Qubes OS. Contributions to hacker culture and cybersecurity knowledge.

Official Website Qubes OS

Qubes OS is a free and open-source, security-oriented operating system for single-user desktop computing. Qubes OS leverages Xen-based virtualization to allow for the creation and management of isolated compartments called qubes.

14 July

XSAs released on 2026-07-14

The Xen Project has released one or more Xen security advisories (XSAs). The security of Qubes OS is not affected. XSAs that DO affect the security of Qubes OS The following XSAs do affect the security of Qubes OS: (none) XSAs that DO NOT affect the security of Qubes OS The (…)

11 July

Last chance to take the 2026 user survey! (10-20 minutes)

As previously announced, Qubes OS User Survey 2026 will close on 2026-07-13. If you still wish to take the survey and haven’t completed it yet, please do so now. Whether you’re a long-time Qubes user or haven’t even installed it yet, we want to hear about your experiences (…)

29 June

Reminder: Take the 2026 user survey to help shape the future of Qubes! (10-20 minutes)

As previously announced, Qubes OS User Survey 2026 is currently live! The survey will remain open for two more weeks, until 2026-07-13. Whether you’re a long-time Qubes user or haven’t even installed it yet, we want to hear about your experiences and about what matters to (…)

21 June

Qubes OS 4.2 has reached end of life

As previously announced, the Qubes OS 4.2 release series has officially reached end of life (EOL) as of today, 2026-06-21. We strongly urge all remaining Qubes 4.2 users to upgrade to Qubes 4.3 immediately. Recommended actions If you’re already using Qubes 4.3, then you (…)

11 June

Qubes OS User Survey 2026: Shape the future of Qubes! (10-20 minutes)

Whether you’re a long-time Qubes user or haven’t even installed it yet, we want to hear about your experiences and about what matters to you. Help us make Qubes the best reasonably secure operating system it can be. If you’ve ever wanted to influence the development of Qubes, (…)

11 June

Qubes OS 4.3.1 has been released!

We’re pleased to announce the stable release of Qubes OS 4.3.1! This patch release aims to consolidate all the security updates and bug fixes that have occurred since the previous stable release. Our goal is to provide a secure and convenient way for users to install (or (…)

9 June

XSAs released on 2026-06-09

The Xen Project has released one or more Xen security advisories (XSAs). The security of Qubes OS is affected. XSAs that DO affect the security of Qubes OS The following XSAs do affect the security of Qubes OS: XSA-491: See QSB-115. XSAs that DO NOT affect the security of (…)

9 June

QSB-115: HVM I/O port list traversal (XSA-491)

We have published Qubes Security Bulletin (QSB) 115: HVM I/O port list traversal (XSA-491). The text of this QSB and its accompanying cryptographic signatures are reproduced below, followed by a general explanation of this announcement and authentication instructions. Qubes (…)

3 June

Qubes Canary 047

We have published Qubes Canary 047. The text of this canary and its accompanying cryptographic signatures are reproduced below. For an explanation of this announcement and instructions for authenticating this canary, please see the end of this announcement. Qubes Canary 047 (…)

28 May

Qubes OS 4.3.1-rc1 is available for testing

The first release candidate (RC) for Qubes OS 4.3.1 is now available for testing. This patch release aims to consolidate all the security patches, bug fixes, and other updates that have occurred since the release of Qubes 4.3.0. What’s new in Qubes 4.3.1? Default Fedora (…)

Citrix Secure Access and Endpoint Client for Windows Vulnerability Enables Privilege Escalation

Cloud Software Group has disclosed two security vulnerabilities affecting Citrix Secure Access Client for Windows and Citrix Endpoint Analysis Client for (…)

18 July

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

Updated July 18, 2026: the two flaws now carry CVE IDs, the full mechanism has been published, a persistent-object-cache condition has surfaced, and a (…)

17 July