Ubuntu Security Notice

Asked by Darla Monteiro on 2018-06-06

I provide the patch data for our environment. When I look at the security notices (example: https://usn.ubuntu.com/3671-1/), there are links to the update instructions. (example: https://launchpad.net/ubuntu/+source/git?_ga=2.238881728.1960010477.1528315372-1151318458.1528315372)

When I get to the git package data through the second link, there is an urgency listed of "very urgent".

In the normal patch world, I would consider this as critical. In our system, we use low, medium, high and critical for patches.

What is the criticality or urgency terminology that is being used by Ubuntu. I could not seem to find any data online. I want to make sure that if very urgent is similar to critical, I rate the patch appropriately for our environment.


Question information

English Edit question
Ubuntu Edit question
No assignee Edit question
Last query:
Last reply:
daniel CURTIS (anoda) said : #1

Hi Darla.

Ubuntu uses various types/names for assigning bug importance etc. The importance values are different, based on the various criteria etc. Anyway, here is the list:

✓ Undecided: this is default for new bugs;
✓ Low: bugs that affect, for example, default configuration;
✓ Medium: bugs with moderate or severe impact, usability issue etc.;
✓ High: bugs with e.g. hardware component and so on;
✓ Critical: bugs with severe impact on Ubuntu, data corruption etc.

Of course, above criteria are examples only! There is a lot more priorities that should be given for different bug importance. There are also "bug status", which reflect the state of what is being reported. Status can be modified, of course. Here is a list of report statuses:

✓ New
✓ Incomplete
✓ Invalid
✓ Expired
✓ Confirmed

Here are status indicating whats happened with bug: is fixed, work is still in progress or this specific issue will be not fixed etc.

✗ Triaged
✗ In Progress
✗ Fix Committed
✗ Fix Released
✗ Won't Fix

I hope, that it will help You somehow. You can find more informations here:

1/ https://wiki.ubuntu.com/Bugs/Triage
2/ https://wiki.ubuntu.com/Bugs/Importance
3/ https://wiki.ubuntu.com/Bugs/Bug%20statuses

Thanks, best regards.

Launchpad Janitor (janitor) said : #2

This question was expired because it remained in the 'Open' state without activity for the last 15 days.