--
The Qubes Security Team
https://www.qubes-os.org/security/
Source: github.com/QubesOS…2023.txt
Marek Marczykowski-Górecki (www.qubes-os.org/team…eam)’s PGP signature
-----BEGIN PGP SIGNATURE-----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=JLOr
-----END PGP SIGNATURE-----
Source: github.com/QubesOS…marmarek
Simon Gaiser (aka HW42) (www.qubes-os.org/team…eam)’s PGP signature
-----BEGIN PGP SIGNATURE-----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=SZ6e
-----END PGP SIGNATURE-----
Source: github.com/QubesOS…ig.simon
What is the purpose of this announcement?
The purpose of this announcement is to inform the Qubes community that a new Qubes security bulletin (QSB) has been published.
What is a Qubes security bulletin (QSB)?
A Qubes security bulletin (QSB) is a security announcement issued by the Qubes security team (www.qubes-os.org/securit…security). A QSB typically provides a summary and impact analysis of one or more recently-discovered software vulnerabilities, including details about patching to address them. A list of all QSBs is available here (https://www.qubes-os.org/security/qsb/).
Why should I care about QSBs?
QSBs tell you what actions you must take in order to protect yourself from recently-discovered security vulnerabilities. In most cases, security vulnerabilities are addressed by updating normally (https://www.qubes-os.org/doc/how-to-update/). However, in some cases, special user action is required. In all cases, the required actions are detailed in QSBs.
What are the PGP signatures that accompany QSBs?
A PGP (en.wikipedia.org/wiki/Pr…_Privacy) signature is a cryptographic digital signature (https://en.wikipedia.org/wiki/Digital_signature) made in accordance with the OpenPGP (en.wikipedia.org/wiki/Pr…_Privacy) standard. PGP signatures can be cryptographically verified with programs like GNU Privacy Guard (GPG) (https://gnupg.org/). The Qubes security team cryptographically signs all QSBs so that Qubes users have a reliable way to check whether QSBs are genuine. The only way to be certain that a QSB is authentic is by verifying its PGP signatures.
Why should I care whether a QSB is authentic?
