The Xen Project has released one or more Xen Security Advisories (XSAs). The security of Qubes OS is affected by one or more of these XSAs. Therefore, user action is required.

XSAs that affect the security of Qubes OS (user action required)

The following XSAs do affect the security of Qubes OS:

  • XSA-378
  • XSA-379
  • XSA-382

Please see QSB-070 for the actions users must take in order to protect themselves, as well as further details about these XSAs:

https://www.qubes-os.org/news/2021/08/25/qsb-070/

XSAs that do not affect the security of Qubes OS (no user action required)

The following XSAs do not affect the security of Qubes OS, and no user action is necessary:

  • XSA-380 (denial of service only)
  • XSA-383 (affects only Arm systems)