Dear Qubes Community,
We're pleased to announce the stable release of Qubes OS 4.2.3! This patch release aims to consolidate all the security patches, bug fixes, and other updates that have occurred since the previous stable release. Our goal is to provide a secure and convenient way for users to install (or reinstall) the latest stable Qubes release with an up-to-date ISO. The ISO and associated [verification files](Verifying signatures | Qubes OS) are available on the [downloads](Download Qubes OS | Qubes OS) page.
## What's new in Qubes 4.2.3?
- All security updates to date
- All bug fixes to date
For more information about the changes included in this version, see the [Qubes OS 4.2 release notes](Qubes OS 4.2 release notes | Qubes OS) and the [full list of issues completed since the previous stable release](Issues · QubesOS/qubes-issues · GitHub).
## How to get Qubes 4.2.3
You have a couple different options, depending on your situation:
- If you'd like to install Qubes OS for the first time or perform a clean reinstallation on an existing system, there's never been a better time to do so! Simply [download](Download Qubes OS | Qubes OS) the Qubes 4.2.3 ISO and follow our [installation guide](Installation guide | Qubes OS).
- If you're currently on Qubes 4.2 (including 4.2.0, 4.2.1, 4.2.2, and 4.2.3-rc1), [update normally](How to update | Qubes OS) (which includes [upgrading any EOL templates](How to update | Qubes OS) you might have) in order to make your system essentially equivalent to the stable Qubes 4.2.3 release. No reinstallation or other special action is required.
- Please note that [Qubes 4.1 has reached end-of-life](Qubes OS 4.1 has reached end-of-life; extended security support continues until 2024-07-31 | Qubes OS) and [extended security support for Qubes 4.1 has ended](Extended security support for Qubes OS 4.1 has ended | Qubes OS). If you're still on Qubes 4.1 or an earlier release, you should [upgrade to Qubes 4.2 immediately](How to upgrade to Qubes 4.2 | Qubes OS).
In all cases, we strongly recommend [making a full backup](How to back up, restore, and migrate | Qubes OS) beforehand.
## Reminder: new signing key for Qubes 4.2
As a reminder for those upgrading from Qubes 4.1 and earlier, we published the following special announcement in [Qubes Canary 032](Qubes Canary 032 | Qubes OS) on 2022-09-14:
We plan to create a new Release Signing Key (RSK) for Qubes OS 4.2. Normally, we have only one RSK for each major release. However, for the 4.2 release, we will be using Qubes Builder version 2, which is a complete rewrite of the Qubes Builder. Out of an abundance of caution, we would like to isolate the build processes of the current stable 4.1 release and the upcoming 4.2 release from each other at the cryptographic level in order to minimize the risk of a vulnerability in one affecting the other. We are including this notice as a canary special announcement since introducing a new RSK for a minor release is an exception to our usual RSK management policy.
As always, we encourage you to [authenticate](Qubes security pack (qubes-secpack) | Qubes OS) this canary by [verifying its PGP signatures](Verifying signatures | Qubes OS). Specific instructions are also included in the [canary announcement](Qubes Canary 032 | Qubes OS).
As with all Qubes signing keys, we also encourage you to [authenticate](Verifying signatures | Qubes OS) the Qubes OS Release 4.2 Signing Key, which is available in the [Qubes Security Pack (qubes-secpack)](Qubes security pack (qubes-secpack) | Qubes OS) as well as on the [downloads](Download Qubes OS | Qubes OS) page.
## What is a patch release?
The Qubes OS Project uses the [semantic versioning](https://semver.org/) standard. Version numbers are written as `<major>.<minor>.<patch>`. Hence, we refer to releases that increment the third number as "patch releases." A patch release does not designate a separate, new major or minor release of Qubes OS. Rather, it designates its respective major or minor release (in this case, 4.2) inclusive of all updates up to a certain point. (See [supported releases](Supported releases | Qubes OS) for a comprehensive list of major and minor releases.) Installing the initial Qubes 4.2.0 release and fully [updating](How to update | Qubes OS) it results in essentially the same system as installing Qubes 4.2.3. You can learn more about how Qubes release versioning works in the [version scheme](Version scheme | Qubes OS) documentation.
This announcement is also available on the Qubes website: