Qubes OS updates Weekly Review - Y2024-W19

Introduction

Following my previous weekly updates post, this is the 2nd instalment of the Qubes OS weekly review of new packages uploaded to Qubes OS repositories. I forgot to post the link to the script used to fetch the list of new packages per year/week. It needs rsync to run (and network of course). Run it with --help to see the syntax.

Alphabetically sorted list of new packages for Y2024-W19
disk-password-gui_1.0.0-1+jammy1_amd64.deb
grubby-dummy-9.0.0-4.fc40.noarch.rpm
libqrexec-utils2_4.2.19-1+deb12u1_amd64.deb
libqrexec-utils2_4.2.19-1+deb13u1_amd64.deb
libqrexec-utils2_4.2.19-1+jammy1_amd64.deb
libqrexec-utils2-dbgsym_4.2.19-1+deb12u1_amd64.deb
libqrexec-utils2-dbgsym_4.2.19-1+deb13u1_amd64.deb
libqrexec-utils-dev_4.2.19-1+deb12u1_amd64.deb
libqrexec-utils-dev_4.2.19-1+deb13u1_amd64.deb
libqrexec-utils-dev_4.2.19-1+jammy1_amd64.deb
libqubesdb_4.2.5-1+deb13u1_amd64.deb
libqubesdb-dbgsym_4.2.5-1+deb13u1_amd64.deb
pipewire-qubes_4.2.14-1+deb13u1_amd64.deb
pipewire-qubes_4.2.14-1+jammy1_amd64.deb
pipewire-qubes-dbgsym_4.2.14-1+deb13u1_amd64.deb
pulseaudio-qubes_4.2.14-1+deb13u1_amd64.deb
pulseaudio-qubes_4.2.14-1+jammy1_amd64.deb
pulseaudio-qubes-dbgsym_4.2.14-1+deb13u1_amd64.deb
python3-dnf-plugins-qubes-hooks-4.2.33-1.fc37.noarch.rpm
python3-dnf-plugins-qubes-hooks-4.2.33-1.fc38.noarch.rpm
python3-dnf-plugins-qubes-hooks-4.2.33-1.fc39.noarch.rpm
python3-dnf-plugins-qubes-hooks-4.2.33-1.fc40.noarch.rpm
python3-qrexec_4.2.19-1+deb12u1_amd64.deb
python3-qrexec_4.2.19-1+deb13u1_amd64.deb
python3-qrexec_4.2.19-1+jammy1_amd64.deb
python3-qubesadmin_4.2.12-1+deb13u1_amd64.deb
python3-qubesadmin-4.2.12-1.fc37.noarch.rpm
python3-qubesdb_4.2.5-1+deb13u1_amd64.deb
python3-qubesdb-dbgsym_4.2.5-1+deb13u1_amd64.deb
python3-qubesimgconverter-4.2.16-1.fc37.x86_64.rpm
python3-qubesimgconverter-4.2.16-1.fc39.x86_64.rpm
python3-qubesimgconverter-4.2.16-1.fc40.x86_64.rpm
python3-qubes-menu_1.1.5-1+jammy1_amd64.deb
python3-qubes-menu_1.2.0-1+deb12u1_amd64.deb
python3-qubes-menu_1.2.0-1+deb13u1_amd64.deb
python3-qubes-menu_1.2.0-1+jammy1_amd64.deb
python3-qui_4.2.21-1+deb12u1_amd64.deb
python3-qui_4.2.21-1+deb13u1_amd64.deb
python3-qui_4.2.21-1+jammy1_amd64.deb
python3-splitgpg2_1.0.0+jammy1_amd64.deb
qubes-audio-daemon_4.2.7-1+deb13u1_amd64.deb
qubes-audio-daemon-dbgsym_4.2.7-1+deb13u1_amd64.deb
qubes-core-admin-client_4.2.12-1+deb13u1_amd64.deb
qubes-core-admin-client-4.2.12-1.fc37.noarch.rpm
qubes-core-agent_4.2.32-1+deb13u1_amd64.deb
qubes-core-agent_4.2.33-1+deb12u1_amd64.deb
qubes-core-agent_4.2.33-1+deb13u1_amd64.deb
qubes-core-agent-4.2.33-1.fc37.x86_64.rpm
qubes-core-agent-4.2.33-1.fc38.x86_64.rpm
qubes-core-agent-4.2.33-1.fc39.x86_64.rpm
qubes-core-agent-4.2.33-1.fc40.x86_64.rpm
qubes-core-agent_4.2.33-1+jammy1_amd64.deb
qubes-core-agent-caja_4.2.32-1+deb13u1_amd64.deb
qubes-core-agent-caja_4.2.33-1+deb12u1_amd64.deb
qubes-core-agent-caja_4.2.33-1+deb13u1_amd64.deb
qubes-core-agent-caja-4.2.33-1.fc37.x86_64.rpm
qubes-core-agent-caja-4.2.33-1.fc38.x86_64.rpm
qubes-core-agent-caja-4.2.33-1.fc39.x86_64.rpm
qubes-core-agent-caja-4.2.33-1.fc40.x86_64.rpm
qubes-core-agent-caja_4.2.33-1+jammy1_amd64.deb
qubes-core-agent-dbgsym_4.2.32-1+deb13u1_amd64.deb
qubes-core-agent-dbgsym_4.2.33-1+deb12u1_amd64.deb
qubes-core-agent-dbgsym_4.2.33-1+deb13u1_amd64.deb
qubes-core-agent-dom0-updates_4.2.32-1+deb13u1_amd64.deb
qubes-core-agent-dom0-updates_4.2.33-1+deb12u1_amd64.deb
qubes-core-agent-dom0-updates_4.2.33-1+deb13u1_amd64.deb
qubes-core-agent-dom0-updates-4.2.33-1.fc37.noarch.rpm
qubes-core-agent-dom0-updates-4.2.33-1.fc38.noarch.rpm
qubes-core-agent-dom0-updates-4.2.33-1.fc39.noarch.rpm
qubes-core-agent-dom0-updates-4.2.33-1.fc40.noarch.rpm
qubes-core-agent-dom0-updates_4.2.33-1+jammy1_amd64.deb
qubes-core-agent-nautilus_4.2.32-1+deb13u1_amd64.deb
qubes-core-agent-nautilus_4.2.33-1+deb12u1_amd64.deb
qubes-core-agent-nautilus_4.2.33-1+deb13u1_amd64.deb
qubes-core-agent-nautilus-4.2.33-1.fc37.x86_64.rpm
qubes-core-agent-nautilus-4.2.33-1.fc38.x86_64.rpm
qubes-core-agent-nautilus-4.2.33-1.fc39.x86_64.rpm
qubes-core-agent-nautilus-4.2.33-1.fc40.x86_64.rpm
qubes-core-agent-nautilus_4.2.33-1+jammy1_amd64.deb
qubes-core-agent-networking_4.2.32-1+deb13u1_amd64.deb
qubes-core-agent-networking_4.2.33-1+deb12u1_amd64.deb
qubes-core-agent-networking_4.2.33-1+deb13u1_amd64.deb
qubes-core-agent-networking-4.2.33-1.fc37.noarch.rpm
qubes-core-agent-networking-4.2.33-1.fc38.noarch.rpm
qubes-core-agent-networking-4.2.33-1.fc39.noarch.rpm
qubes-core-agent-networking-4.2.33-1.fc40.noarch.rpm
qubes-core-agent-networking_4.2.33-1+jammy1_amd64.deb
qubes-core-agent-network-manager_4.2.32-1+deb13u1_amd64.deb
qubes-core-agent-network-manager_4.2.33-1+deb12u1_amd64.deb
qubes-core-agent-network-manager_4.2.33-1+deb13u1_amd64.deb
qubes-core-agent-network-manager-4.2.33-1.fc37.noarch.rpm
qubes-core-agent-network-manager-4.2.33-1.fc38.noarch.rpm
qubes-core-agent-network-manager-4.2.33-1.fc39.noarch.rpm
qubes-core-agent-network-manager-4.2.33-1.fc40.noarch.rpm
qubes-core-agent-network-manager_4.2.33-1+jammy1_amd64.deb
qubes-core-agent-passwordless-root_4.2.32-1+deb13u1_amd64.deb
qubes-core-agent-passwordless-root_4.2.33-1+deb12u1_amd64.deb
qubes-core-agent-passwordless-root_4.2.33-1+deb13u1_amd64.deb
qubes-core-agent-passwordless-root-4.2.33-1.fc37.noarch.rpm
qubes-core-agent-passwordless-root-4.2.33-1.fc38.noarch.rpm
qubes-core-agent-passwordless-root-4.2.33-1.fc39.noarch.rpm
qubes-core-agent-passwordless-root-4.2.33-1.fc40.noarch.rpm
qubes-core-agent-passwordless-root_4.2.33-1+jammy1_amd64.deb
qubes-core-agent-selinux-4.2.33-1.fc37.noarch.rpm
qubes-core-agent-selinux-4.2.33-1.fc38.noarch.rpm
qubes-core-agent-selinux-4.2.33-1.fc39.noarch.rpm
qubes-core-agent-selinux-4.2.33-1.fc40.noarch.rpm
qubes-core-agent-systemd-4.2.33-1.fc37.x86_64.rpm
qubes-core-agent-systemd-4.2.33-1.fc38.x86_64.rpm
qubes-core-agent-systemd-4.2.33-1.fc39.x86_64.rpm
qubes-core-agent-systemd-4.2.33-1.fc40.x86_64.rpm
qubes-core-agent-thunar_4.2.32-1+deb13u1_amd64.deb
qubes-core-agent-thunar_4.2.33-1+deb12u1_amd64.deb
qubes-core-agent-thunar_4.2.33-1+deb13u1_amd64.deb
qubes-core-agent-thunar-4.2.33-1.fc37.x86_64.rpm
qubes-core-agent-thunar-4.2.33-1.fc38.x86_64.rpm
qubes-core-agent-thunar-4.2.33-1.fc39.x86_64.rpm
qubes-core-agent-thunar-4.2.33-1.fc40.x86_64.rpm
qubes-core-agent-thunar_4.2.33-1+jammy1_amd64.deb
qubes-core-dom0-4.2.25-1.fc37.noarch.rpm
qubes-core-dom0-4.2.26-1.fc37.noarch.rpm
qubes-core-dom0-linux-4.2.22-1.fc37.x86_64.rpm
qubes-core-dom0-linux-4.2.23-1.fc37.x86_64.rpm
qubes-core-dom0-linux-kernel-install-4.2.22-1.fc37.x86_64.rpm
qubes-core-dom0-linux-kernel-install-4.2.23-1.fc37.x86_64.rpm
qubes-core-dom0-vaio-fixes-4.2.22-1.fc37.x86_64.rpm
qubes-core-dom0-vaio-fixes-4.2.23-1.fc37.x86_64.rpm
qubes-core-qrexec-4.1.26-1.el8.x86_64.rpm
qubes-core-qrexec_4.2.19-1+deb12u1_amd64.deb
qubes-core-qrexec_4.2.19-1+deb13u1_amd64.deb
qubes-core-qrexec-4.2.19-1.fc37.x86_64.rpm
qubes-core-qrexec-4.2.19-1.fc38.x86_64.rpm
qubes-core-qrexec-4.2.19-1.fc39.x86_64.rpm
qubes-core-qrexec-4.2.19-1.fc40.x86_64.rpm
qubes-core-qrexec_4.2.19-1+jammy1_amd64.deb
qubes-core-qrexec-dbgsym_4.2.19-1+deb12u1_amd64.deb
qubes-core-qrexec-dbgsym_4.2.19-1+deb13u1_amd64.deb
qubes-core-qrexec-devel-4.1.26-1.el8.x86_64.rpm
qubes-core-qrexec-devel-4.2.19-1.fc37.x86_64.rpm
qubes-core-qrexec-devel-4.2.19-1.fc38.x86_64.rpm
qubes-core-qrexec-devel-4.2.19-1.fc39.x86_64.rpm
qubes-core-qrexec-devel-4.2.19-1.fc40.x86_64.rpm
qubes-core-qrexec-dom0-4.2.19-1.fc37.x86_64.rpm
qubes-core-qrexec-libs-4.1.26-1.el8.x86_64.rpm
qubes-core-qrexec-libs-4.2.19-1.fc37.x86_64.rpm
qubes-core-qrexec-libs-4.2.19-1.fc38.x86_64.rpm
qubes-core-qrexec-libs-4.2.19-1.fc39.x86_64.rpm
qubes-core-qrexec-libs-4.2.19-1.fc40.x86_64.rpm
qubes-core-qrexec-vm-4.1.26-1.el8.x86_64.rpm
qubes-core-qrexec-vm-4.2.19-1.fc37.x86_64.rpm
qubes-core-qrexec-vm-4.2.19-1.fc38.x86_64.rpm
qubes-core-qrexec-vm-4.2.19-1.fc39.x86_64.rpm
qubes-core-qrexec-vm-4.2.19-1.fc40.x86_64.rpm
qubes-core-qrexec-vm-selinux-4.2.19-1.fc37.x86_64.rpm
qubes-core-qrexec-vm-selinux-4.2.19-1.fc38.x86_64.rpm
qubes-core-qrexec-vm-selinux-4.2.19-1.fc39.x86_64.rpm
qubes-core-qrexec-vm-selinux-4.2.19-1.fc40.x86_64.rpm
qubesdb_4.2.5-1+deb13u1_amd64.deb
qubesdb-dbgsym_4.2.5-1+deb13u1_amd64.deb
qubesdb-dev_4.2.5-1+deb13u1_amd64.deb
qubesdb-vm_4.2.5-1+deb13u1_amd64.deb
qubes-desktop-linux-manager_4.2.21-1+deb12u1_amd64.deb
qubes-desktop-linux-manager_4.2.21-1+deb13u1_amd64.deb
qubes-desktop-linux-manager-4.2.21-1.fc37.noarch.rpm
qubes-desktop-linux-manager-4.2.21-1.fc38.noarch.rpm
qubes-desktop-linux-manager-4.2.21-1.fc39.noarch.rpm
qubes-desktop-linux-manager-4.2.21-1.fc40.noarch.rpm
qubes-desktop-linux-manager_4.2.21-1+jammy1_amd64.deb
qubes-desktop-linux-menu_1.1.5-1+jammy1_amd64.deb
qubes-desktop-linux-menu_1.2.0-1+deb12u1_amd64.deb
qubes-desktop-linux-menu_1.2.0-1+deb13u1_amd64.deb
qubes-desktop-linux-menu-1.2.0-1.fc37.noarch.rpm
qubes-desktop-linux-menu-1.2.0-1.fc38.noarch.rpm
qubes-desktop-linux-menu-1.2.0-1.fc39.noarch.rpm
qubes-desktop-linux-menu-1.2.0-1.fc40.noarch.rpm
qubes-desktop-linux-menu_1.2.0-1+jammy1_amd64.deb
qubes-dist-upgrade-4.1.6-1.fc32.noarch.rpm
qubes-gpg-split_2.0.71-1+deb13u1_amd64.deb
qubes-gpg-split-dbgsym_2.0.71-1+deb13u1_amd64.deb
qubes-gpg-split-tests_2.0.71-1+deb13u1_amd64.deb
qubes-gui-agent_4.2.14-1+deb13u1_amd64.deb
qubes-gui-agent_4.2.14-1+jammy1_amd64.deb
qubes-gui-agent-dbgsym_4.2.14-1+deb13u1_amd64.deb
qubes-gui-agent-xfce_4.2.14-1+deb13u1_amd64.deb
qubes-gui-agent-xfce_4.2.14-1+jammy1_amd64.deb
qubes-gui-daemon_4.2.7-1+deb13u1_amd64.deb
qubes-gui-daemon-dbgsym_4.2.7-1+deb13u1_amd64.deb
qubes-gui-daemon-pulseaudio_4.2.7-1+deb13u1_amd64.deb
qubes-gui-vnc_4.2.14-1+deb13u1_amd64.deb
qubes-gui-vnc_4.2.14-1+jammy1_amd64.deb
qubes-img-converter_1.2.16-1+jammy1_amd64.deb
qubes-img-converter-1.2.16-1-x86_64.pkg.tar.zst
qubes-input-proxy-receiver_1.0.36-1+deb13u1_amd64.deb
qubes-input-proxy-receiver-dbgsym_1.0.36-1+deb13u1_amd64.deb
qubes-input-proxy-sender_1.0.36-1+deb13u1_amd64.deb
qubes-input-proxy-sender-dbgsym_1.0.36-1+deb13u1_amd64.deb
qubes-kernel-vm-support-4.2.16-1.fc37.x86_64.rpm
qubes-kernel-vm-support-4.2.16-1.fc39.x86_64.rpm
qubes-kernel-vm-support-4.2.16-1.fc40.x86_64.rpm
qubes-template-fedora-39-minimal-4.0.6-202405082135.noarch.rpm
qubes-template-fedora-40-xfce-4.3.0-202405120234.noarch.rpm
qubes-utils-4.2.16-1.fc37.x86_64.rpm
qubes-utils-4.2.16-1.fc39.x86_64.rpm
qubes-utils-4.2.16-1.fc40.x86_64.rpm
qubes-utils-devel-4.2.16-1.fc37.x86_64.rpm
qubes-utils-devel-4.2.16-1.fc39.x86_64.rpm
qubes-utils-devel-4.2.16-1.fc40.x86_64.rpm
qubes-utils-libs-4.2.16-1.fc37.x86_64.rpm
qubes-utils-libs-4.2.16-1.fc39.x86_64.rpm
qubes-utils-libs-4.2.16-1.fc40.x86_64.rpm
qubes-utils-selinux-4.2.16-1.fc37.x86_64.rpm
qubes-utils-selinux-4.2.16-1.fc39.x86_64.rpm
qubes-utils-selinux-4.2.16-1.fc40.x86_64.rpm
qubes-video-companion_1.0.7-1+deb13u1_all.deb
qubes-video-companion_1.0.7-1+jammy1_all.deb
qubes-vm-core-4.2.33-1-x86_64.pkg.tar.zst
qubes-vm-keyring-4.2.33-1-x86_64.pkg.tar.zst
qubes-vm-networking-4.2.33-1-x86_64.pkg.tar.zst
qubes-vm-passwordless-root-4.2.33-1-x86_64.pkg.tar.zst
qubes-vm-qrexec-4.2.19-1-x86_64.pkg.tar.zst
scrypt-1.3.2-1.fc39.x86_64.rpm
split-gpg2_1.0.0+jammy1_all.deb
split-gpg2-tests_1.0.0+jammy1_all.deb
xen-hvm-stubdom-linux-4.2.13-1.fc37.x86_64.rpm
xen-hvm-stubdom-linux-full-4.2.13-1.fc37.x86_64.rpm
xserver-xorg-input-qubes_4.2.14-1+deb13u1_amd64.deb
xserver-xorg-input-qubes_4.2.14-1+jammy1_amd64.deb
xserver-xorg-input-qubes-dbgsym_4.2.14-1+deb13u1_amd64.deb
xserver-xorg-qubes-common_4.2.14-1+deb13u1_amd64.deb
xserver-xorg-qubes-common_4.2.14-1+jammy1_amd64.deb
xserver-xorg-qubes-common-dbgsym_4.2.14-1+deb13u1_amd64.deb
xserver-xorg-video-dummyqbs_4.2.14-1+deb13u1_amd64.deb
xserver-xorg-video-dummyqbs_4.2.14-1+jammy1_amd64.deb
xserver-xorg-video-dummyqbs-dbgsym_4.2.14-1+deb13u1_amd64.deb

Minor issues while reviewing

  • Some of relatively old software are being packaged and uploaded for Debian/Ubuntu. The 1st item in the above list is disk-password-gui which has not received any update in 6 month and is now packaged for Ubuntu Jammy 22.04. Some CI/CD glitch?
  • The discrepancy of .deb, .rpm, .zst package names between Distros could be confusing. For example libqrexec-utils2, libqrexec-utils-dev, python3-qrexec, qubes-core-qrexec for Debian, qubes-vm-qrexec for Archlinux, qubes-qrexec* for Fedora are from the same Repo. Maybe unifying package names would make cross-distro trouble-shooting easier.

Highlights

  • Many r4.1 builds are being dropped. I am not going to cover r4.1 updates anymore but rather focus on r4.2 & r4.3. If you are on r4.1, please upgrade.
  • Updater is receiving some major fixes.
  • Audio system is still going through major changes.
  • AppMenu received a major upgrade
  • The underlying qrexec received lots of updates

Details

  • qubes-core-admin 4.2.26 - The deprecated pkg_resources lib was removed and replaced with importlib which triggered a lot of packages to be rebuilt. Some unit tests.
  • qubes-core-admin-linux 4.2.22 & 23 - Fixes to the updater. Running qubes-vm-update as root will not break it for non-root user. VM will not be targeted for reboot if update is not successful. Some other changes.
  • qubes-core-agent-linux 4.2.33 - The connect-tcp-direct commit is not something ordinary users should worry about. Mostly improvements to UpdateProxy.
  • qubes-core-qrexec 4.2.19 - A lot of fixes. Pages and pages of commit messages. Some address pending issues on Github. These are fundamental improvements to qrexec. Mostly nothing end user would notice
  • qubes-desktop-linux-manager 4.2.21 - This received some fixes for updater.
  • qubes-desktop-linux-menu 1.2.0 - AppMenu received a major update which I discussed before here.
  • qubes-linux-utils 4.2.16 - Some unit tests and CI/CD fixes. Improvement for qrexec Unicode filtering. Some Math and Currency symbols are now displayed.
  • qubes-vmm-xen-stubdom-linux 4.2.13 - A collection of major fixes for Audio System. Something ordinary users who have issues with sound should care about. Dynamic audiovm switching.
13 Likes

Thanks for posting this, such summaries are very useful!

What might be interesting also, is watching Issues · QubesOS/updates-status · GitHub - all updates have entries there, and there is a script that try to summarize what has changed where.

This is related to fixing builder issues especially affecting jammy, but also trixie. There will be more of those, both for R4.2 and R4.3.

Not really, most of related PRs are not merged yet, see Replace deprecated pkg_resources with non-deprecated python modules · Issue #9195 · QubesOS/qubes-issues · GitHub. And BTW the version merged here has a bug, fixed in tests: fix extra tests loader after migrating to importlib · QubesOS/qubes-core-admin@d2c8096 · GitHub (will land in current-testing today-ish).

Indeed, shouldn’t be visible to the user much, but there are several performance improvements that may be noticeable in some cases (the updates proxy is the most prominent one). Tracking issue at core-qrexec v4.2.19 (r4.2) · Issue #4681 · QubesOS/updates-status · GitHub, with all the other issues listed there. This one will stay in current-testing for quite some time to get some solid testing, due to the volume of changes.

7 Likes

4.1 will still be maintained for a few extra months

2 Likes

That is correct. But most probably it won’t receive any specific unique update.