[yocto] Agenda: Yocto Project Technical Team Meeting - Tuesday, October 7, 2014 8:00 AM US Pacific Time

[Sona Sarmadi]

Hi all,

I would like to bring up following security issue in this meeting if there is interest for it in the group:

- Collaboration within Yocto project when a critical vulnerability like Heartbleed/Shellshock occurs
We applied GNU patches in our branches, tested and sent updates to our customers, then Yocto came up with a patch and we took that one later (our own work did become redundant). It would have been better if we collaborated within the Yocto project and together created a security patch, tested it for different architectures and sent a Security Notification/Advisory to the list with background/summary of CVEs, tests ..etc? (i.e. divided the work between us ).  

Do you think it is good idea to create a security team and discuss security topics in that list? Is there any volunteer/interest?  

Thanks
Sona 



From: yocto-bounces at yoctoproject.org [mailto:yocto-bounces at yoctoproject.org] On Behalf Of Jolley, Stephen K
Sent: den 7 oktober 2014 04:20
To: yocto at yoctoproject.org
Subject: [yocto] Agenda: Yocto Project Technical Team Meeting - Tuesday, October 7, 2014 8:00 AM US Pacific Time

Tuesday, October 7, 2014 8:00 AM US Pacific Time

Agenda:
 
* Opens collection - 5 min (Stephen)
* Yocto Project status - 5 min (Stephen/team)
https://wiki.yoctoproject.org/wiki/Yocto_Project_v1.7_Status
https://wiki.yoctoproject.org/wiki/Yocto_1.7_Schedule
https://wiki.yoctoproject.org/wiki/Yocto_1.7_Features
* SWAT team rotation: Beth -> Paul
https://wiki.yoctoproject.org/wiki/Yocto_Build_Failure_Swat_Team
* Opens - 10 min 
* Team Sharing - 10 min


We encourage people attending the meeting to logon the Yocto Project IRC chancel during the meeting (optional):

Yocto IRC: http://webchat.freenode.net/?channels=#yocto
IRC Tutorial: http://www.irchelp.org/irchelp/irctutorial.html 

Conference Details:
Company:           WIND RIVER SYS
Ready-Access Number: 8007302996/9139049836
Access Code:     2705751

For International numbers see: https://www.yoctoproject.org/tools-resources/community/weekly-technical-call

Thanks,

Stephen K. Jolley
Yocto Project Program Manager
INTEL, MS JF1-255, 2111 N.E. 25th Avenue, Hillsboro, OR 97124 
I   Work Telephone:          (503) 712-0534
(    Cell:                                (208) 244-4460
((Email:                             stephen.k.jolley at intel.com