Fedora Security Team
by Eric Christensen
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Some people have already heard about the new Security Team making the rounds on BZ trying to clean up vulnerabilities that still linger within our OS. Until today I've not said much as I was waiting to see how successful we'd be at trying to remedy some of these situations. Turns out I had nothing to fear. So with that I formally announce the Security Team to Fedora and open the doors to all that are interested.
== What are we doing? ==
The Security Team's mission is to assist packagers in closing security vulnerabilities. Once alerted to a vulnerability on a package, the security team can help work with upstream to obtain a patch or a new release of a package. Once we have a patch or a new release we attach it to the vulnerability bug and work with packagers to get the fix pushed.
== How bad is the problem now? ==
As of a few days ago we had 566 open vulnerability tickets that cover both Fedora and EPEL. The breakdown of those bugs by severity looks like this:
* Critical: 3
* Important: 69
* Moderate: 366
* Low: 128
The good thing is that few of these vulnerabilities are considered "bad" (critical and important). There are likely bugs in there that no longer apply since the packages have been upgraded but the tickets never got closed. Also, a package that is in both Fedora and EPEL will get a ticket for each so from a pure numbers standpoint there are duplicates in those stats.
== How many people have signed up for the team? ==
Over twenty so far.
== How can I join/get involved/learn more about the project? ==
Go look at our wiki page[0], which is still being developed but does contain some basic information on the team. We also have a listserv[1] and an IRC channel[2] where we hang out.
[0] https://fedoraproject.org/wiki/Security_Team
[1] https://lists.fedoraproject.org/mailman/listinfo/security-team
[2] #fedora-security-team on irc.freenode.net
- -- Eric
- --------------------------------------------------
Eric "Sparks" Christensen
Fedora Project
sparks(a)fedoraproject.org - sparks(a)redhat.com
097C 82C3 52DF C64A 50C2 E3A3 8076 ABDE 024B B3D1
- --------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1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=LOhU
-----END PGP SIGNATURE-----
8 years, 10 months
Elections Results for Summer 2014 FESCo Special Election
by Jaroslav Reznik
Greetings, all!
The elections for the Fedora Engineering Steering Committee (FESCo)
Summer 2014 Special Election have concluded, and the results are
shown below.
FESCo is electing 3 seats this time. A total of 195 ballots were
cast, meaning a candidate could accumulate up to 975 votes (195 *
5). The results for the FESCo elections are as follows:
# votes | name
- --------+----------------------
629 | Josh Boyer (FAS: jwboyer, IRC: jwb)
548 | Kalev Lember (FAS: kalev, IRC: kalev)
541 | Tomas Hozza (FAS: thozza, IRC: thozza)
-------------------------------------------
463 | Lukáš Nykrýn (FAS: lnykryn, IRC: lnykryn)
362 | David King (FAS: amigadave, IRC: amigadave)
As these elections will fill the seats for the remainder of
the term, Josh Boyer and Kalev Lember are each elected to FESCo
until next spring. Tomas Hozza until after the F21 release this
fall.
Congratulations to the winning candidates, and thank you all
candidates for running this elections!
Jaroslav
8 years, 10 months
FESCo Elections restart & voting period will open at 2014-07-16 00:00 UTC
by Jaroslav Reznik
Greetings!
As you probably realized, the FESCo July 2014 elections were closed
prematurely due to mistake in elections setup. To be fair to all
candidates, we have decided to erase all results collected before
the fix was applied and restart elections.
Voting will be opened from today's midnight 2014-07-16 00:00 UTC
to 2014-07-23 00:00 UTC again.
You can vote at https://admin.fedoraproject.org/voting
We're very sorry for this issue, *if you already voted*, please
don't forget to vote again!
Still not sure who to vote for? See candidates answers to special
July 2014 Elections Questionnaire [1] and also if you missed Town
Hall last Friday, meeting log is available [2].
PS: To vote for FESCo you must have cla_done + one other "non-cla"
group in FAS.
[1] http://fedoraproject.org/wiki/Elections/Questionnaire
[2] http://bit.ly/1oEtInr
8 years, 10 months
FESCo Summer 2014 Elections Town Hall Schedule
by Jaroslav Reznik
Please join the candidates and other members of the Fedora community
on FreeNode this Friday for FESCo Summer 2014 Elections Town Hall.
You may ask questions in #fedora-townhall-public and the moderator
will share them with the candidates in #fedora-townhall. Town hall
is scheduled for one hour.
== FESCo (Engineering) Town Hall ==
When: Friday, July 11 at 13:00 UTC
Where: #fedora-townhall and #fedora-townhall-public on FreeNode
Some questions for the candidates were collected in advance of the
town halls and the answers provided by the candidates to those
questions will be posted on the questionnaire link on the wiki prior
to the town hall if at all possible.
https://fedoraproject.org/wiki/Elections/Questionnaire
More information about the schedule and details of this election may
be found on the Elections page.
https://fedoraproject.org/wiki/Elections
Jaroslav
8 years, 11 months
Summer 2014 FESCo Special Election
by Matthew Miller
We have three open seats on FESCo, the Fedora Engineering Steering
Committee. The policy for filling open seats states that we first check with
the runners-up from the previous election; as they have declined, the policy
is for FESCo to select replacements. We've decided that an open election is
the best way to do that selection.
Details on the election are available at
<http://fedoraproject.org/wiki/Elections>
and the schedule will be as follows:
July 2 - 7: Nomination Period (closes promptly at 23:59:59 UTC on July 7)
July 2 - 7: Questionnaire form open for the community to submit questions
for the candidates.
July 7 - 10: Candidates Questionnaire. Results will be posted to the wiki
prior to the townhall
July 10 - 15: Townhall
July 15 - 22: Voting Period (closes promptly at 23:59:59 UTC on July 22)
July 23: Announce Results
Note that these elections will fill the seats for the remainder of the term,
with the first two winners serving until next spring and the third until
after the F21 release this fall.
If you are interested in helping Fedora in this way, please add yourself to
the list of nominees at
<http://fedoraproject.org/wiki/Development/SteeringCommittee/Nominations>.
As a FESCo member, you will be part of the Fedora's technical leadership
team. See
<https://fedoraproject.org/wiki/Fedora_Engineering_Steering_Committee>
for details of responsibilities. FESCo has a weekly IRC meeting to decide on
open issues; you should plan to attend that regularly, and to spend some
time understanding those issues before the meeting so that we can proceed
efficiently.
Even if you are not interested in running, you can help with the electoral
process by adding some questions to the Questionnaire for this election:
<http://fedoraproject.org/wiki/Elections/Questionnaire>
Thanks to Jaroslav Reznik for coordinating this election!
--
Matthew Miller
<mattdm(a)fedoraproject.org>
Fedora Project Leader
8 years, 11 months