Skip to main content

Your submission was sent successfully! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates from Canonical and upcoming events where you can meet our team.Close

Thank you for contacting us. A member of our team will be in touch shortly. Close

An error occurred while submitting your form. Please try again or file a bug report. Close

  1. Blog
  2. Article

Canonical
on 14 December 2017

Security Team Weekly Summary: December 14, 2017

The Security Team weekly reports are intended to be very short summaries of the Security Team’s weekly activities.

If you would like to reach the Security Team, you can find us at the #ubuntu-hardened channel on FreeNode. Alternatively, you can mail the Ubuntu Hardened mailing list at: [email protected]

During the last week, the Ubuntu Security team:

  • Triaged 213 public security vulnerability reports, retaining the 65 that applied to Ubuntu.
  • Published 15 Ubuntu Security Notices which fixed 16 security issues (CVEs) across 15 supported packages.

Ubuntu Security Notices

Bug Triage

Mainline Inclusion Requests

Development

  • review tools testsuite updates for resquashfs
  • write-up processes for reviewing base snaps
  • send up PR 4375 and PR 4375 (2.30) to add an app/hook-specific udev rule for hotplugging (fixes mir hotplug issue)
  • debug chromium mknod issue with nvidia GPUs
  • send up PR 4359 and PR 4360 (2.30) policy updates PRs

  • add missing rule to upstream AppArmor fonts abstraction

  • pickup PR 4100 and send up PR 4383 (2.30) for new ssh/gpg keys interfaces
  • send up PR 4366 and PR 4367 (2.30) for small removable-media fix
  • update review-tools for 2.30 interfaces
  • discuss options for possible biometrics interface
  • snapd reviews
    • PR 4365 – allow wayland socket and non-root sockets/wayland slot policy
    • PR 4140 – add an interface for gnome-online-accounts D-Bus service
    • PR 4369 – add write permission to optical-drive interface

  • https://forum.snapcraft.io/t/proposal-to-disable-squashfs-fragments-in-snaps/3103

What the Security Team is Reading This Week

Weekly Meeting

More Info

Related posts

Jehudi
22 August 2025

A complete security view for every Ubuntu LTS VM on Azure

Compliance Article

Azure’s Update Manager now shows missing Ubuntu Pro updates for all Ubuntu Long-Term Support (LTS) releases: 18.04, 20.04, 22.04 and 24.04. The feature was first introduced for only 18.04 during its move to Expanded Security Maintenance. With this addition, Azure highlights where Ubuntu LTS instances would benefit from Expanded Security M ...

Gabriel Aguiar Noury
20 August 2025

Canonical is now a platinum member in the Open Source Robotics Alliance

Robotics Article

Ubuntu is the home of ROS. The very first ROS distribution, Box Turtle, launched on Ubuntu 8.04 LTS, Hardy Heron, and since then, Ubuntu and ROS have grown hand in hand. With every Ubuntu LTS release, a new ROS distribution follows, an intentional alignment that ensures ROS works out of the box on Ubuntu Desktop, ...

ijlal-loutfi
19 August 2025

AMD SEV-SNP host support available on Ubuntu 25.04

Confidential computing Article

Ubuntu 25.04 introduces full AMD SEV-SNP host support, making Ubuntu the first production-grade Linux distribution to deliver end-to-end confidential computing , from host to guest , without out-of-tree patches or experimental builds. With this release, enterprises can deploy confidential virtual machines on fully Ubuntu-based stacks in b ...