Marek Marczykowski-Górecki (www.qubes-os.org/team…eam)’s PGP signature -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEELRdx/k12ftx2sIn61lWk8hgw4GoFAmTJuBUACgkQ1lWk8hgw 4Grm8g/8D4eC/PRmV2Kl5CSDZ4XPsM0UeV0UF6GhlSNXbMwkx2kzNkTJpi9ftJcz cg/3y5z74aiVUFrHZmzya+PN+eza+Nh4AJdutuTwKs1TiUjiJ/hV0zt0mE+oUBa0 baQPbkFYciI7sv8q5TD5+P52ASgAd7IP0SAVp34sPPXZF1Mkw+Z4KcKR4Ua0pdzm /WjrNWrDWPUWNT3SAZ9qaPdzMjtmHBYv1746XlPNh4kTkWCYI6ppX2AFSs72w7H4 DVylnA49mVOza2+ZRw518+wSJWoMFnl7QStVqqSPeQ5Ycf/ZZKIQmZq569tq0cAE aYxA+eOTBG4u7sKBAWD7sMtmiJAmPm3g2NBjc27RdXawHlP1tgZeHXByfyRTAgBQ MhKagCPQe8QUKxjX22G2fbhqf8V9Efkej7GbvJFRACZDtl7p+HJlC5MaYDl3X6zJ iqMPjkLvdWz6dOGNy1djnF7rjaN8CsJHVbldSAsir6GWqBdjycRjzA4O3Z3ZuaRT UdVuGa+Ec8M8x44snBv67AhTDT8FycFNjIw/3kak69+7Kc7o/mTUOPJ4jjvNqq/M ku/a5m8RWPr9+Ysz2HOiqVvZqQ111M6nYCIxqJuEuyV5kqQMRwhl6vwbjjVZjTva 85KxOSQXPJgEz8jMTOPYBFZqLxOqf1mF4nuS0llMYkmlB3kgnSE= =gT88 -----END PGP SIGNATURE----- Source: github.com/QubesOS…marmarek Simon Gaiser (aka HW42) (www.qubes-os.org/team…eam)’s PGP signature -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEE6hjn8EDEHdrv6aoPSsGN4REuFJAFAmTJ60IACgkQSsGN4REu FJA+IBAAgYi9NRwzc5SKHtd/fyW7+FP5es/suMTkP8N2lmVRtfBvegbOFzIg7YQT wO3ix2wQjFmG0loWn6939O1I8NleOGv6L4FQJiJjWGXZsuqe8svatwOmMPYo41a3 kqknMU2X1CHG2cAlvdUiDfCF6wdbxIxj6JAUMXrr8lD6fnqdIk9dWQHeHMtUE/Lm 3orEU/trGHx4+p0g2DWQ/nmDT6FUXuGCBxBg0to2P6nLu8vuLYZ8woTcqBopSMgJ l7NYYQJQ69OA3jbpo1iKEzToapaTRT93pnvbcNo6WNrWiDmNcGRScpHE8eQhWzRm mpeqpK8U1XTN6EoWocA9G0Q6figHquNapK+qQeVWYjjfbxsNDZKiarNoe/R3J4jD rxHk9ebRLIP96UKP0TinO5SGRobnhwuLDiDv8c8eUjLc0rhZ6PgSZdgNVT5MFYab f5lW7C5E2TnBovKzV2VCmeFvT5oNa6cIzJ2usHRo5BFr53Jz2Wz41okkrGhUy2xX 2ezUuEcWOGirF3PZx0jGibD+jmw5I6TQlYetr5qcIXUL7gR5j6b8BlF8YncaeGbU 0tsSHWe97JX8xpoWiq70OeFToNSDhoh5M+Qr5LfeLKixj7VUT8m3Vn+XHnsn62aI WyfSwA+7XDv9rRrwy/8Ejj4KTRbW0ZYLwZlNuTtzYePmRQysvis= =omf2 -----END PGP SIGNATURE----- Source: github.com/QubesOS…ig.simon What is the purpose of this announcement? The purpose of this announcement is to inform the Qubes community that a new Qubes security bulletin (QSB) has been published. What is a Qubes security bulletin (QSB)? A Qubes security bulletin (QSB) is a security announcement issued by the Qubes security team (www.qubes-os.org/securit…security). A QSB typically provides a summary and impact analysis of one or more recently-discovered software vulnerabilities, including details about patching to address them. A list of all QSBs is available here (https://www.qubes-os.org/security/qsb/). Why should I care about QSBs? QSBs tell you what actions you must take in order to protect yourself from recently-discovered security vulnerabilities. In most cases, security vulnerabilities are addressed by updating normally (https://www.qubes-os.org/doc/how-to-update/). However, in some cases, special user action is required. In all cases, the required actions are detailed in QSBs. What are the PGP signatures that accompany QSBs? A PGP (en.wikipedia.org/wiki/Pr…_Privacy) signature is a cryptographic digital signature (https://en.wikipedia.org/wiki/Digital_signature) made in accordance with the OpenPGP (en.wikipedia.org/wiki/Pr…_Privacy) standard. PGP signatures can be cryptographically verified with programs like GNU Privacy Guard (GPG) (https://gnupg.org/). The Qubes security team cryptographically signs all QSBs so that Qubes users have a reliable way to check whether QSBs are genuine. The only way to be certain that a QSB is authentic is by verifying its PGP signatures. Why should I care whether a QSB is authentic?