diff --git a/security-info/xsa.md b/security-info/xsa.md index 3170e3c4..d0d23029 100644 --- a/security-info/xsa.md +++ b/security-info/xsa.md @@ -20,51 +20,48 @@ Under the "Is Qubes Affected?" column, there are two possible values: **Yes** or * **Yes** means that the *security* of Qubes OS *is* affected. * **No** means that the *security* of Qubes OS is *not* affected. -**Note:** For the purpose of this tracker, we do *not* classify mere [denial-of-service (DoS) attacks][DoS] as affecting the *security* of Qubes OS. +Important Notes +--------------- + +* For the purpose of this tracker, we do *not* classify mere [denial-of-service (DoS) attacks][DoS] as affecting the *security* of Qubes OS. Therefore, if an XSA pertains *only* to DoS attacks against Qubes, the value in this column will be **No**. +* For simplicitly, we use the present tense ("is affected") throughout this page, but this does **not** necessarily mean that up-to-date Qubes installations are *currently* affected by any particular XSA. + Please read the QSB (if any) for each XSA for patching details. + - - {% for xsa in site.data.xsa %} - - {% endfor %}
XSA Is Qubes Affected?QSBComments
- {% if xsa.xsa <= 25 %} - XSA-{{ xsa.xsa }}  - {% else %} - XSA-{{ xsa.xsa }}  - {% endif %} + XSA-{{ xsa.xsa }}  {% if xsa.affected == false %} - No + {% if xsa.mitigation %} + No ({{ xsa.mitigation }}) + {% else %} + No + {% endif %} {% elsif xsa.affected == true %} - Yes + Yes + {% if xsa.qsb %} + | QSB-{{ xsa.qsb }}  + {% endif %} {% else %} {% endif %} - {% if xsa.qsb %} - QSB-{{ xsa.qsb }}  - {% else %} - N/A - {% endif %} - - {% if xsa.comments %} - {{ xsa.comments }} - {% elsif xsa.qsb %} - See QSB for details - {% else %} - None - {% endif %} -