qubes-doc/security-info/xsa.md
2017-03-19 00:20:38 -07:00

77 lines
2.9 KiB
Markdown

---
layout: security
title: Xen Security Advisory (XSA) Tracker
permalink: /security/xsa/
---
Xen Security Advisory (XSA) Tracker
===================================
**Notice:** This page is still under construction.
Until this notice is removed, the information below may not be accurate.
We appreciate your patience.
This tracker shows whether Qubes OS is affected by any given [Xen Security Advisory (XSA)][XSA].
Shortly after a new XSA is published, we will add a new row to this tracker.
Whenever Qubes is significantly affected by an XSA, a [Qubes Security Bulletin (QSB)][QSB] is published, and a link to that QSB is added to the row for the associated XSA.
Under the "Is Qubes Affected?" column, there are two possible values: **Yes** or **No**.
* **Yes** means that the *security* of Qubes OS *is* affected.
* **No** means that the *security* of Qubes OS is *not* affected.
**Note:** For the purpose of this tracker, we do *not* classify mere [denial-of-service (DoS) attacks][DoS] as affecting the *security* of Qubes OS.
Therefore, if an XSA pertains *only* to DoS attacks against Qubes, the value in this column will be **No**.
<table>
<tr>
<th title="Anchor Link"><span class="fa fa-link"></span></th>
<th title="Xen Security Advisory">XSA</th>
<th>Is Qubes Affected?</th>
<th title="Qubes Security Bulletin">QSB</th>
<th>Comments</th>
</tr>
{% for xsa in site.data.xsa %}
<tr id="{{ xsa.xsa }}">
<td><a href="#{{ xsa.xsa }}" class="fa fa-link black-icon" title="Anchor link to tracker row: XSA-{{ xsa.xsa}}"></a></td>
<td>
{% if xsa.xsa <= 25 %}
<a href="https://wiki.xenproject.org/wiki/Security_Announcements_(Historical)" title="Xen Security Advisory {{ xsa.xsa }}">XSA-{{ xsa.xsa }}&nbsp;<span class="fa fa-external-link"></span></a>
{% else %}
<a href="https://xenbits.xen.org/xsa/advisory-{{ xsa.xsa }}.html" title="Xen Security Advisory {{ xsa.xsa }}">XSA-{{ xsa.xsa }}&nbsp;<span class="fa fa-external-link"></span></a>
{% endif %}
</td>
<td>
{% if xsa.affected == false %}
<abbr title="No, the security of Qubes OS is not affected by this XSA.">No</abbr>
{% elsif xsa.affected == true %}
<abbr title="Yes, the security of Qubes OS is affected by this XSA.">Yes</abbr>
{% else %}
{% endif %}
</td>
<td>
{% if xsa.qsb %}
<a href="https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qsb-{{ xsa.qsb }}.txt" title="Qubes Security Bulletin {{ xsa.qsb }}">QSB-{{ xsa.qsb }}&nbsp;<span class="fa fa-external-link"></span></a>
{% else %}
<abbr title="Not Applicable">N/A</abbr>
{% endif %}
</td>
<td>
{% if xsa.comments %}
{{ xsa.comments }}
{% elsif xsa.qsb %}
See QSB for details
{% else %}
None
{% endif %}
</td>
</tr>
{% endfor %}
</table>
[XSA]: https://xenbits.xen.org/xsa/
[QSB]: /security/bulletins/
[DoS]: https://en.wikipedia.org/wiki/Denial-of-service_attack