-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 2016-08-15 16:59, [email protected] wrote:
> After discovering this *major* potential bug, and with sufficient time for
>  it to be developed in the wild, I would like to know if this privilage 
> escalation bug is patched with the new release. Also can we have a rough
> estimate for Qubes 4.0 stable????(If the case that para-virtualisation is a
> lost cause)
> 
> I came across this bug by accident a couple of days ago on Quarklab. I feel
>  as though it needs to me made more public
> 
> Follow up s'il vous plaƮt
> 

Are you referring to XSA-182? If so, the Qubes project "sounded the alarm"
about this as soon as the bug was made public. We made sure to spread the word
far and wide with a QSB, mailing list threads, and across social media:

1. Qubes Security Bulletin #24:
   https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qsb-024-2016.txt

2. qubes-devel thread:
   https://groups.google.com/d/topic/qubes-devel/3Ebjd45H15Q/discussion

3. qubes-users thread:
   https://groups.google.com/d/topic/qubes-users/6eugmjXpvMc/discussion

4. Social media:
   https://twitter.com/QubesOS/status/757910216637906945
   https://www.facebook.com/QubesOS/posts/504972499699452
   https://redd.it/4uoaqm

- -- 
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org
-----BEGIN PGP SIGNATURE-----

iQIcBAEBCgAGBQJXsnSdAAoJENtN07w5UDAwX7cP/jo9gYfXlt++5fdJabKAXgVe
WJupJ1ODIz1IHhIo6u7sEdHAXrX5OjUObl+iHL8/q9Ce7o5Fh62G5u8hC082VNru
dXOVYmTBv5e536uqG/OtKqwdc1jUUS1OCWzy6nK9rc47k5ug5Kc4pbCKclymyGQl
1ZxxA37rcOKXqOXxnp0731Vf3Gf7q5u0klDFNGSQ5Daktrr0wXOiDrP0gyj5MhWM
lb3D/BFmUkfdLLQBF0oW5a7pIiSjNVR4TqDOyeuencMLU7azYOfT3ouPkm1TU4Bs
pOT2aguEuRoR3xRSCMkhj781o3W93hmkpYC7IjcXVLoMae79AnKhC94iLlsXRWqN
PmtrdlAFIffOFn9jz0T6fjOQBt82uxDORxf7jY6bPgT6lCaEaoHxw3PBWyqirUiH
mBi5EKQ0dBgzYI/qqToheTm+/QLlwoQmEc4q03vQXCOPhBZQ//VUpyjtImpIANGd
88Dh58sgJQRhh6MUJcH3uvbSPcW0AdP6nm7IahL9UQsWFWOUG9JAGWyfF5LLrLK4
ehp0dYZcJ2ut7PNyecA1Fc87duFC3MjniO39CLO+8l79G0kTAkiSwhFG8cMRpw12
9oYjX3BMkt2gfz71T0Nn6PfL5Gc53IoxMOxPXmL4SNOMrpqBowkQzLHenwei4gAF
0KCE8IZs9Bj5aJbr6hd7
=D+7U
-----END PGP SIGNATURE-----

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-devel" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-devel/f0565e02-f82f-423e-f6d3-91856da88ed6%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

Reply via email to