corresponding qubes-secpack.git repo tags. [2]

[2] Don't just trust the contents of this file blindly! Verify the
digital signatures! Instructions for doing so are documented here:
https://doc.qubes-os.org/en/latest/project-security/security-pack.html

--
The Qubes Security Team
https://www.qubes-os.org/security/



Source: canary-048-2026.txt (https://github.com/QubesOS/qubes-secpack/blob/f1378920daaaad3e338fa18aa972da074bc45aef/canaries/canary-048-2026.txt)

Marek Marczykowski-Górecki (https://www.qubes-os.org/team/#marek-marczykowski-g%C3%B3recki)’s PGP signature

-----BEGIN PGP SIGNATURE-----
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=wcFj
-----END PGP SIGNATURE-----


Source: canary-048-2026.txt.sig.marmarek (https://github.com/QubesOS/qubes-secpack/blob/f1378920daaaad3e338fa18aa972da074bc45aef/canaries/canary-048-2026.txt.sig.marmarek)

Simon Gaiser (aka HW42) (https://www.qubes-os.org/team/#simon-gaiser-aka-hw42)’s PGP signature

-----BEGIN PGP SIGNATURE-----
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=vexT
-----END PGP SIGNATURE-----


Source: canary-048-2026.txt.sig.simon (https://github.com/QubesOS/qubes-secpack/blob/f1378920daaaad3e338fa18aa972da074bc45aef/canaries/canary-048-2026.txt.sig.simon)

What is the purpose of this announcement?

The purpose of this announcement is to inform the Qubes community that a new Qubes canary has been published.

What is a Qubes canary?

A Qubes canary (https://www.qubes-os.org/security/canary/) is a security announcement periodically issued by the Qubes security team (https://doc.qubes-os.org/en/latest/project-security/security.html#qubes-security-team) consisting of several statements to the effect that the signers of the canary have not been compromised. The idea is that, as long as signed canaries including such statements continue to be published, all is well. However, if the canaries should suddenly cease, if one or more signers begin declining to sign them, or if the included statements change significantly without plausible explanation, then this may indicate that something has gone wrong.

The name originates from the practice in which miners would bring caged canaries into coal mines. If the level of methane gas in the mine reached a dangerous level, the canary would die, indicating to miners that they should evacuate. (See the Wikipedia article on warrant canaries (https://en.wikipedia.org/wiki/Warrant_canary) for more information, but bear in mind that Qubes Canaries are not strictly limited to legal warrants.)