Re: [qubes-users] Re: Is Qubes vulnerable to CVE-2018-3620?

2018-09-01 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2018-08-15 03:58, Andrew David Wong wrote: > On 2018-08-14 21:38, Sphere wrote: >> CVE-2018-3646 in particular is alarming: >> "The third flaw, CVE-2018-3646, has a CVSS Base Score of 7.1 and enables bad >> actors to attack virtual machines

Re: [qubes-users] Re: Is Qubes vulnerable to CVE-2018-3620?

2018-08-15 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2018-08-14 21:38, Sphere wrote: > CVE-2018-3646 in particular is alarming: > "The third flaw, CVE-2018-3646, has a CVSS Base Score of 7.1 and enables bad > actors to attack virtual machines (VM), via virtualization software and > Virtual

[qubes-users] Re: Is Qubes vulnerable to CVE-2018-3620?

2018-08-14 Thread Sphere
CVE-2018-3646 in particular is alarming: "The third flaw, CVE-2018-3646, has a CVSS Base Score of 7.1 and enables bad actors to attack virtual machines (VM), via virtualization software and Virtual Machine Monitors (VMMs) running on Intel processors. A malicious guest VM could infer the values

[qubes-users] Re: Is Qubes vulnerable to CVE-2018-3620?

2018-08-14 Thread Sphere
On Wednesday, August 15, 2018 at 10:33:09 AM UTC+8, Sphere wrote: > https://www.bleepingcomputer.com/news/security/researchers-disclose-new-foreshadow-l1tf-vulnerabilities-affecting-intel-cpus/ > > There are other vulnerabilities disclosed along with this today and if > possible, I would like to