Qubes OS updates Weekly Review - Y2025-W10

General Discussion
,
1

Qubes OS updates Weekly Review - Y2025-W10

Introduction

Weekly review of new packages uploaded to Qubes OS repositories. Link to previous version here.

Alphabetically sorted list of new packages uploaded to Qubes OS repositories 
libqubesdb_4.3.0-1+deb12u1_amd64.deb
libqubesdb_4.3.0-1+deb13u1_amd64.deb
libqubesdb_4.3.0-1+jammy1_amd64.deb
libqubesdb_4.3.0-1+noble1_amd64.deb
libqubesdb-dbgsym_4.3.0-1+deb12u1_amd64.deb
libqubesdb-dbgsym_4.3.0-1+deb13u1_amd64.deb
libqubes-pure0_4.3.9+deb12u1_amd64.deb
libqubes-pure0_4.3.9+deb13u1_amd64.deb
libqubes-pure0_4.3.9+jammy1_amd64.deb
libqubes-pure0_4.3.9+noble1_amd64.deb
libqubes-pure0-dbgsym_4.3.9+deb12u1_amd64.deb
libqubes-pure0-dbgsym_4.3.9+deb13u1_amd64.deb
libqubes-pure-dev_4.3.9+deb12u1_amd64.deb
libqubes-pure-dev_4.3.9+deb13u1_amd64.deb
libqubes-pure-dev_4.3.9+jammy1_amd64.deb
libqubes-pure-dev_4.3.9+noble1_amd64.deb
libqubes-rpc-filecopy2_4.3.9+deb12u1_amd64.deb
libqubes-rpc-filecopy2_4.3.9+deb13u1_amd64.deb
libqubes-rpc-filecopy2_4.3.9+jammy1_amd64.deb
libqubes-rpc-filecopy2_4.3.9+noble1_amd64.deb
libqubes-rpc-filecopy2-dbgsym_4.3.9+deb12u1_amd64.deb
libqubes-rpc-filecopy2-dbgsym_4.3.9+deb13u1_amd64.deb
libqubes-rpc-filecopy-dev_4.3.9+deb12u1_amd64.deb
libqubes-rpc-filecopy-dev_4.3.9+deb13u1_amd64.deb
libqubes-rpc-filecopy-dev_4.3.9+jammy1_amd64.deb
libqubes-rpc-filecopy-dev_4.3.9+noble1_amd64.deb
python3-dnf-plugins-qubes-hooks-4.3.19-1.fc40.noarch.rpm
python3-qubesadmin_4.3.11-1+deb12u1_amd64.deb
python3-qubesadmin_4.3.11-1+deb13u1_amd64.deb
python3-qubesadmin-4.3.11-1.fc40.noarch.rpm
python3-qubesadmin-4.3.11-1.fc41.noarch.rpm
python3-qubesadmin-4.3.11-1.fc42.noarch.rpm
python3-qubesadmin_4.3.11-1+jammy1_amd64.deb
python3-qubesadmin_4.3.11-1+noble1_amd64.deb
python3-qubesadmin_4.3.12-1+deb12u1_amd64.deb
python3-qubesadmin_4.3.12-1+deb13u1_amd64.deb
python3-qubesadmin-4.3.12-1.fc40.noarch.rpm
python3-qubesadmin-4.3.12-1.fc41.noarch.rpm
python3-qubesadmin-4.3.12-1.fc42.noarch.rpm
python3-qubesadmin_4.3.12-1+jammy1_amd64.deb
python3-qubesadmin_4.3.12-1+noble1_amd64.deb
python3-qubesdb_4.3.0-1+deb12u1_amd64.deb
python3-qubesdb_4.3.0-1+deb13u1_amd64.deb
python3-qubesdb-4.3.0-1.fc40.x86_64.rpm
python3-qubesdb-4.3.0-1.fc41.x86_64.rpm
python3-qubesdb-4.3.0-1.fc42.x86_64.rpm
python3-qubesdb_4.3.0-1+jammy1_amd64.deb
python3-qubesdb_4.3.0-1+noble1_amd64.deb
python3-qubesdb-dbgsym_4.3.0-1+deb12u1_amd64.deb
python3-qubesdb-dbgsym_4.3.0-1+deb13u1_amd64.deb
python3-qubesimgconverter-4.3.9-1.fc40.x86_64.rpm
python3-qubesimgconverter-4.3.9-1.fc41.x86_64.rpm
python3-qubesimgconverter-4.3.9-1.fc42.x86_64.rpm
python3-qubesimgconverter_4.3.9+deb12u1_amd64.deb
python3-qubesimgconverter_4.3.9+deb13u1_amd64.deb
python3-qubesimgconverter_4.3.9+jammy1_amd64.deb
python3-qubesimgconverter_4.3.9+noble1_amd64.deb
qubes-audio-daemon_4.2.9-1+deb12u1_amd64.deb
qubes-audio-daemon_4.2.9-1+deb13u1_amd64.deb
qubes-audio-daemon-4.2.9-1.fc37.x86_64.rpm
qubes-audio-daemon-4.2.9-1.fc40.x86_64.rpm
qubes-audio-daemon-4.2.9-1.fc41.x86_64.rpm
qubes-audio-daemon_4.2.9-1+jammy1_amd64.deb
qubes-audio-daemon_4.2.9-1+noble1_amd64.deb
qubes-audio-daemon-dbgsym_4.2.9-1+deb12u1_amd64.deb
qubes-audio-daemon-dbgsym_4.2.9-1+deb13u1_amd64.deb
qubes-audio-dom0-4.2.9-1.fc37.x86_64.rpm
qubes-audio-dom0-4.2.9-1.fc40.x86_64.rpm
qubes-audio-dom0-4.2.9-1.fc41.x86_64.rpm
qubes-core-admin-client_4.3.11-1+deb12u1_amd64.deb
qubes-core-admin-client_4.3.11-1+deb13u1_amd64.deb
qubes-core-admin-client-4.3.11-1.fc40.noarch.rpm
qubes-core-admin-client-4.3.11-1.fc41.noarch.rpm
qubes-core-admin-client-4.3.11-1.fc42.noarch.rpm
qubes-core-admin-client_4.3.11-1+jammy1_amd64.deb
qubes-core-admin-client_4.3.11-1+noble1_amd64.deb
qubes-core-admin-client_4.3.12-1+deb12u1_amd64.deb
qubes-core-admin-client_4.3.12-1+deb13u1_amd64.deb
qubes-core-admin-client-4.3.12-1.fc40.noarch.rpm
qubes-core-admin-client-4.3.12-1.fc41.noarch.rpm
qubes-core-admin-client-4.3.12-1.fc42.noarch.rpm
qubes-core-admin-client_4.3.12-1+jammy1_amd64.deb
qubes-core-admin-client_4.3.12-1+noble1_amd64.deb
qubes-core-agent_4.3.19-1+deb12u1_amd64.deb
qubes-core-agent_4.3.19-1+deb13u1_amd64.deb
qubes-core-agent-4.3.19-1.fc40.x86_64.rpm
qubes-core-agent-4.3.19-1.fc41.x86_64.rpm
qubes-core-agent-4.3.19-1.fc42.x86_64.rpm
qubes-core-agent_4.3.19-1+jammy1_amd64.deb
qubes-core-agent_4.3.19-1+noble1_amd64.deb
qubes-core-agent-caja_4.3.19-1+deb12u1_amd64.deb
qubes-core-agent-caja_4.3.19-1+deb13u1_amd64.deb
qubes-core-agent-caja-4.3.19-1.fc40.x86_64.rpm
qubes-core-agent-caja-4.3.19-1.fc41.x86_64.rpm
qubes-core-agent-caja-4.3.19-1.fc42.x86_64.rpm
qubes-core-agent-caja_4.3.19-1+jammy1_amd64.deb
qubes-core-agent-caja_4.3.19-1+noble1_amd64.deb
qubes-core-agent-dbgsym_4.3.19-1+deb12u1_amd64.deb
qubes-core-agent-dbgsym_4.3.19-1+deb13u1_amd64.deb
qubes-core-agent-dom0-updates_4.3.19-1+deb12u1_amd64.deb
qubes-core-agent-dom0-updates_4.3.19-1+deb13u1_amd64.deb
qubes-core-agent-dom0-updates-4.3.19-1.fc40.noarch.rpm
qubes-core-agent-dom0-updates-4.3.19-1.fc41.noarch.rpm
qubes-core-agent-dom0-updates-4.3.19-1.fc42.noarch.rpm
qubes-core-agent-dom0-updates_4.3.19-1+jammy1_amd64.deb
qubes-core-agent-dom0-updates_4.3.19-1+noble1_amd64.deb
qubes-core-agent-nautilus_4.3.19-1+deb12u1_amd64.deb
qubes-core-agent-nautilus_4.3.19-1+deb13u1_amd64.deb
qubes-core-agent-nautilus-4.3.19-1.fc40.x86_64.rpm
qubes-core-agent-nautilus-4.3.19-1.fc41.x86_64.rpm
qubes-core-agent-nautilus-4.3.19-1.fc42.x86_64.rpm
qubes-core-agent-nautilus_4.3.19-1+jammy1_amd64.deb
qubes-core-agent-nautilus_4.3.19-1+noble1_amd64.deb
qubes-core-agent-networking_4.3.19-1+deb12u1_amd64.deb
qubes-core-agent-networking_4.3.19-1+deb13u1_amd64.deb
qubes-core-agent-networking-4.3.19-1.fc40.noarch.rpm
qubes-core-agent-networking-4.3.19-1.fc41.noarch.rpm
qubes-core-agent-networking-4.3.19-1.fc42.noarch.rpm
qubes-core-agent-networking_4.3.19-1+jammy1_amd64.deb
qubes-core-agent-networking_4.3.19-1+noble1_amd64.deb
qubes-core-agent-network-manager_4.3.19-1+deb12u1_amd64.deb
qubes-core-agent-network-manager_4.3.19-1+deb13u1_amd64.deb
qubes-core-agent-network-manager-4.3.19-1.fc40.noarch.rpm
qubes-core-agent-network-manager-4.3.19-1.fc41.noarch.rpm
qubes-core-agent-network-manager-4.3.19-1.fc42.noarch.rpm
qubes-core-agent-network-manager_4.3.19-1+jammy1_amd64.deb
qubes-core-agent-network-manager_4.3.19-1+noble1_amd64.deb
qubes-core-agent-passwordless-root_4.3.19-1+deb12u1_amd64.deb
qubes-core-agent-passwordless-root_4.3.19-1+deb13u1_amd64.deb
qubes-core-agent-passwordless-root-4.3.19-1.fc40.noarch.rpm
qubes-core-agent-passwordless-root-4.3.19-1.fc41.noarch.rpm
qubes-core-agent-passwordless-root-4.3.19-1.fc42.noarch.rpm
qubes-core-agent-passwordless-root_4.3.19-1+jammy1_amd64.deb
qubes-core-agent-passwordless-root_4.3.19-1+noble1_amd64.deb
qubes-core-agent-selinux-4.3.19-1.fc40.noarch.rpm
qubes-core-agent-selinux-4.3.19-1.fc41.noarch.rpm
qubes-core-agent-selinux-4.3.19-1.fc42.noarch.rpm
qubes-core-agent-systemd-4.3.19-1.fc40.x86_64.rpm
qubes-core-agent-systemd-4.3.19-1.fc41.x86_64.rpm
qubes-core-agent-systemd-4.3.19-1.fc42.x86_64.rpm
qubes-core-agent-thunar_4.3.19-1+deb12u1_amd64.deb
qubes-core-agent-thunar_4.3.19-1+deb13u1_amd64.deb
qubes-core-agent-thunar-4.3.19-1.fc40.x86_64.rpm
qubes-core-agent-thunar-4.3.19-1.fc41.x86_64.rpm
qubes-core-agent-thunar-4.3.19-1.fc42.x86_64.rpm
qubes-core-agent-thunar_4.3.19-1+jammy1_amd64.deb
qubes-core-agent-thunar_4.3.19-1+noble1_amd64.deb
qubes-core-dom0-4.3.20-1.fc41.noarch.rpm
qubes-core-dom0-linux-4.3.11-1.fc41.x86_64.rpm
qubes-core-dom0-linux-kernel-install-4.3.11-1.fc41.x86_64.rpm
qubes-core-dom0-vaio-fixes-4.3.11-1.fc41.x86_64.rpm
qubesdb_4.3.0-1+deb12u1_amd64.deb
qubesdb_4.3.0-1+deb13u1_amd64.deb
qubes-db-4.3.0-1.fc40.x86_64.rpm
qubes-db-4.3.0-1.fc41.x86_64.rpm
qubes-db-4.3.0-1.fc42.x86_64.rpm
qubesdb_4.3.0-1+jammy1_amd64.deb
qubesdb_4.3.0-1+noble1_amd64.deb
qubesdb-dbgsym_4.3.0-1+deb12u1_amd64.deb
qubesdb-dbgsym_4.3.0-1+deb13u1_amd64.deb
qubesdb-dev_4.3.0-1+deb12u1_amd64.deb
qubesdb-dev_4.3.0-1+deb13u1_amd64.deb
qubesdb-dev_4.3.0-1+jammy1_amd64.deb
qubesdb-dev_4.3.0-1+noble1_amd64.deb
qubes-db-devel-4.3.0-1.fc40.x86_64.rpm
qubes-db-devel-4.3.0-1.fc41.x86_64.rpm
qubes-db-devel-4.3.0-1.fc42.x86_64.rpm
qubes-db-dom0-4.3.0-1.fc41.x86_64.rpm
qubes-db-libs-4.3.0-1.fc40.x86_64.rpm
qubes-db-libs-4.3.0-1.fc41.x86_64.rpm
qubes-db-libs-4.3.0-1.fc42.x86_64.rpm
qubesdb-vm_4.3.0-1+deb12u1_amd64.deb
qubesdb-vm_4.3.0-1+deb13u1_amd64.deb
qubes-db-vm-4.3.0-1.fc40.x86_64.rpm
qubes-db-vm-4.3.0-1.fc41.x86_64.rpm
qubes-db-vm-4.3.0-1.fc42.x86_64.rpm
qubesdb-vm_4.3.0-1+jammy1_amd64.deb
qubesdb-vm_4.3.0-1+noble1_amd64.deb
qubes-db-vm-4.3.0-1-x86_64.pkg.tar.zst
qubes-db-vm-selinux-4.3.0-1.fc40.x86_64.rpm
qubes-db-vm-selinux-4.3.0-1.fc41.x86_64.rpm
qubes-db-vm-selinux-4.3.0-1.fc42.x86_64.rpm
qubes-gui-daemon_4.2.9-1+deb12u1_amd64.deb
qubes-gui-daemon_4.2.9-1+deb13u1_amd64.deb
qubes-gui-daemon-4.2.9-1.fc37.x86_64.rpm
qubes-gui-daemon-4.2.9-1.fc40.x86_64.rpm
qubes-gui-daemon-4.2.9-1.fc41.x86_64.rpm
qubes-gui-daemon_4.2.9-1+jammy1_amd64.deb
qubes-gui-daemon_4.2.9-1+noble1_amd64.deb
qubes-gui-daemon-dbgsym_4.2.9-1+deb12u1_amd64.deb
qubes-gui-daemon-dbgsym_4.2.9-1+deb13u1_amd64.deb
qubes-gui-daemon-pulseaudio_4.2.9-1+deb12u1_amd64.deb
qubes-gui-daemon-pulseaudio_4.2.9-1+deb13u1_amd64.deb
qubes-gui-daemon-pulseaudio_4.2.9-1+jammy1_amd64.deb
qubes-gui-daemon-pulseaudio_4.2.9-1+noble1_amd64.deb
qubes-gui-daemon-selinux-4.2.9-1.fc37.x86_64.rpm
qubes-gui-daemon-selinux-4.2.9-1.fc40.x86_64.rpm
qubes-gui-daemon-selinux-4.2.9-1.fc41.x86_64.rpm
qubes-gui-dom0-4.2.9-1.fc37.x86_64.rpm
qubes-gui-dom0-4.2.9-1.fc40.x86_64.rpm
qubes-gui-dom0-4.2.9-1.fc41.x86_64.rpm
qubes-kernel-vm-support-4.3.9-1.fc40.x86_64.rpm
qubes-kernel-vm-support-4.3.9-1.fc41.x86_64.rpm
qubes-kernel-vm-support-4.3.9-1.fc42.x86_64.rpm
qubes-kernel-vm-support_4.3.9+deb12u1_amd64.deb
qubes-kernel-vm-support_4.3.9+deb13u1_amd64.deb
qubes-kernel-vm-support_4.3.9+jammy1_amd64.deb
qubes-kernel-vm-support_4.3.9+noble1_amd64.deb
qubes-kernel-vm-support-dbgsym_4.3.9+deb12u1_amd64.deb
qubes-kernel-vm-support-dbgsym_4.3.9+deb13u1_amd64.deb
qubes-utils-4.3.9-1.fc40.x86_64.rpm
qubes-utils-4.3.9-1.fc41.x86_64.rpm
qubes-utils-4.3.9-1.fc42.x86_64.rpm
qubes-utils_4.3.9+deb12u1_amd64.deb
qubes-utils_4.3.9+deb13u1_amd64.deb
qubes-utils_4.3.9+jammy1_amd64.deb
qubes-utils_4.3.9+noble1_amd64.deb
qubes-utils-dbgsym_4.3.9+deb12u1_amd64.deb
qubes-utils-dbgsym_4.3.9+deb13u1_amd64.deb
qubes-utils-devel-4.3.9-1.fc40.x86_64.rpm
qubes-utils-devel-4.3.9-1.fc41.x86_64.rpm
qubes-utils-devel-4.3.9-1.fc42.x86_64.rpm
qubes-utils-libs-4.3.9-1.fc40.x86_64.rpm
qubes-utils-libs-4.3.9-1.fc41.x86_64.rpm
qubes-utils-libs-4.3.9-1.fc42.x86_64.rpm
qubes-utils-selinux-4.3.9-1.fc40.x86_64.rpm
qubes-utils-selinux-4.3.9-1.fc41.x86_64.rpm
qubes-utils-selinux-4.3.9-1.fc42.x86_64.rpm
qubes-vm-core-4.3.19-1-x86_64.pkg.tar.zst
qubes-vm-dom0-updates-4.3.19-1-x86_64.pkg.tar.zst
qubes-vm-kernel-support-4.3.9-1-x86_64.pkg.tar.zst
qubes-vm-keyring-4.3.19-1-x86_64.pkg.tar.zst
qubes-vm-networking-4.3.19-1-x86_64.pkg.tar.zst
qubes-vm-passwordless-root-4.3.19-1-x86_64.pkg.tar.zst
qubes-vm-utils-4.3.9-1-x86_64.pkg.tar.zst

Highlights

  • custom-persist advanced feature & service for minimal state AppVMs.

Preface

Before proceeding with the details, it is necessary to explain the custom-persist and minimal state AppVMs. So what is custom-persist and a minimal state AppVM? It is neither a traditional AppVM nor a DisposableVM. It has some of the benefits of both in certain scenarios, allowing user to configure persistence of some of the individual aspects of an AppVM. Looking at the updated online comprehensive documentation should provide better idea on custom-persist feature and how to use it.

Details

In addition to the usual minor fixes and patches (full list here):

  • core-admin v4.3.20 & v4.3.21 (r4.3)
    . Core parts of custom-persist implementation.
    . Core parts of boot mode support feature request. A mechanism for certain TemplateVMs (i.e. Whonix at the moment) which will switch to in-vm provided hardened Kernel to advertise their available Kernel parameters to dom0.
    . Allowing equal sign and coma in VM’s feature request for the above to work.

  • core-admin-linux v4.3.11 (r4.3)
    Enabling backports for Debian 12 Bookworm. This is for fairly up to date firmwares for newer hardware (e.g. Novacustom laptops) and pipewire which is not available in main repo. This will work only if you update the Debian 12 template via GUI Updater or the qubes-vm-update tool. Not via apt upgrade within TemplateVM.

  • core-agent-linux v4.3.19 (r4.3)
    . If custom-persist feature is present, /rw/config/qubes-bind-dirs.d file is ignored.
    . If custom-persist feature is present, /home and /usr/local will be volatile by default.
    . Custom mount binds for custom-persist via qubes-db.
    . If custom-persist feature is present, firewall scripts at /rw/config/qubes-firewall.d are ignored.
    . If custom-persist feature is present, user executable scripts at /rw/config/rc.local.d/*.rc and /rw/config/rc.local are ignored.
    . If custom-persist feature is present, Kernel modules blacklisting via /rw/config/suspend-module-blacklist is disabled.
    . custom-persist feature compatibility on systems with init.d rather than systemd.
    . Allowing to custom partial mount of files or directories with custom-persist.
    . Other custom-persist patches (there are too many).
    . Setting the order of default Terminal Emulator when you select Run Terminal from Qui Domains widget or App Menu. And a way to override the default order. This is discussed with @solene here.
    . Yet another fix for the notorious memory ballooning SELinux label issues.
    . Yet another fix for dnf5 compatibility issues.

  • gui-daemon v4.2.9 (r4.2)
    . Fixing an issue with Xwayland
    . Fixing an issue of wrong domain names with GUIVMs other than dom0
    . Fixing an issue with Ubuntu Noble support (while compiling)

  • core-admin-client v4.3.11 & 4.3.12 (r4.3) (r4.3)
    . minimal-netvm and minimal-usbvm features are documented. If you have more than one netvm (e.g. different ones for WiFi, Eithernet, 4G, …) or usbvms (maybe different USB PCIe cards attached to different usbvms), you can enable the mentioned features for them as well. So they would disable all unnecessary services and consume as little RAM as possible.
    . If you have created custom labels (colors) via any of the community tools, restoring backup of qubes with such labels failed if you did not create the exact label in destination machine before restoring. This issue is solved by reverting to red label while restoring such qubes.
    . Offline documentation for custom-persist feature & service for minimal state AppVMs.
    . qvm-volume clear command is implemented & documented.

  • core-qubesdb v4.3.0 (r4.3)
    qubesdb-daemon executable binary is moved from /usr/sbin to /usr/bin (for Fedora 42 compatibility).

  • linux-utils v4.3.9 (r4.3)
    meminfo-writer executable binary is moved from /usr/sbin to /usr/bin (for Fedora 42 compatibility).

Epilogue

There has been significant major developments on QWT recently. I had the intention to include them in this week’s newsletter. But since this edition is already very long (and delayed), I will postpone it for next week.

9 Likes