qubes-core-admin

Qubes コア、バージョン 3 これは Qubes OS コアの master ブランチです。 API ドキュメントはこちら: https://dev.qubes-os.org/projects/core-admin/en/latest/。...

qubes-mirage-firewall

qubes-mirage-firewall QubesOS の ProxyVM として実行でき、sys-firewall を置き換えるユニカーネルです。mirage-qubes ライブラリを使用して Qubes プロトコルを実装しています。 詳細は A Unikernel Firewall for QubesOS を参照してください。 バイナリリリース ビルド済みバイナリは リリースページ から入手できます。インストール手順については、以下の デプロイ セクションを参照してください。 ソースからビルド 注: 最も確実なビルド方法は Docker または Podman...

qvm-create-windows-qube

Qvm-Create-Windows-Qube 새 Windows 퀴브를 빠르고 쉽고 안전하게 구동합니다 소개 Qvm-Create-Windows-Qube는 새 Windows 퀴브를 Qubes Windows Tools QWT 드라이버와 함께 자동으로 신속하고 편리하게 설치하는 도구입니다. 공식적으로 Windows 7, 8.1, 10 및 Windows Server 2008 R2, 2012 R2, 20...

mofos

mofos コンセプト インストール ホストの設定 QEMU/KVMシステムセッション セキュリティ上の考慮事項 Mofosの設定 テンプレートのインストール ファイアウォールの設定 インストール インポート 上位レイヤーの空ディスクを作成 仮想マシンの作成 カスタマイズ テンプレート - フックのインストール 仮想マシン - 新規フック 仮想マシン - 起動フック 機能 VMの起動・停止時の通知設定 クリップボード マシン間のルーティング設定 ペンテストボックス経由のトンネリング設定 USB管理 PCIデバイス管理 共有フォルダ Windowsマシン 自動補完 IPアドレスの重複...

qubes-secpack

Qubes セキュリティパック qubes-secpack Qubes セキュリティパック qubes-secpack は、Qubes OS プロジェクトに関するセキュリティ関連情報を含む git リポジトリです。以下が含まれます: Qubes PGP 鍵 keys/ Qubes セキュリティ速報 QSBs/ Qubes カナリア canaries/ Qubes 資金情報 fund/ Qubes ISO ダイジェスト digests/ このリポジトリに含まれるファイルは、認証を次の 2 つの方法で行うことができます: git コミットタグの検証 git tag -v...

CVE-2026-82636

Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube, because the "system" library function is used to process an error message that may have shell metacharacters. This occurs in...

CVE-2026-82636

Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube, because the "system" library function is used to process an error message that may have shell metacharacters. This occurs in...

EUVD-2026-68212

Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube, because the "system" library function is used to process an error message that may have shell metacharacters. This occurs in...

CVE-2026-82636

Qubes OS (specifically qubes-core-dom0-linux before 4.3.22 ) is vulnerable to OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube. The root cause is the use of the system() library function in core-admin-linux/file-copy-vm/qfile-dom0-agent.c to process an er...

CVE-2026-82636

Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube, because the "system" library function is used to process an error message that may have shell metacharacters. This occurs in...

CVE-2026-82636: Improper Neutralization of Special Elements used in an OS Command

Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube, because the "system" library function is used to process an error message that may have shell metacharacters. This occurs in...

PT-2026-83556

Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled qube, because the "system" library function is used to process an error message that may have shell metacharacters. This occurs in...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: xen: Speed up grant-table reclaim When a grant entry is still in use by the remote domain, Linux must put it on a deferred list. Normally, this list is very short, because the PV network and block protocols expect the backend to...

SUSE CVE-2023-54081

In the Linux kernel, the following vulnerability has been resolved: xen: speed up grant-table reclaim When a grant entry is still in use by the remote domain, Linux must put it on a deferred list. Normally, this list is very short, because the PV network and block protocols expect the backend to...

CVE-2023-54081

In the Linux kernel, the following vulnerability has been resolved: xen: speed up grant-table reclaim When a grant entry is still in use by the remote domain, Linux must put it on a deferred list. Normally, this list is very short, because the PV network and block protocols expect the backend to...

CVE-2023-54081

In the Linux kernel, the following vulnerability has been resolved: xen: speed up grant-table reclaim When a grant entry is still in use by the remote domain, Linux must put it on a deferred list. Normally, this list is very short, because the PV network and block protocols expect the backend to...

UBUNTU-CVE-2023-54081

In the Linux kernel, the following vulnerability has been resolved: xen: speed up grant-table reclaim When a grant entry is still in use by the remote domain, Linux must put it on a deferred list. Normally, this list is very short, because the PV network and block protocols expect the backend to...

CVE-2023-54081

CVE-2023-54081 affects the Linux kernel Xen grant-table reclaim path. When a grant entry is still in use by the remote domain, the VM may accumulate a large deferred-list, causing a severe memory leak and potential VM freeze, notably in Qubes OS due to GUI/window handling constraints. The fix mak...

CVE-2023-54081 xen: speed up grant-table reclaim

In the Linux kernel, the following vulnerability has been resolved: xen: speed up grant-table reclaim When a grant entry is still in use by the remote domain, Linux must put it on a deferred list. Normally, this list is very short, because the PV network and block protocols expect the backend to...

Linux Distros Unpatched Vulnerability : CVE-2023-54081

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xen: speed up grant-table reclaim When a grant entry is still in use by the remote domain, Linux must put it on a deferred list. Normally, this list is very...