A lot of dom0 updates recently

[tetra...@danwin1210.me]

dom0 seems to be getting a lot of updates at the moment (3x in the last
1-2 weeks?) ... are there any security holes we should know about?

[Logan]

On 6/17/20 4:53 AM, tetrahedra via qubes-users wrote:
>
> dom0 seems to be getting a lot of updates at the moment (3x in the last
> 1-2 weeks?) ... are there any security holes we should know about?
>

> --
> You received this message because you are subscribed to the Google Groups "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/20200617045326.GA5613%40danwin1210.me.
>
I've been noticing this, too. Something interesting has been occurring
in about half of my Dom0 updates lately:


In the "details" section of the Qubes Updater it shows no detail, only:

--------


Fairly ambiguous. Did it even update?

Logan

[Lorenzo Lamas]

On Wednesday, June 17, 2020 at 11:09:31 AM UTC+2, tetra...@danwin1210.me wrote:

dom0 seems to be getting a lot of updates at the moment (3x in the last
1-2 weeks?) ... are there any security holes we should know about?

Hi,

Security issues are always published in Qubes Security Bulletins, which are also in the News section of Qubes website.
The only recent Security Bulletin is about the new Intel CPU vulnerabilities, but that isn't in the stable updates repository yet, so unless you updated dom0 with testing repository, all your recent updates are not security updates.

[tetra...@danwin1210.me]

On Fri, Jun 19, 2020 at 04:41:03AM +0000, Logan wrote:
>I've been noticing this, too. Something interesting has been occurring
>in about half of my Dom0 updates lately:
>
>
>In the "details" section of the Qubes Updater it shows no detail, only:
>
>--------
>
>
>Fairly ambiguous. Did it even update?

Same thing happening to me. Must be those NSA "ghost updates" when they
install the backdoor :)


note to tinfoil hat crowd: JUST KIDDING (hopefully)

[tetra...@danwin1210.me]

On Fri, Jun 19, 2020 at 07:28:52AM -0700, Lorenzo Lamas wrote:
>Security issues are always published in Qubes Security Bulletins, which
>are
>also in the News section of Qubes website.
>The only recent Security Bulletin is about the new Intel CPU
>vulnerabilities, but that isn't in the stable updates repository yet, so
>unless you updated dom0 with testing repository, all your recent updates
>are not security updates.

Thanks! Yes, I haven't seen any announcements, so that's why I was
wondering.