[prev in list] [next in list] [prev in thread] [next in thread]
List: qubes-devel
Subject: [qubes-devel] Re: Qubes Security Bulletin #23
From: Eric Shelton <knockknock () gmail ! com>
Date: 2015-12-21 22:44:12
Message-ID: 977d4833-2dc4-4f87-907b-3d567e671ead () googlegroups ! com
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
On Monday, December 21, 2015 at 5:15:32 PM UTC-5, Marek
Marczykowski-Górecki wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> On Mon, Dec 21, 2015 at 09:22:06AM -0800, Eric Shelton wrote:
> > On Thursday, December 17, 2015 at 7:19:12 AM UTC-5, joanna wrote:
> > >
> > > -----BEGIN PGP SIGNED MESSAGE-----
> > > Hash: SHA256
> > >
> > > Dear Qubes users,
> > >
> > > We have just released a new Qubes Security Bulletin (QSB #23):
> > >
> > >
> https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qsb-023-2015.txt
> > >
> > > Regards,
> > > joanna.
> > >
> > > - --
> > > The Qubes Security Team
> > > https://qubes-os.org/doc/SecurityPage/
> > >
> >
> > Should the Windows PV drivers included in the Qubes Windows Tools also
> be
> > updated in view of QSB #23?
>
> Good point... Version 3.0.4 uploaded to both current-testing and
> security-testing repositories.
>
Great. The other thing that comes to mind are things like
mini-os/blkfront.c and mini-os/netfront.c (and maybe mini-os/pcifront.c?).
For example, mini-os/blkfront.c, line 361 does:
req = RING_GET_REQUEST(&dev->ring, i);
much like drivers/block/xen-blkfront.c did:
bret = RING_GET_RESPONSE(&info->ring, i);
before the recent set of linux-kernel patches.
Eric
--
You received this message because you are subscribed to the Google Groups \
"qubes-devel" group. To unsubscribe from this group and stop receiving emails from \
it, send an email to qubes-devel+unsubscribe@googlegroups.com. To post to this group, \
send email to qubes-devel@googlegroups.com. To view this discussion on the web visit \
https://groups.google.com/d/msgid/qubes-devel/977d4833-2dc4-4f87-907b-3d567e671ead%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.
[Attachment #5 (text/html)]
On Monday, December 21, 2015 at 5:15:32 PM UTC-5, Marek Marczykowski-Górecki \
wrote:<blockquote class="gmail_quote" style="margin: 0;margin-left: \
0.8ex;border-left: 1px #ccc solid;padding-left: 1ex;">-----BEGIN PGP SIGNED \
MESSAGE----- <br>Hash: SHA256
<br>
<br>On Mon, Dec 21, 2015 at 09:22:06AM -0800, Eric Shelton wrote:
<br>> On Thursday, December 17, 2015 at 7:19:12 AM UTC-5, joanna wrote:
<br>> >
<br>> > -----BEGIN PGP SIGNED MESSAGE-----
<br>> > Hash: SHA256
<br>> >
<br>> > Dear Qubes users,
<br>> >
<br>> > We have just released a new Qubes Security Bulletin (QSB #23):
<br>> >
<br>> > <a href="https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qsb-023-2015.txt" \
target="_blank" rel="nofollow" \
onmousedown="this.href='https://www.google.com/url?q\75https%3A%2F%2Fgithub.com%2F \
QubesOS%2Fqubes-secpack%2Fblob%2Fmaster%2FQSBs%2Fqsb-023-2015.txt\46sa\75D\46sntz\0751\46usg\75AFQjCNFXz3SmUIXiP6ilEp8AqqH6jtWRqQ';return \
true;" onclick="this.href='https://www.google.com/url?q\75https%3A%2F%2Fgithub.com \
%2FQubesOS%2Fqubes-secpack%2Fblob%2Fmaster%2FQSBs%2Fqsb-023-2015.txt\46sa\75D\46sntz\0751\46usg\75AFQjCNFXz3SmUIXiP6ilEp8AqqH6jtWRqQ';return \
true;">https://github.com/QubesOS/<wbr>qubes-secpack/blob/master/<wbr>QSBs/qsb-023-2015.txt</a> \
<br>> >
<br>> > Regards,
<br>> > joanna.
<br>> >
<br>> > - --
<br>> > The Qubes Security Team
<br>> > <a href="https://qubes-os.org/doc/SecurityPage/" target="_blank" \
rel="nofollow" onmousedown="this.href='https://www.google.com/url?q\75https%3A%2F% \
2Fqubes-os.org%2Fdoc%2FSecurityPage%2F\46sa\75D\46sntz\0751\46usg\75AFQjCNG7q34PWSUbdXDxYdEvaD4TiIK2DA';return \
true;" onclick="this.href='https://www.google.com/url?q\75https%3A%2F%2Fqubes-os.o \
rg%2Fdoc%2FSecurityPage%2F\46sa\75D\46sntz\0751\46usg\75AFQjCNG7q34PWSUbdXDxYdEvaD4TiIK2DA';return \
true;">https://qubes-os.org/doc/<wbr>SecurityPage/</a> <br>> >
<br>>
<br>> Should the Windows PV drivers included in the Qubes Windows Tools also be
<br>> updated in view of QSB #23?
<br>
<br>Good point... Version 3.0.4 uploaded to both current-testing and
<br>security-testing repositories.
<br></blockquote><div><br></div><div>Great. The other thing that comes to mind are \
things like mini-os/blkfront.c and mini-os/netfront.c (and maybe \
mini-os/pcifront.c?). For example, mini-os/blkfront.c, line 361 \
does:</div><div><br></div><div class="prettyprint" style="border: 1px solid rgb(187, \
187, 187); word-wrap: break-word; background-color: rgb(250, 250, 250);"><code \
class="prettyprint"><div class="subprettyprint"><span style="color: #000;" \
class="styled-by-prettify">req </span><span style="color: #660;" \
class="styled-by-prettify">=</span><span style="color: #000;" \
class="styled-by-prettify"> RING_GET_REQUEST</span><span style="color: #660;" \
class="styled-by-prettify">(&</span><span style="color: #000;" \
class="styled-by-prettify">dev</span><span style="color: #660;" \
class="styled-by-prettify">-></span><span style="color: #000;" \
class="styled-by-prettify">ring</span><span style="color: #660;" \
class="styled-by-prettify">,</span><span style="color: #000;" \
class="styled-by-prettify"> i</span><span style="color: #660;" \
class="styled-by-prettify">);</span><span style="color: #000;" \
class="styled-by-prettify"><br></span></div></code></div><div><br>much like \
drivers/block/xen-blkfront.c did:</div><div><br></div><div class="prettyprint" \
style="border: 1px solid rgb(187, 187, 187); word-wrap: break-word; background-color: \
rgb(250, 250, 250);"><code class="prettyprint"><div class="subprettyprint"><span \
style="color: #000;" class="styled-by-prettify">bret </span><span style="color: \
#660;" class="styled-by-prettify">=</span><span style="color: #000;" \
class="styled-by-prettify"> RING_GET_RESPONSE</span><span style="color: #660;" \
class="styled-by-prettify">(&</span><span style="color: #000;" \
class="styled-by-prettify">info</span><span style="color: #660;" \
class="styled-by-prettify">-></span><span style="color: #000;" \
class="styled-by-prettify">ring</span><span style="color: #660;" \
class="styled-by-prettify">,</span><span style="color: #000;" \
class="styled-by-prettify"> i</span><span style="color: #660;" \
class="styled-by-prettify">);</span><span style="color: #000;" \
class="styled-by-prettify"><br></span></div></code></div><div><br></div><div>before \
the recent set of linux-kernel \
patches.</div><div><br></div><div>Eric</div><div><br></div>
<p></p>
-- <br />
You received this message because you are subscribed to the Google Groups \
"qubes-devel" group.<br /> To unsubscribe from this group and stop \
receiving emails from it, send an email to <a \
href="mailto:qubes-devel+unsubscribe@googlegroups.com">qubes-devel+unsubscribe@googlegroups.com</a>.<br \
/> To post to this group, send email to <a \
href="mailto:qubes-devel@googlegroups.com">qubes-devel@googlegroups.com</a>.<br /> To \
view this discussion on the web visit <a \
href="https://groups.google.com/d/msgid/qubes-devel/977d4833-2dc4-4f87-907b-3d567e671e \
ad%40googlegroups.com?utm_medium=email&utm_source=footer">https://groups.google.com/d/ \
msgid/qubes-devel/977d4833-2dc4-4f87-907b-3d567e671ead%40googlegroups.com</a>.<br /> \
For more options, visit <a \
href="https://groups.google.com/d/optout">https://groups.google.com/d/optout</a>.<br \
/>
------=_Part_884_1731803630.1450737852682--
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic