Friday, 2018-06-01

*** lifeless has quit IRC01:15
*** lifeless has joined #openstack-infra-incident01:58
*** lifeless_ has joined #openstack-infra-incident02:14
*** lifeless has quit IRC02:14
*** mordred has quit IRC02:41
*** Shrews has quit IRC02:45
*** Shrews has joined #openstack-infra-incident02:47
*** mordred has joined #openstack-infra-incident02:54
*** rosmaita has quit IRC02:55
*** rlandy|rover|bbl is now known as rlandy|rover03:31
*** EmilienM_ has joined #openstack-infra-incident03:43
*** lifeless_ has quit IRC03:44
*** srwilkers has quit IRC03:44
*** EmilienM has quit IRC03:44
*** EmilienM_ is now known as EmilienM03:44
*** EmilienM has quit IRC03:46
*** EmilienM has joined #openstack-infra-incident03:46
*** rlandy|rover has quit IRC03:59
*** lifeless has joined #openstack-infra-incident07:07
*** srwilkers has joined #openstack-infra-incident07:47
*** lifeless has quit IRC08:37
*** lifeless has joined #openstack-infra-incident08:44
*** lifeless_ has joined #openstack-infra-incident08:52
*** lifeless has quit IRC08:52
*** corvus has quit IRC09:33
*** corvus has joined #openstack-infra-incident09:34
*** rlandy has joined #openstack-infra-incident12:36
*** rlandy is now known as rlandy|rover12:55
*** rosmaita has joined #openstack-infra-incident13:34
*** dansmith is now known as superdan13:35
fungistill nothing from ubuntu other than in 18.1015:00
clarkbcentos7 seems to be on older packages too still15:02
*** lifeless_ has quit IRC15:23
*** lifeless has joined #openstack-infra-incident15:24
dmsimardFor RHEL/CentOS: https://access.redhat.com/security/cve/cve-2018-1123515:29
dmsimardthere's typically a list of up to date packages available on the CVE page once they're released15:29
dmsimardprotip, engineers will typically alias a bugzilla ID for the CVE number, ex: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-1123515:30
dmsimardlet me read through that for a minute, there's a bunch of internal/confidential comments15:31
dmsimardAn update landed for fedora but they're still working through things for RHEL as far as I can tell. Turns out there's a couple things relying on git :)15:50
*** lifeless_ has joined #openstack-infra-incident16:11
*** lifeless has quit IRC16:12
*** rlandy|rover is now known as rlandy|rover|brb16:14
*** EmilienM is now known as EvilienM16:40
clarkbdmsimard: thats the suse issue too, git is in the extra testing staging area with some other important stuff and takes a long time to build and get out :/16:42
*** rlandy|rover|brb is now known as rlandy|rover16:55
*** myoung is now known as myoung|bbl17:47
*** myoung|bbl is now known as myoung19:30
*** jlvillal is now known as jlvacation19:43
*** lifeless_ has quit IRC20:00
*** lifeless has joined #openstack-infra-incident20:01
*** lifeless has quit IRC20:50
*** lifeless has joined #openstack-infra-incident20:51
*** rosmaita has quit IRC21:18
*** EvilienM has quit IRC21:18
*** EmilienM has joined #openstack-infra-incident21:18
*** EmilienM is now known as EvilienM21:19
*** superdan is now known as dansmith21:25
*** lifeless has quit IRC22:38
*** rlandy|rover has quit IRC22:39
*** lifeless has joined #openstack-infra-incident22:40
fungiclarkb: in unrelated cve news, is https://people.canonical.com/~ubuntu-security/cve/2018/CVE-2018-8012.html one we need to worry about, do you think? i'm not super familiar with how we've secured our zk cluster22:41
fungido we firewall off the necessary ports for that?22:42
clarkbfungi: our firewall is set up to only allow connections from trusted nodes22:44
clarkbnot the best ideal but should be fine22:44
fungiyeah, i'm not worried then22:45
fungithanks for confirming22:45
*** lifeless has quit IRC23:36
*** lifeless has joined #openstack-infra-incident23:43

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!