Question about Qubes Windows Tools in 4.3

I’m happy to hear about the Qubes Windows Tools return, but with QSB-091 a while back and the documentation handling two supported Qubes versions, it has become a bit confusing for me.

I want to ask around before setting up Windows Templates:

  1. As far as I understand, the new QWT, unaffected by QSB-091, is now available by simply doing the following in 4.3?
[qubes43@dom0 ~]$ sudo qubes-dom0-update qubes-windows-tools
  1. Is the Windows 7 version of QWT (qubes-windows-tools-4.1.69) still subject to QSB-091 in 4.3 and 4.2?
    If I recall correctly, the Xen PV drivers have been rebuilt from source in QWT 4.2.2 (may be wrong), but is this the case for the older version?

My apologies if these questions seem a bit redundant; I would just like to clarify what needs to be done for the latest version versus 4.2.

A misguided user could believe they have to install the older version or download the .RPM directly from the current-testing hyperlink in the documentation.

1 Like

You must use the old QWT if you wish it to support Windows 7, and it will work satisfactorily if you install it exactly as described in the documentation. Of course, this will still be subject to QSB-091, but then, Windows 7 running under Qubes will still be much more secure than running Windows 7 natively. The new QWT will not work with Windows 7.

The new QWT will only work for Windows 10 and 11, with some problems in its graphics driver if you install that component. It will use newly built PV drivers, so it is no longer subject to QSB-091. Installation of the new QWT works using the command you gave above, and there is no need the install the old QWT before installing the new one.

3 Likes

are these cve’s addressed in the latest QWT?

CVE-2025-27462

CVE-2025-27463

CVE-2025-27464
1 Like

Thanks for your help!

1 Like

These CVEs should not be relevant for Qubes as it runs none of the affected software. The CVE description says:

This issue affects Windows VMs running on either XenServer 8.4 and Citrix Hypervisor 8.2 CU1 LTSR.