mirror of
https://github.com/QubesOS/qubes-doc.git
synced 2025-01-03 19:51:03 -05:00
820af56761
Those are fields used by the language switcher to correlate pages across different languages, even if they have different names/paths/titles. They are generated with the prepare_for_translation.py script.
38 lines
2.1 KiB
Markdown
38 lines
2.1 KiB
Markdown
---
|
|
lang: en
|
|
layout: doc
|
|
permalink: /security/xsa/
|
|
ref: 214
|
|
title: Xen Security Advisory (XSA) Tracker
|
|
---
|
|
|
|
Xen Security Advisory (XSA) Tracker
|
|
===================================
|
|
|
|
This tracker shows whether Qubes OS is affected by any given [Xen Security Advisory (XSA)][XSA].
|
|
Shortly after a new XSA is published, we will add a new row to this tracker.
|
|
Whenever Qubes is significantly affected by an XSA, a [Qubes Security Bulletin (QSB)][QSB] is published, and a link to that QSB is added to the row for the associated XSA.
|
|
|
|
Under the "Is Qubes Affected?" column, there are two possible values: **Yes** or **No**.
|
|
|
|
* **Yes** means that the *security* of Qubes OS *is* affected.
|
|
* **No** means that the *security* of Qubes OS is *not* affected.
|
|
|
|
Important Notes
|
|
---------------
|
|
|
|
* For the purpose of this tracker, we do *not* classify mere [denial-of-service (DoS) attacks][DoS] as affecting the *security* of Qubes OS.
|
|
Therefore, if an XSA pertains *only* to DoS attacks against Qubes, the value in the "Is Qubes Affected?" column will be **No**.
|
|
* For simplicity, we use the present tense ("is affected") throughout this page, but this does **not** necessarily mean that up-to-date Qubes installations are *currently* affected by any particular XSA.
|
|
In fact, it is extremely unlikely that any up-to-date Qubes installations are vulnerable to any XSAs on this page, since patches are almost always published concurrently with QSBs.
|
|
Please read the QSB (if any) for each XSA for patching details.
|
|
* Embargoed XSAs are excluded from this tracker until they are publicly released, since the [Xen Security Policy] does not permit us to state whether Qubes is affected prior to the embargo date.
|
|
* Unused and withdrawn XSA numbers are included in the tracker for the sake of completeness, but they are excluded from the [Statistics] section for the sake of accuracy.
|
|
* All dates are in UTC.
|
|
|
|
[XSA]: https://xenbits.xen.org/xsa/
|
|
[QSB]: /security/bulletins/
|
|
[DoS]: https://en.wikipedia.org/wiki/Denial-of-service_attack
|
|
[Xen Security Policy]: https://www.xenproject.org/security-policy.html
|
|
[Statistics]: #statistics
|