[prev in list] [next in list] [prev in thread] [next in thread] 

List:       qubes-devel
Subject:    [qubes-devel] Re: Qubes Security Bulletin #23
From:       marmarek <marmarek () invisiblethingslab ! com>
Date:       2015-12-27 17:43:34
Message-ID: 20151227174334.GF1533 () mail-itl
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Mon, Dec 21, 2015 at 02:44:12PM -0800, Eric Shelton wrote:
> On Monday, December 21, 2015 at 5:15:32 PM UTC-5, Marek 
> Marczykowski-Górecki wrote:
> > 
> > -----BEGIN PGP SIGNED MESSAGE----- 
> > Hash: SHA256 
> > 
> > On Mon, Dec 21, 2015 at 09:22:06AM -0800, Eric Shelton wrote: 
> > > On Thursday, December 17, 2015 at 7:19:12 AM UTC-5, joanna wrote: 
> > > > 
> > > > -----BEGIN PGP SIGNED MESSAGE----- 
> > > > Hash: SHA256 
> > > > 
> > > > Dear Qubes users, 
> > > > 
> > > > We have just released a new Qubes Security Bulletin (QSB #23): 
> > > > 
> > > > 
> > https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qsb-023-2015.txt 
> > > > 
> > > > Regards, 
> > > > joanna. 
> > > > 
> > > > - -- 
> > > > The Qubes Security Team 
> > > > https://qubes-os.org/doc/SecurityPage/ 
> > > > 
> > > 
> > > Should the Windows PV drivers included in the Qubes Windows Tools also 
> > be 
> > > updated in view of QSB #23? 
> > 
> > Good point... Version 3.0.4 uploaded to both current-testing and 
> > security-testing repositories. 
> > 
> 
> Great.  The other thing that comes to mind are things like 
> mini-os/blkfront.c and mini-os/netfront.c (and maybe mini-os/pcifront.c?). 
> For example, mini-os/blkfront.c, line 361 does:
> 
> req = RING_GET_REQUEST(&dev->ring, i);
> 
> much like drivers/block/xen-blkfront.c did:
> 
> bret = RING_GET_RESPONSE(&info->ring, i);
> 
> before the recent set of linux-kernel patches.

I think I've completed fixes for that in mini-os, but left it on another
machine... So, will push it somewhere when come back from CCC.

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJWgCNGAAoJENuP0xzK19csvCYH/Apps+UiJqDSLm3t5T50yR7s
sTUgVRHak3WYxA1EvuS0iNSP55vV6oaJ6cAkWMrYa5fxgfJAEeJFRgOOWD06Hljt
VNAU5qd2+o7qmuunfteqKUjwuWENtItG3xaP/Z4pruh2xwqxGuR6NCTIwVYjWyG3
18FTvVP0Mk3H2x1UtlmtqUCXKXNDTqY+wL537xjVC3bB6tfe/MEokzxyv184mApN
U/z50jnba1R+KgpiKZbJC+EyN8xn4HWMqNmEnLL7Ry9WvKCnmaXpDumCL1YvleM8
2nPBn1amlRIgKJaCbtxApNKAa/W6OdW/aB9HMF3Ep/Ehu4r2Hn9Q2AYwJM8xQD0=
=c3JI
-----END PGP SIGNATURE-----

-- 
You received this message because you are subscribed to the Google Groups \
"qubes-devel" group. To unsubscribe from this group and stop receiving emails from \
it, send an email to qubes-devel+unsubscribe@googlegroups.com. To post to this group, \
send email to qubes-devel@googlegroups.com. To view this discussion on the web visit \
https://groups.google.com/d/msgid/qubes-devel/20151227174334.GF1533%40mail-itl. For \
more options, visit https://groups.google.com/d/optout.


[prev in list] [next in list] [prev in thread] [next in thread]