A new Qubes OS update is available: QSB-087: Qrexec: Injection of unsanitized data into log output
A Qrexec security update has been released for Qubes OS.Read more @ Linux Compatible