qubes-doc/security-info/xsa.md

layout	title	permalink
security	Xen Security Advisory (XSA) Tracker	/security/xsa/

Xen Security Advisory (XSA) Tracker

Notice: This page is still under construction. Until this notice is removed, the information below may not be accurate. We appreciate your patience.

This tracker shows whether Qubes OS is affected by any given Xen Security Advisory (XSA). Shortly after a new XSA is published, we will add a new row to this tracker. Whenever Qubes is significantly affected by an XSA, a Qubes Security Bulletin (QSB) is published, and a link to that QSB is added to the row for the associated XSA.

Under the "Is Qubes Affected?" column, there are two possible values: Yes or No.

• Yes means that the security of Qubes OS is affected.
• No means that the security of Qubes OS is not affected.

Important Notes

• For the purpose of this tracker, we do not classify mere denial-of-service (DoS) attacks as affecting the security of Qubes OS. Therefore, if an XSA pertains only to DoS attacks against Qubes, the value in this column will be No.

• For simplicitly, we use the present tense ("is affected") throughout this page, but this does not necessarily mean that up-to-date Qubes installations are currently affected by any particular XSA. Please read the QSB (if any) for each XSA for patching details.

{% for xsa in site.data.xsa %} {% endfor %}

	Date	XSA	Is Qubes Affected?
	{{ xsa.date }}	XSA-{{ xsa.xsa }}	{% if xsa.affected == false %} {% if xsa.mitigation %} No ({{ xsa.mitigation }}) {% else %} No {% endif %} {% elsif xsa.affected == true %} Yes {% if xsa.qsb %} | QSB-{{ xsa.qsb }}  {% endif %} {% else %} {% endif %}