-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Dear Qubes Community,
The Qubes Security Team is currently investigating the extent to which [XSA-254] (and the [Meltdown] and [Spectre] attacks more generally) affect the security of Qubes OS. The practical impact of these attacks on Qubes is currently unclear. While the Qubes Security Team is a member of the [Xen predisclosure list], [XSA-254] was disclosed on an accelerated timetable ahead of schedule, so our team has not yet had a chance to analyze these attacks, nor has the Xen Project released any patches associated with [XSA-254]. We are continuing to monitor the situation closely. Once the Security Team makes a determination about the impact on Qubes, we will make another announcement, update the [XSA Tracker], and, if appropriate, issue a [Qubes Security Bulletin] with information about patching. [XSA-254]: https://xenbits.xen.org/xsa/advisory-254.html [Meltdown]: https://meltdownattack.com/ [Spectre]: https://spectreattack.com/ [Xen predisclosure list]: https://www.xenproject.org/security-policy.html [XSA Tracker]: https://www.qubes-os.org/security/xsa/ [Qubes Security Bulletin]: https://www.qubes-os.org/security/bulletins/ This announcement is also available on the Qubes website: https://www.qubes-os.org/news/2018/01/04/xsa-254-meltdown-spectre/ - -- Andrew David Wong (Axon) Community Manager, Qubes OS https://www.qubes-os.org -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEZQ7rCYX0j3henGH1203TvDlQMDAFAlpOR88ACgkQ203TvDlQ MDCJ4w//WNeEUpsJ77Lj4ld5+nhqbUEYymGRjMPQAFQBrgnwzl4e9B1XlSyiSgfE /moCRziePUy3rbjxg9CQhYau2qWIFLtsxjPggM6t//dWOcQY1P9Agc0HWvNqOKLO tetILbCD1ttz4/WdcRvJTBD7y4NbeCcdDguuPjXgVbA3pRZ2fewUhlQ8/cjS8xV3 /xJfUHNiV5iT9W7pWVMuz7Z79xpZB7Yz3ONAN5OqS0eXEG0M3k77VQfTLylPzuXR L8suGjeyZeeuUVVCFxHCyHaPod+e8YvHsCmDZLiTUZQZew8teG2QrM4eMRHrCxfG aJrApSTqBTr35YxopkjKLWeSUjj41sA1sLQv4dM0xCknXQmb9vS3YCL4oVde/Fmy LhqXu1Y5jmFrkRdVggaDWfCziINwFR6aQ86JTH9JqXmPvlKcEq+lGfgloCVWvDwf KfdTMXmrsRGH7aY/KpM8oVMhARTOf+JSaGTPmztyaPifNy0chdh/jFdnRFmhqa+x uay7EAml9VmknmdYtp1iOv9xu1ZnPxW5X2Y6PvL5zpExOWJSA6PeapciW382RTds dmNmp/ynyw98mm3VQA81yaSgHlRk5HEntW209dsuIgPWcws5eU+clUORnSaQWaK+ SffR4NeXsO3HkTddL6VmDsZv40mwmi5J8gtgGAlN5uBUZQASbJM= =gdii -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/2fefb7c6-0e8e-036c-09ef-d1692d655d65%40qubes-os.org. For more options, visit https://groups.google.com/d/optout.
