Qubes OS releases 4.3.2 with critical security patches

Qubes OS has released version 4.3.2, a stable patch build designed to consolidate all security updates and bug fixes issued since version 4.3.1. The update includes significant version bumps, raising the default Fedora template to Fedora 44 and upgrading the kernel-latest rolling kernel to Linux 7.2.

The release addresses critical security vulnerabilities, specifically two code-execution bulletins. Bulletin QSB-119 involves a flaw in the qvm-open-in-vm helper that could allow code execution within a target qube under specific conditions. Bulletin QSB-118 is noted as a more serious flaw in dom0 related to qvm-copy-to-vm, which could allow an attacker to seize control of the dom0 itself.

Users currently running Qubes OS 4.2 are urged to upgrade to the 4.3 series immediately, as the 4.2 series has reached its end of life. Existing 4.3 users can perform an in-place update, while new users can download a clean ISO from the official downloads page.