https://www.qubes-os.org/news/2022/11/08/qsb-086/
QSB-086: Speculative security issues on AMD CPUs (XSA-422) | Qubes OS
We have just published Qubes Security Bulletin (QSB) 086: Speculative security issues on AMD CPUs (XSA-422). The text of this QSB is reproduced below. This QSB...
security issuesqsbspeculativeamdcpus
https://www.qubes-os.org/news/2022/06/09/qsb-080/
QSB-080: Issues with PV domains and PCI passthrough (XSA-401, XSA-402) | Qubes OS
We have just published Qubes Security Bulletin (QSB) 080: Issues with PV domains and PCI passthrough (XSA-401, XSA-402). The text of this QSB is reproduced...
qsbissuespvdomainspci
https://www.qubes-os.org/news/2021/09/09/qsb-071/
QSB-071: Fatal options filtering flaw in Split GPG | Qubes OS
Update: Please note that QSB-071 was updated on 2021-09-17. See below for the updated version, including the changelog. We have just published Qubes Security...
qsbfataloptionsfilteringflaw
https://www.qubes-os.org/news/2018/06/13/qsb-40-update/
Update for QSB #40: Information leaks due to processor speculative store bypass (XSA-263) | Qubes OS
Dear Qubes Community, We have updated Qubes Security Bulletin (QSB) #40: Information leaks due to processor speculative store bypass (XSA-263). The text of the...
updateqsbinformationleaksdue
https://www.qubes-os.org/news/2021/06/08/qsb-069/
QSB-069: Multiple Xen and Intel issues | Qubes OS
We have just published Qubes Security Bulletin (QSB) 069: Multiple Xen and Intel issues. The text of this QSB is reproduced below. This QSB and its...
qsbmultiplexenintelissues
https://www.qubes-os.org/news/2022/02/11/qsb-076/
QSB-076: Intel microcode updates | Qubes OS
We have just published Qubes Security Bulletin (QSB) 076: Intel microcode updates. The text of this QSB is reproduced below. This QSB and its accompanying...
qsbintelmicrocodeupdatesqubes
https://www.qubes-os.org/news/2018/02/20/qsb-38/
QSB #38: Qrexec policy bypass and possible information leak | Qubes OS
Dear Qubes Community, We have just published Qubes Security Bulletin (QSB) #38: Qrexec policy bypass and possible information leak. The text of this QSB is...
qsbpolicybypasspossibleinformation
https://www.qubes-os.org/news/2019/12/25/qsb-056/
QSB #056: Insufficient anti-spoofing firewall rules | Qubes OS
We have just published Qubes Security Bulletin (QSB) #056: Insufficient anti-spoofing firewall rules. The text of this QSB is reproduced below. This QSB and...
anti spoofingfirewall rulesqsbinsufficientqubes
https://www.qubes-os.org/news/2022/06/17/qsb-081/
QSB-081: x86: MMIO Stale Data vulnerabilities (XSA-404) | Qubes OS
We have just published Qubes Security Bulletin (QSB) 081: x86: MMIO Stale Data vulnerabilities (XSA-404). The text of this QSB is reproduced below. This QSB...
qsbstaledatavulnerabilitiesxsa
https://www.qubes-os.org/news/2023/07/24/qsb-090/
QSB-090: Zenbleed (CVE-2023-20593, XSA-433) | Qubes OS
Note: A newer version of this QSB has been published. See Update for QSB-090: Zenbleed (CVE-2023-20593, XSA-433). We have published Qubes Security Bulletin...
qsbcvexsaqubesos
https://www.qubes-os.org/news/2024/04/10/qsb-102/
QSB-102: Multiple speculative-execution vulnerabilities: Spectre-BHB, BTC/SRSO (XSA-455, XSA-456) |...
We have published Qubes Security Bulletin (QSB) 102: Multiple speculative-execution vulnerabilities: Spectre-BHB, BTC/SRSO (XSA-455, XSA-456). The text of this...
qsbmultiplespeculativeexecutionvulnerabilities
https://www.qubes-os.org/news/2023/08/08/qsb-092/
QSB-092: Buffer overrun in Linux netback driver (XSA-432) | Qubes OS
We have published Qubes Security Bulletin 092: Buffer overrun in Linux netback driver (XSA-432). The text of this QSB and its accompanying cryptographic...
qsbbufferoverrunlinuxdriver
https://www.qubes-os.org/news/2022/03/10/qsb-077/
QSB-077: Multiple speculative security issues (XSA-398) | Qubes OS
We have just published Qubes Security Bulletin (QSB) 077: Multiple speculative security issues (XSA-398). The text of this QSB is reproduced below. This QSB...
security issuesqsbmultiplespeculativexsa
https://www.qubes-os.org/news/2017/10/12/qsb-34/
QSB #34: GUI issue and Xen vulnerabilities (XSA-237 through XSA-244) | Qubes OS
Dear Qubes Community, We have just published Qubes Security Bulletin (QSB) #34: GUI issue and Xen vulnerabilities (XSA-237 through XSA-244). The text of this...
qsbguiissuexenvulnerabilities
https://quakewiki.org/wiki/QSB
QSB - Quake Wiki
qsbquakewiki
https://www.qubes-os.org/news/2023/08/02/qsb-090-update/
Update for QSB-090: Zenbleed (CVE-2023-20593, XSA-433) | Qubes OS
We have updated Qubes Security Bulletin 090: Zenbleed (CVE-2023-20593, XSA-433). The text of this updated QSB (including a changelog) and its accompanying...
updateqsbcvexsaqubes
https://www.qubes-os.org/news/2023/07/27/qsb-091/
QSB-091: Windows PV drivers potentially compromised | Qubes OS
We have published Qubes Security Bulletin 091: Windows PV drivers potentially compromised. The text of this QSB and its accompanying cryptographic signatures...
qsbwindowspvdriverspotentially
https://www.qubes-os.org/news/2018/01/24/qsb-37-update/
Update for QSB #37: Information leaks due to processor speculative execution bugs (XSA-254,...
Dear Qubes Community, We have just updated Qubes Security Bulletin (QSB) #37: Information leaks due to processor speculative execution bugs. The text of the...
updateqsbinformationleaksdue
https://www.qubes-os.org/news/2017/04/04/qsb-29/
QSB #29: Critical Xen bug in PV memory virtualization code (XSA-212) | Qubes OS
Dear Qubes community, We have just published Qubes Security Bulletin (QSB) #29: Critical Xen bug in PV memory virtualization code (XSA-212). The current text...
qsbcriticalxenbugpv
https://www.qubes-os.org/news/2023/11/15/qsb-097/
QSB-097: "Reptar" Intel redundant prefix vulnerability | Qubes OS
We have published Qubes Security Bulletin 097: “Reptar” Intel redundant prefix vulnerability. The text of this QSB and its accompanying cryptographic...
qsbintelredundantprefixvulnerability
https://www.qubes-os.org/news/2018/11/20/qsb-44/
QSB #44: Multiple Xen vulnerabilities (XSA-275, XSA-280) | Qubes OS
We have just published Qubes Security Bulletin (QSB) #44: Multiple Xen vulnerabilities (XSA-275, XSA-280). The text of this QSB is reproduced below. This QSB...
qsbmultiplexenvulnerabilitiesxsa
https://www.qubes-os.org/news/2021/11/24/qsb-074/
QSB-074: Xen issues related to populate-on-demand (XSA-388, XSA-389) | Qubes OS
We have just published Qubes Security Bulletin (QSB) 074: Xen issues related to populate-on-demand (XSA-388, XSA-389). The text of this QSB is reproduced...
issues relatedqsbxenpopulatedemand
https://www.qubes-os.org/news/2019/03/05/qsb-048/
QSB #048: Multiple Xen vulnerabilities | Qubes OS
We have just published Qubes Security Bulletin (QSB) #048: Multiple Xen vulnerabilities. The text of this QSB is reproduced below. This QSB and its...
qsbmultiplexenvulnerabilitiesqubes
https://www.qubes-os.org/news/2022/07/13/qsb-083/
QSB-083: Retbleed: Arbitrary speculative code execution with return instructions (XSA-407) | Qubes...
We have just published Qubes Security Bulletin (QSB) 083: Retbleed: Arbitrary speculative code execution with return instructions (XSA-407). The text of this...
code executionqsbarbitraryspeculativereturn
https://www.qubes-os.org/news/2019/05/15/qsb-049/
QSB #049: Microarchitectural Data Sampling speculative side channel (XSA-297) | Qubes OS
We have just published Qubes Security Bulletin (QSB) #049: Microarchitectural Data Sampling speculative side channel (XSA-297). The text of this QSB is...
microarchitectural dataside channelqsbsamplingspeculative
https://www.qubes-os.org/news/2022/08/06/qsb-084/
QSB-084: Split GPG: GnuPG file descriptor confusion and file existence leak | Qubes OS
We have just published Qubes Security Bulletin (QSB) 084: Split GPG: GnuPG file descriptor confusion and file existence leak. The text of this QSB is...
qsbsplitgpggnupgfile
https://www.qubes-os.org/news/2020/11/10/qsb-061/
QSB #061: Information leak via power sidechannel (XSA-351) | Qubes OS
We have just published Qubes Security Bulletin (QSB) #061: Information leak via power sidechannel (XSA-351). The text of this QSB is reproduced below. This QSB...
qsbinformationleakviapower
https://www.qubes-os.org/news/2018/05/08/qsb-39/
QSB #39: Xen vulnerability (XSA-260) and GUI daemon issue | Qubes OS
Dear Qubes Community, We have just published Qubes Security Bulletin (QSB) #39: Xen vulnerability (XSA-260) and GUI daemon issue. The text of this QSB is...
qsbxenvulnerabilityxsagui
https://www.qubes-os.org/news/2026/03/17/qsb-110/
QSB-110: Use after free of paging structures in EPT (XSA-480) | Qubes OS
We have published Qubes Security Bulletin (QSB) 110: Use after free of paging structures in EPT (XSA-480). The text of this QSB and its accompanying...
qsbusefreepagingstructures
https://www.qubes-os.org/news/2024/03/18/qsb-101-update/
Update for QSB-101: Register File Data Sampling (XSA-452) and Intel Processor Return Predictions...
Update (2024-03-25): Marek Marczykowski-Górecki’s PGP signature is now available. We have updated Qubes Security Bulletin (QSB) 101: Register File Data...
file dataintel processorupdateqsbregister
https://www.qubes-os.org/news/2022/07/05/qsb-082/
QSB-082: Memory management issues in PV frontend drivers | Qubes OS
We have just published Qubes Security Bulletin (QSB) 082: Memory management issues in PV frontend drivers. The text of this QSB is reproduced below. This QSB...
memory managementqsbissuespvfrontend
https://www.qubes-os.org/news/2024/03/13/qsb-101/
QSB-101: Register File Data Sampling (XSA-452) | Qubes OS
Note: A newer version of this QSB has been published. See Update for QSB-101: Register File Data Sampling (XSA-452) and Intel Processor Return Predictions...
file dataqsbregistersamplingxsa
https://www.qubes-os.org/news/2018/09/02/qsb-43/
QSB #43: L1 Terminal Fault speculative side channel (XSA-273) | Qubes OS
Dear Qubes Community, We have just published Qubes Security Bulletin (QSB) #43: L1 Terminal Fault speculative side channel (XSA-273). The text of this QSB is...
side channelqsbterminalfaultspeculative
https://www.qubes-os.org/news/2021/02/17/qsb-064/
QSB-064: Linux: error handling issues in blkback's grant mapping (XSA-365) | Qubes OS
We have just published Qubes Security Bulletin (QSB) 064: Linux: error handling issues in blkback’s grant mapping (XSA-365). The text of this QSB is reproduced...
error handlingqsblinuxissuesgrant
https://www.qubes-os.org/news/2026/04/19/qsb-112/
QSB-112: Floating Point Divider State Sampling (XSA-488) | Qubes OS
We have published Qubes Security Bulletin (QSB) 112: Floating Point Divider State Sampling (XSA-488). The text of this QSB and its accompanying cryptographic...
floating pointqsbdividerstatesampling
https://www.qubes-os.org/news/2018/08/14/qsb-42/
QSB #42: Linux netback driver OOB access in hash handling (XSA-270) | Qubes OS
Dear Qubes Community, We have just published Qubes Security Bulletin (QSB) #42: Linux netback driver OOB access in hash handling (XSA-270). The text of this...
qsblinuxdriveroobaccess
https://www.qubes-os.org/news/2025/08/14/qsb-109/
QSB-109: Intel microcode updates | Qubes OS
We have published Qubes Security Bulletin (QSB) 109: Intel microcode updates. The text of this QSB and its accompanying cryptographic signatures are reproduced...
qsbintelmicrocodeupdatesqubes
https://www.qubes-os.org/news/2024/01/19/qsb-099/
QSB-099: Qrexec policy leak via policy.RegisterArgument service | Qubes OS
We have published Qubes Security Bulletin 099: Qrexec policy leak via policy.RegisterArgument service. The text of this QSB and its accompanying cryptographic...
qsbpolicyleakviaservice
https://www.qubes-os.org/news/2019/11/26/qsb-054/
QSB #054: Xen fix for XSA-302 found ineffective in Qubes configuration (XSA-306) | Qubes OS
We have just published Qubes Security Bulletin (QSB) #054: Xen fix for XSA-302 found ineffective in Qubes configuration (XSA-306). The text of this QSB is...
qsbxenfixxsafound
https://www.qubes-os.org/news/2021/09/27/qsb-072/
QSB-072: Inconsistent handling of the override-redirect flag | Qubes OS
We have just published Qubes Security Bulletin (QSB) 072: Inconsistent handling of the override-redirect flag. The text of this QSB is reproduced below. This...
qsbinconsistenthandlingoverrideredirect
https://www.qubes-os.org/news/2025/05/15/qsb-107/
QSB-107: Multiple CPU branch prediction vulnerabilities | Qubes OS
We have published Qubes Security Bulletin (QSB) 107: Multiple CPU branch prediction vulnerabilities. The text of this QSB and its accompanying cryptographic...
qsbmultiplecpubranchprediction
https://www.qubes-os.org/news/2017/09/12/qsb-33/
QSB #33: Xen hypervisor (XSA-231 through XSA-234) | Qubes OS
Dear Qubes Community, We have just published Qubes Security Bulletin (QSB) #33: Xen hypervisor (XSA-231 through XSA-234). The text of this QSB is reproduced...
qsbxenhypervisorxsaqubes
https://www.qubes-os.org/news/2017/05/02/qsb-30/
QSB #30: Critical Xen bugs related to PV memory virtualization (XSA-213, XSA-214) | Qubes OS
Dear Qubes community, We have just published Qubes Security Bulletin (QSB) #30: Critical Xen bugs related to PV memory virtualization (XSA-213, XSA-214). The...
qsbcriticalxenbugsrelated
https://www.qubes-os.org/news/2023/08/09/qsb-093/
QSB-093: Transient execution vulnerabilities in AMD and Intel CPUs (CVE-2023-20569/XSA-434,...
We have published Qubes Security Bulletin 093: Transient execution vulnerabilities in AMD and Intel CPUs (CVE-2023-20569/XSA-434, CVE-2022-40982/XSA-435). The...
transient executionintel cpusqsbvulnerabilitiesamd
https://www.qubes-os.org/news/2021/02/19/qsb-065/
QSB-065: Missed flush in XSA-321 backport (XSA-366) | Qubes OS
We have just published Qubes Security Bulletin (QSB) 065: Missed flush in XSA-321 backport (XSA-366). The text of this QSB is reproduced below. This QSB and...
qsbmissedflushxsaqubes
https://www.osb-qsb.sk/
OSB dosky-QSB,Košice-drevo-stavba-dom-izolácia
Predaj OSB dosky, QSB dosky - Košice, Michalovce, Vranov nad Topľov, Sobrance, Sečovce, Moldava nad Bodvou, Rožňava, Prešov, Trebišov, Turňa nad Bodvou,
osbdoskyqsbdrevostavba
https://www.qubes-os.org/news/2017/11/28/qsb-36/
QSB #36: Xen hypervisor issue in populate-on-demand code (XSA-247) | Qubes OS
Dear Qubes Community, We have just published Qubes Security Bulletin (QSB) #36: Xen hypervisor issue in populate-on-demand code (XSA-247). The text of this QSB...
qsbxenhypervisorissuepopulate
https://www.qubes-os.org/news/2021/08/25/qsb-070/
QSB-070: Xen issues related to grant tables v2 and IOMMU | Qubes OS
We have just published Qubes Security Bulletin (QSB) 070: Xen issues related to grant tables v2 and IOMMU. The text of this QSB is reproduced below. This QSB...
issues relatedqsbxengranttables
https://www.qubes-os.org/news/2017/06/20/qsb-31/
QSB #31: Xen hypervisor vulnerabilities with unresearched impact (XSA 216-224) | Qubes OS
Dear Qubes community, We have just published Qubes Security Bulletin (QSB) #31: Xen hypervisor vulnerabilities with unresearched impact (XSA 216-224). The text...
qsbxenhypervisorvulnerabilitiesimpact
https://www.qubes-os.org/news/2019/12/11/qsb-055/
QSB #055: Issues with PV type change and handling IOMMU on AMD (XSA-310, XSA-311) | Qubes OS
We have just published Qubes Security Bulletin (QSB) #055: Issues with PV type change and handling IOMMU on AMD (XSA-310, XSA-311). The text of this QSB is...
qsbissuespvtypechange
https://www.qubes-os.org/news/2022/04/05/qsb-079/
QSB-079: Two IOMMU-related Xen issues (XSA-399, XSA-400) | Qubes OS
We have just published Qubes Security Bulletin (QSB) 079: Two IOMMU-related Xen issues (XSA-399, XSA-400). The text of this QSB is reproduced below. This QSB...
qsbtworelatedxenissues
https://www.qubes-os.org/news/2019/07/24/qsb-050/
QSB #050: Reinstalling a TemplateVM does not reset the private volume | Qubes OS
Update 2019-08-01: Fixed packages are now available. QSB #050 has been updated accordingly. We have just published Qubes Security Bulletin (QSB) #050:...
qsbresetprivatevolumequbes
https://www.qubes-os.org/news/2023/10/10/qsb-095/
QSB-095: Missing IOMMU TLB flushing on x86 AMD systems | Qubes OS
We have published Qubes Security Bulletin 095: Missing IOMMU TLB flushing on x86 AMD systems. The text of this QSB and its accompanying cryptographic...
qsbmissingtlbflushingamd
https://www.qubes-os.org/news/2020/10/20/qsb-060/
QSB #060: Multiple Xen issues (XSA-345, XSA-346, XSA-347) | Qubes OS
We have just published Qubes Security Bulletin (QSB) #060: Multiple Xen issues (XSA-345, XSA-346, XSA-347). The text of this QSB is reproduced below. This QSB...
qsbmultiplexenissuesxsa
https://www.qubes-os.org/news/2019/02/19/qsb-47/
QSB #47: Insecure default DisposableVM networking configuration | Qubes OS
We have just published Qubes Security Bulletin (QSB) #47: Insecure default DisposableVM networking configuration. The text of this QSB is reproduced below....
qsbinsecuredefaultnetworkingconfiguration
https://www.qubes-os.org/news/2023/12/15/qsb-098/
QSB-098: CPU microcode updates not loaded with dom0 kernel version 6.6.x | Qubes OS
We have published Qubes Security Bulletin 098: CPU microcode updates not loaded with dom0 kernel version 6.6.x. The text of this QSB and its accompanying...
qsbcpumicrocodeupdatesloaded
https://www.qubes-os.org/news/2024/10/17/qsb-105/
QSB-105: Missing enforced decorations for stubdomain windows under KDE | Qubes OS
We have published Qubes Security Bulletin (QSB) 105: Missing enforced decorations for stubdomain windows under KDE. The text of this QSB and its accompanying...
qsbmissingenforceddecorationswindows
https://www.qubes-os.org/news/2024/11/12/qsb-106/
QSB-106: Information disclosure through uninitialized memory in libxl | Qubes OS
We have published Qubes Security Bulletin (QSB) 106: Information disclosure through uninitialized memory in libxl. The text of this QSB and its accompanying...
information disclosureqsbmemoryqubes
https://www.qubes-os.org/news/2026/04/15/qsb-111/
QSB-111: xfce4-screensaver login bypass | Qubes OS
We have published Qubes Security Bulletin (QSB) 111: xfce4-screensaver login bypass. The text of this QSB and its accompanying cryptographic signatures are...
qsbscreensaverbypassqubesos
https://www.qubes-os.org/news/2017/10/25/qsb-35/
QSB #35: Xen hypervisor issue related to grant tables (XSA-236) | Qubes OS
Dear Qubes Community, We have published Qubes Security Bulletin (QSB) #35: Xen hypervisor issue related to grant tables (XSA-236). The text of this QSB is...
qsbxenhypervisorissuerelated
https://docs.zephyrproject.org/latest/boards/nxp/imx91_qsb/doc/index.html
i.MX91 QSB — Zephyr Project Documentation
zephyr projectqsbdocumentation
https://www.qubes-os.org/news/2023/09/27/qsb-094/
QSB-094: x86/AMD: Divide speculative information leak | Qubes OS
We have published Qubes Security Bulletin 094: x86/AMD: Divide speculative information leak. The text of this QSB and its accompanying cryptographic signatures...
qsbamddividespeculativeinformation
https://www.qubes-os.org/news/2023/11/14/qsb-096/
QSB-096: BTC/SRSO fixes not fully effective (XSA-446) | Qubes OS
We have published Qubes Security Bulletin 096: BTC/SRSO fixes not fully effective (XSA-446). The text of this QSB and its accompanying cryptographic signatures...
qsbbtcsrsofixesfully
https://www.qubes-os.org/news/2017/08/15/qsb-32/
QSB #32: Xen hypervisor and Linux kernel vulnerabilities (XSA-226 through XSA-230) | Qubes OS
Dear Qubes Community, We have just published Qubes Security Bulletin (QSB) #32: Xen hypervisor and Linux kernel vulnerabilities (XSA-226 through XSA-230). The...
linux kernelqsbxenhypervisorvulnerabilities
https://www.qubes-os.org/news/2024/07/16/qsb-103/
QSB-103: Double unlock in x86 guest IRQ handling (XSA-458) | Qubes OS
We have published Qubes Security Bulletin (QSB) 103: Double unlock in x86 guest IRQ handling (XSA-458). The text of this QSB and its accompanying cryptographic...
qsbdoubleunlockguesthandling
https://www.qubes-os.org/news/2020/06/11/qsb-057/
QSB #057: Special Register Buffer speculative side channel (XSA-320) | Qubes OS
We have just published Qubes Security Bulletin (QSB) #057: Special Register Buffer speculative side channel (XSA-320). The text of this QSB is reproduced...
side channelqsbspecialregisterbuffer
https://www.qubes-os.org/news/2021/03/03/qsb-066/
QSB-066: XML injection through libvirt domain configuration | Qubes OS
We have just published Qubes Security Bulletin (QSB) 066: XML injection through libvirt domain configuration. The text of this QSB is reproduced below. This...
domain configurationqsbxmlinjectionlibvirt
https://www.qubes-os.org/news/2023/05/11/qsb-089/
QSB-089: Qrexec: Memory corruption in service request handling | Qubes OS
We have published Qubes Security Bulletin (QSB) 089: Qrexec: Memory corruption in service request handling. The text of this QSB and its accompanying...
service requestqsbmemorycorruptionhandling