========================================
#fedora-meeting-1: fedora_coreos_meeting
========================================


Meeting started by dustymabe at 16:29:39 UTC. The full logs are
available at
https://meetbot.fedoraproject.org/fedora-meeting-1/2022-11-02/fedora_coreos_meeting.2022-11-02-16.29.log.html
.



Meeting summary
---------------
* roll call  (dustymabe, 16:29:43)

* Action items from last meeting  (dustymabe, 16:33:12)
  * bgilbert addressed VMWare concerns in
    https://github.com/coreos/fedora-coreos-tracker/issues/567#issuecomment-1294655290
    (dustymabe, 16:34:05)

* Update OpenSSL for CVE-2022-3786 and CVE-2022-3602  (dustymabe,
  16:35:10)
  * LINK: https://github.com/coreos/fedora-coreos-tracker/issues/1329
    (dustymabe, 16:35:16)
  * the `testing` and `next` streams have a fix for the OpenSSL CVEs -
    `stable` will roll out later today  (dustymabe, 16:35:53)

* Non-default OSTree deployments accessible without GRUB password
  (CVE-2022-3675)  (dustymabe, 16:37:22)
  * LINK: https://github.com/coreos/fedora-coreos-tracker/issues/1333
    (dustymabe, 16:37:28)
  * please see the announcement for more context on the nature of the
    security issue and the release fix schedule:
    https://discussion.fedoraproject.org/t/non-default-ostree-deployments-accessible-without-grub-password-cve-2022-3675/43715
    (dustymabe, 16:48:24)

* open floor  (dustymabe, 16:51:47)
  * LINK:
    https://github.com/openshift/os/issues/1036#issuecomment-1299168792
    (jlebon, 16:54:21)

Meeting ended at 17:01:42 UTC.




Action Items
------------





Action Items, by person
-----------------------
* **UNASSIGNED**
  * (none)




People Present (lines said)
---------------------------
* dustymabe (42)
* bgilbert (21)
* zodbot (20)
* jdoss (14)
* jlebon (11)
* fifofonix (3)
* walters (3)
* c4rt0 (2)
* jmarrero (2)
* jbrooks (1)
* gursewak (1)
* lucab (1)
* copperi[m] (1)
* spresti[m] (1)




Generated by `MeetBot`_ 0.4

.. _`MeetBot`: https://fedoraproject.org/wiki/Zodbot#Meeting_Functions