Re: [qubes-users] Question about Xen sandbox escape from Oct 2015

2016-06-30 Thread raahelps
On Thursday, June 30, 2016 at 5:48:17 PM UTC-4, danmich...@gmail.com wrote: > Wow... so the ISO doesn't get patched...? Wow... > > Surely there should be a BIG warning on the Qubes downloads page... saying, > WARNING! Xen in QUBES 3.0 allows full sandbox escape..! Update your software >

Re: [qubes-users] Question about Xen sandbox escape from Oct 2015

2016-06-30 Thread Marek Marczykowski-Górecki
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Wed, Jun 29, 2016 at 10:29:31PM -0700, danmichaels8...@gmail.com wrote: > OK > > Version: 4.4.3 > Release: 11.fc20 > > So I am OK. > > Does QUBES 3.0 come with the patched version though... Have the devs updated > the ISO so that it

Re: [qubes-users] Question about Xen sandbox escape from Oct 2015

2016-06-29 Thread danmichaels8876
OK Version: 4.4.3 Release: 11.fc20 So I am OK. Does QUBES 3.0 come with the patched version though... Have the devs updated the ISO so that it comes patched..? Or am I patched because I did a dom0 update..? Thanks -- You received this message because you are subscribed to the Google

Re: [qubes-users] Question about Xen sandbox escape from Oct 2015

2016-06-29 Thread Andrew David Wong
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 2016-06-29 21:42, danmichaels8...@gmail.com wrote: > I have a question about the Xen sandbox escape from Oct 2015 > > https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/ > qsb-022-2015.txt > > I am running Qubes 3.0. > > Qubes 3.0 was

[qubes-users] Question about Xen sandbox escape from Oct 2015

2016-06-29 Thread danmichaels8876
I have a question about the Xen sandbox escape from Oct 2015 https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qsb-022-2015.txt I am running Qubes 3.0. Qubes 3.0 was released Oct 1 2015. The Xen glitch was Oct 29 2015. Does this mean that Qubes 3.0 does not come shipped with the