Seems like you missed this:
4 posts were split to a new topic: Whonix KVM Security Bug Report
And this:
In other words:
- A) please publish your previously private report in this forum thread: [INVALID] Whonix KVM Security Bug Report - SPICE remote desktop protocol listening on all network interfaces
- B) this is a different forum thread from A): Whonix KVM dnsmasq - listen port on host operating system - attack surface reduction