Qubes OS updates Weekly Review - Y2024-W51

Introduction

Weekly review of new packages uploaded to Qubes OS repositories. Link to previous version here.

Alphabetically sorted list of new packages uploaded to Qubes OS repositories
python3-fido2_1.1.2-3+deb12u1_all.deb
python3-fido2_1.1.2-3+deb13u1_all.deb
python3-fido2_1.1.2-3+jammy1_all.deb
python3-qubesadmin_4.3.8-1+deb12u1_amd64.deb
python3-qubesadmin_4.3.8-1+deb13u1_amd64.deb
python3-qubesadmin-4.3.8-1.fc39.noarch.rpm
python3-qubesadmin-4.3.8-1.fc40.noarch.rpm
python3-qubesadmin-4.3.8-1.fc41.noarch.rpm
python3-qubesadmin_4.3.8-1+jammy1_amd64.deb
python3-qubesadmin_4.3.8-1+noble1_amd64.deb
python3-splitgpg2_1.1.2+deb12u1_amd64.deb
python3-splitgpg2_1.1.2+deb13u1_amd64.deb
python3-splitgpg2_1.1.2+jammy1_amd64.deb
python3-splitgpg2_1.1.2+noble1_amd64.deb
qubes-core-admin-client_4.3.8-1+deb12u1_amd64.deb
qubes-core-admin-client_4.3.8-1+deb13u1_amd64.deb
qubes-core-admin-client-4.3.8-1.fc39.noarch.rpm
qubes-core-admin-client-4.3.8-1.fc40.noarch.rpm
qubes-core-admin-client-4.3.8-1.fc41.noarch.rpm
qubes-core-admin-client_4.3.8-1+jammy1_amd64.deb
qubes-core-admin-client_4.3.8-1+noble1_amd64.deb
qubes-core-dom0-4.3.14-1.fc41.noarch.rpm
qubes-core-dom0-linux-4.3.5-1.fc41.x86_64.rpm
qubes-core-dom0-linux-kernel-install-4.3.5-1.fc41.x86_64.rpm
qubes-core-dom0-vaio-fixes-4.3.5-1.fc41.x86_64.rpm
qubes-ctap_2.0.5+noble1_all.deb
qubes-mgmt-salt-dom0-virtual-machines-4.2.19-1.fc37.noarch.rpm
qubes-mgmt-salt-dom0-virtual-machines-4.2.19-1.fc41.noarch.rpm
qubes-template-fedora-41-4.2.0-202412200202.noarch.rpm
qubes-template-fedora-41-xfce-4.2.0-202412200202.noarch.rpm
qubes-u2f_2.0.5+noble1_all.deb
salt-3007.1-1.fc37.noarch.rpm
salt-3007.1-1.fc40.noarch.rpm
salt-3007.1-1.fc41.noarch.rpm
salt-api_3007.1-1+deb12u1_all.deb
salt-api_3007.1-1+deb13u1_all.deb
salt-api-3007.1-1.fc37.noarch.rpm
salt-api-3007.1-1.fc40.noarch.rpm
salt-api-3007.1-1.fc41.noarch.rpm
salt-api_3007.1-1+noble1_all.deb
salt-cloud_3007.1-1+deb12u1_all.deb
salt-cloud_3007.1-1+deb13u1_all.deb
salt-cloud-3007.1-1.fc37.noarch.rpm
salt-cloud-3007.1-1.fc40.noarch.rpm
salt-cloud-3007.1-1.fc41.noarch.rpm
salt-cloud_3007.1-1+noble1_all.deb
salt-common_3007.1-1+deb12u1_all.deb
salt-common_3007.1-1+deb13u1_all.deb
salt-common_3007.1-1+noble1_all.deb
salt-doc_3007.1-1+deb12u1_all.deb
salt-doc_3007.1-1+deb13u1_all.deb
salt-doc_3007.1-1+noble1_all.deb
salt-master_3007.1-1+deb12u1_all.deb
salt-master_3007.1-1+deb13u1_all.deb
salt-master-3007.1-1.fc37.noarch.rpm
salt-master-3007.1-1.fc40.noarch.rpm
salt-master-3007.1-1.fc41.noarch.rpm
salt-master_3007.1-1+noble1_all.deb
salt-minion_3007.1-1+deb12u1_all.deb
salt-minion_3007.1-1+deb13u1_all.deb
salt-minion-3007.1-1.fc37.noarch.rpm
salt-minion-3007.1-1.fc40.noarch.rpm
salt-minion-3007.1-1.fc41.noarch.rpm
salt-minion_3007.1-1+noble1_all.deb
salt-proxy_3007.1-1+deb12u1_all.deb
salt-proxy_3007.1-1+deb13u1_all.deb
salt-proxy_3007.1-1+noble1_all.deb
salt-ssh_3007.1-1+deb12u1_all.deb
salt-ssh_3007.1-1+deb13u1_all.deb
salt-ssh-3007.1-1.fc37.noarch.rpm
salt-ssh-3007.1-1.fc40.noarch.rpm
salt-ssh-3007.1-1.fc41.noarch.rpm
salt-ssh_3007.1-1+noble1_all.deb
salt-syndic_3007.1-1+deb12u1_all.deb
salt-syndic_3007.1-1+deb13u1_all.deb
salt-syndic-3007.1-1.fc37.noarch.rpm
salt-syndic-3007.1-1.fc40.noarch.rpm
salt-syndic-3007.1-1.fc41.noarch.rpm
salt-syndic_3007.1-1+noble1_all.deb
split-gpg2-1.1.2-1.fc40.noarch.rpm
split-gpg2-1.1.2-1.fc41.noarch.rpm
split-gpg2_1.1.2+deb12u1_all.deb
split-gpg2_1.1.2+deb13u1_all.deb
split-gpg2_1.1.2+jammy1_all.deb
split-gpg2_1.1.2+noble1_all.deb
split-gpg2-dom0-1.1.2-1.fc37.noarch.rpm
split-gpg2-tests-1.1.2-1.fc40.noarch.rpm
split-gpg2-tests-1.1.2-1.fc41.noarch.rpm
split-gpg2-tests_1.1.2+deb12u1_all.deb
split-gpg2-tests_1.1.2+deb13u1_all.deb
split-gpg2-tests_1.1.2+jammy1_all.deb
split-gpg2-tests_1.1.2+noble1_all.deb

Highlights

  • Sequoia Chameleon support for Split GPG.
  • Fedora 41 for sys-gui (and its variants)
  • Salt fix for Fedora 41 is available

Details

In addition to the usual minor fixes and patches:

  • app-linux-split-gpg2 v1.1.2 (r4.2 & r4.3)
    . Qubes Split GPG receives major update and fixes.
    . Sequoia Chameleon support for additional security benefit.

  • python-fido2 v1.1.2-3 (r4.2 & r4.3)
    Updated signing keys of some of the upstream developers

  • mgmt-salt-dom0-virtual-machines v4.2.19 (r4.2 & r4.3)
    sys-audio, sys-gui-gpu, sys-gui-vnc & sys-gui formulas are switched to Fedora 41

  • core-admin v4.3.14 (r4.3)
    Device protocol extension to distinguish audio, video and display adapters.

  • core-admin-client v4.3.8 (r4.3)
    Continuation of the above (pluse some other fixes)

  • salt v3007.1-1 (r4.2 & r4.3)
    The previous version of salt did not work with Fedora 41 (due to dnf5).

  • core-admin-linux v4.3.5 (r4.3)
    If another instance of apt-get is running during update, wait for it to finish

  • app-u2f v2.0.5 (r4.2)
    Adding a missing dependency for qubes-ctap-proxy

Epilogue

There has been few remaining bugs for Fedora 41 support which were missed during testing period. And they are being fixed quickly.

13 Likes

Does anyone have additional details on Sequoia Chameleon support? Simple as install and go or is additional configuration required?

2 Likes

These changes are added to testing repositories for the time. It could take months before they are added to stable repositories & fully documented.

1 Like