Arbitrary code execution in QubesOS via copy-to-VM error reporting backchannel

Automated excerpt

We have published Qubes Security Bulletin (QSB) 118: Dom0 arbitrary code execution in qvm-copy-to-vm error reporting. A Qubes security bulletin (QSB) is a security announcement issued by the Qubes security team. Import the included PGP keys. (See our PGP key policies for important information about these keys. ) gpg: no valid OpenPGP data found. gpg: no valid OpenPGP data found. gpg: no valid OpenPGP data found.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.