorneli: Were you the one to mention redhat address not responding to tickets? 14:14:19 d-caf: yes 14:14:41 scorneli: could you poke this person a little https://bugzilla.redhat.com/show_bug.cgi?id=1205373 14:15:33 d-caf: i'll see what i can do 14:15:41 scorneli: Thanks 14:18:10 * zoglesby is here late 14:18:19 zoglesby: Welcome 14:18:32 * jsmith is a bit late as well 14:19:32 Better late than never 14:20:15 Anything else WRT tickets? 14:21:12 * Sparks thinks a nice dashboard frontend to our tickets would be nice 14:24:13 No one biting on that? 14:24:14 Okay 14:24:24 #topic Open floor discussion/questions/comments 14:24:32 Anyone have anything? 14:25:02 If anyone knows of a good unclaimed important ticket, I'll work on at least one security ticket this week :-) 14:25:17 Feel free to point me to one you think might be good for me to tackle 14:25:25 jsmith: there were several that were just added recently 14:25:30 Otherwise, I'll try to look through the list and take one later today 14:27:31 plus a few older ones that still need love and attention... 14:29:08 How many packages are there that are tied up by a non-responsive maintainer? 14:29:13 #link https://bugzilla.redhat.com/buglist.cgi?bug_status=NEW&bug_status=ASSIGNED&classification=Fedora&f1=status_whiteboard&keywords=SecurityTracking%2C%20&keywords_type=allwords&list_id=2661457&o1=notsubstring&priority=high&query_format=advanced&v1=fst_owner%3D 14:31:28 jsmith: ^^^ 14:31:43 Yeah, I'm looking at the results from that link now 14:33:16 The stunnel one may just require some checking to see if it's actually vulnerable, redhat reports that EL 5,6,7 are not 14:33:50 I just haven't had time to do the digging or take it on 14:39:02 Okay, anyone have anything else? 14:39:38 * jsmith is looking at the redis bug 14:41:23 Well, if we have nothing else we can all retire to #fedora-security-team 14:41:41 ok 14:42:02 * jsmith has nothing further 14:42:14 Okay, thanks for coming, everyone! 14:42:18 #endmeeting