search

QubesOS / qubes-issues

The Qubes OS Project issue tracker
https://www.qubes-os.org/doc/issue-tracking/
535 stars 47 forks source link

Add rpmcanon to qvm-template #7080

Closed marmarek closed 2 years ago

marmarek commented 2 years ago

How to file a helpful issue

Add extra hardening of rpm package parsing to qvm-template, by using rpmcanon tool. Similar as we do with dom0 updates.

The value to a user, and who that user might be

More protection from maliciously malformed packages.

DemiMarie commented 2 years ago

Marking as P: blocker as this is (in at least one respect) a security regression compared to the old method of installing templates.

qubesos-bot commented 2 years ago

Automated announcement from builder-github

The component core-admin-client (including package python3-qubesadmin-4.1.19-1.fc32) has been pushed to the r4.1 testing repository for dom0. To test this update, please install it with the following command:

sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing

Changes included in this update

qubesos-bot commented 2 years ago

Automated announcement from builder-github

The package core-admin-client has been pushed to the r4.1 testing repository for the CentOS centos-stream8 template. To test this update, please install it with the following command:

sudo yum update --enablerepo=qubes-vm-r4.1-current-testing

Changes included in this update

qubesos-bot commented 2 years ago

Automated announcement from builder-github

The package qubes-core-admin-client_4.1.19-1 has been pushed to the r4.1 testing repository for the Debian template. To test this update, first enable the testing repository in /etc/apt/sources.list.d/qubes-*.list by uncommenting the line containing buster-testing (or appropriate equivalent for your template version), then use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

Changes included in this update

qubesos-bot commented 2 years ago

Automated announcement from builder-github

The component core-admin-client (including package python3-qubesadmin-4.1.19-1.fc32) has been pushed to the r4.1 testing repository for the Fedora template. To test this update, please install it with the following command:

sudo dnf update --enablerepo=qubes-vm-r4.1-current-testing

Changes included in this update

qubesos-bot commented 2 years ago

Automated announcement from builder-github

The package core-admin-client has been pushed to the r4.1 stable repository for the CentOS centos-stream8 template. To install this update, please use the standard update command:

sudo yum update

Changes included in this update

qubesos-bot commented 2 years ago

Automated announcement from builder-github

The package qubes-core-admin-client_4.1.19-1+deb10u1 has been pushed to the r4.1 stable repository for the Debian template. To install this update, please use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

Changes included in this update

qubesos-bot commented 2 years ago

Automated announcement from builder-github

The component core-admin-client (including package python3-qubesadmin-4.1.19-1.fc32) has been pushed to the r4.1 stable repository for the Fedora template. To install this update, please use the standard update command:

sudo dnf update

Changes included in this update

qubesos-bot commented 2 years ago

Automated announcement from builder-github

The component core-admin-client (including package python3-qubesadmin-4.1.19-1.fc32) has been pushed to the r4.1 stable repository for dom0. To install this update, please use the standard update command:

sudo qubes-dom0-update

Or update dom0 via Qubes Manager.

Changes included in this update