On 04/09/2024 19:32, Michael Hudson-Doyle wrote:


On Thu, 5 Sept 2024 at 03:31, Rodrigo Figueiredo Zaiden <[email protected] <mailto:[email protected]>> wrote:

    Hi,

    The Ubuntu Security team has a proposed update for the AppArmor
    userspace utilities in focal and jammy ready to move forward that we
    would like the help of the SRU or archive admin teams.

    The updates are in the proposed pocket as of now [1][2], but given the
    sensitivity of the issue [3], we would like to propose it to be rolled
out to the updates pocket in stages.

This is the default way updates are released: https://canonical-sru- docs.readthedocs-hosted.com/en/latest/explanation/standard-processes/ #phasing <https://canonical-sru-docs.readthedocs-hosted.com/en/latest/ explanation/standard-processes/#phasing> -- are you asking for this to happen in a more gradual way for these packages?


The default phasing is good enough.
No need to happen in a more gradual way.

Thanks,
Rodrigo


Cheers,
mwh

    We would like the new version
    (currently in proposed) promoted to the updates pocket by the SRU team.

    Additionally, we performed a no-change rebuild of the prior version in
    the updates pocket for both releases into the corresponding security
    pocket [4][5] to ensure that it is possible for users to relatively easily
    rollback to the prior version without regressing the prior fixes that
    had landed in those releases.

    We have already communicated the update through the bug itself [3]
    and also via a discourse post [6], and we have had a few comments (in
    the bug) that no issues were found in addition to our own testing,
    which is making us confident to move forward with the update using
    a safe strategy.

    Is that something we can have help with?

    [1] https://launchpad.net/ubuntu/+source/apparmor/3.0.4-2ubuntu2.4
    <https://launchpad.net/ubuntu/+source/apparmor/3.0.4-2ubuntu2.4>
    [2] https://launchpad.net/ubuntu/+source/apparmor/2.13.3-7ubuntu5.4
    <https://launchpad.net/ubuntu/+source/apparmor/2.13.3-7ubuntu5.4>
    [3] https://bugs.launchpad.net/apparmor/+bug/1597017 <https://
    bugs.launchpad.net/apparmor/+bug/1597017>
    [4] https://launchpad.net/ubuntu/+source/
    apparmor/3.0.4-2ubuntu2.3build2 <https://launchpad.net/ubuntu/+source/
    apparmor/3.0.4-2ubuntu2.3build2>
    [5] https://launchpad.net/ubuntu/+source/
    apparmor/2.13.3-7ubuntu5.3build2 <https://launchpad.net/ubuntu/+source/
    apparmor/2.13.3-7ubuntu5.3build2>
    [6]
    https://discourse.ubuntu.com/t/upcoming-apparmor-security-update-for-
    cve-2016-1585/44268 <https://discourse.ubuntu.com/t/upcoming-apparmor-
    security-update-for-cve-2016-1585/44268>

    Thanks!
    Rodrigo



-- Ubuntu-release mailing list
    [email protected] <mailto:[email protected]>
    Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/
    listinfo/ubuntu-release <https://lists.ubuntu.com/mailman/listinfo/
    ubuntu-release>


Attachment: OpenPGP_signature.asc
Description: OpenPGP digital signature

-- 
Ubuntu-release mailing list
[email protected]
Modify settings or unsubscribe at: 
https://lists.ubuntu.com/mailman/listinfo/ubuntu-release

Reply via email to