[prev in list] [next in list] [prev in thread] [next in thread] 

List:       qubes-devel
Subject:    Re: [qubes-devel] Q about Fedora 21-23 security release notes
From:       Marek =?utf-8?Q?Marczykowski-G=C3=B3recki?= <marmarek () invisiblethingslab ! com>
Date:       2016-03-09 20:39:50
Message-ID: 20160309203950.GI6363 () mail-itl
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Wed, Mar 09, 2016 at 12:02:48PM -0800, Vladimir Shipovalov wrote:
> Qubes R3.1 release candidates are based on Fedora 20.
> If we look through Fedora 21-23 release notes, there are security related 
> notes, like
> insecure protocols/certificates rejection, package hardening, etc... that 
> seem to be important
> 
> 21 - 
> https://docs.fedoraproject.org/en-US/Fedora/21/html/Release_Notes/sect-Release_Notes-Changes_for_Sysadmin.html#idm225442632256
>  23 - 
> https://docs.fedoraproject.org/en-US/Fedora/23/html/Release_Notes/sect-Release_Notes-Changes_for_Sysadmin.html#idm263470541472
>  
> Please tell, have these changes been backported to Fedora 20 base of Qubes 
> OS?
> If yes, what about other security-side changes of Fedora 21-23, that are 
> not mentioned at release notes - have they been included as well?
> I just want to make sure that Fedora 20 base of Qubes OS - does not have 
> worse security, if compared to up-to-date version of Fedora 23

In short: thanks to Qubes OS architecture, it mostly doesn't matter.
For detailed explanation, see here:
https://www.qubes-os.org/doc/software-update-dom0/

- -- 
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQEcBAEBCAAGBQJW4IoXAAoJENuP0xzK19cseuQIAJQ5o4N2nQCxxb4+W3kMGEjo
P++/yxYt886xDTFEcGRJ6god/NoNcAf1j95dKzgucff165TnzLhb2S/tBebWZsVC
248clwQ82kYJAx4TphrSXtazCqLtkFudIqPLCgl784bqPfU9Tv7VvOnaoLCH4k3Y
VFPQhP1oymGg9kr9Bd+1V3UclX6jKSEYmthc8CP9k/4ZqfmuQP1Bhr8X5pi+Iuc6
gpL6J1oYNxLtApy2R7dIuYoySyMEweRH56G1RmW22ZHo/ZivkYN+yCxjdIUY8x2x
0IeJUq+ssmS04u8cwNuaXjXm0Ym4k5U/w0eaD6DC71/MCpGow8Dy5Z5PsuNl0LE=
=aPyP
-----END PGP SIGNATURE-----

-- 
You received this message because you are subscribed to the Google Groups \
"qubes-devel" group. To unsubscribe from this group and stop receiving emails from \
it, send an email to qubes-devel+unsubscribe@googlegroups.com. To post to this group, \
send email to qubes-devel@googlegroups.com. To view this discussion on the web visit \
https://groups.google.com/d/msgid/qubes-devel/20160309203950.GI6363%40mail-itl. For \
more options, visit https://groups.google.com/d/optout.


[prev in list] [next in list] [prev in thread] [next in thread]