Qubes OS updates Weekly Review - Y2025-W12

Qubes OS updates Weekly Review - Y2025-W12

Introduction

Weekly review of new packages uploaded to Qubes OS repositories. Link to previous version here.

Alphabetically sorted list of new packages uploaded to Qubes OS repositories
grub2-common-2.06-7.fc41.noarch.rpm
grub2-efi-ia32-2.06-7.fc41.x86_64.rpm
grub2-efi-ia32-cdboot-2.06-7.fc41.x86_64.rpm
grub2-efi-ia32-modules-2.06-7.fc41.noarch.rpm
grub2-efi-x64-2.06-7.fc41.x86_64.rpm
grub2-efi-x64-cdboot-2.06-7.fc41.x86_64.rpm
grub2-efi-x64-modules-2.06-7.fc41.noarch.rpm
grub2-pc-2.06-7.fc41.x86_64.rpm
grub2-pc-modules-2.06-7.fc41.noarch.rpm
grub2-tools-2.06-7.fc41.x86_64.rpm
grub2-tools-efi-2.06-7.fc41.x86_64.rpm
grub2-tools-extra-2.06-7.fc41.x86_64.rpm
grub2-tools-minimal-2.06-7.fc41.x86_64.rpm
kernel-61-6.1.131-1.qubes.fc37.x86_64.rpm
kernel-61-devel-6.1.131-1.qubes.fc37.x86_64.rpm
kernel-61-modules-6.1.131-1.qubes.fc37.x86_64.rpm
kernel-61-qubes-vm-6.1.131-1.qubes.fc37.x86_64.rpm
kernel-66-6.6.83-1.qubes.fc37.x86_64.rpm
kernel-66-devel-6.6.83-1.qubes.fc37.x86_64.rpm
kernel-66-modules-6.6.83-1.qubes.fc37.x86_64.rpm
kernel-66-qubes-vm-6.6.83-1.qubes.fc37.x86_64.rpm
kernel-latest-6.13.7-1.qubes.fc37.x86_64.rpm
kernel-latest-6.13.7-1.qubes.fc41.x86_64.rpm
kernel-latest-devel-6.13.7-1.qubes.fc37.x86_64.rpm
kernel-latest-devel-6.13.7-1.qubes.fc41.x86_64.rpm
kernel-latest-modules-6.13.7-1.qubes.fc37.x86_64.rpm
kernel-latest-modules-6.13.7-1.qubes.fc41.x86_64.rpm
kernel-latest-qubes-vm-6.13.7-1.qubes.fc37.x86_64.rpm
kernel-latest-qubes-vm-6.13.7-1.qubes.fc41.x86_64.rpm
libvchan-xen1_4.2.7-1+deb12u1_amd64.deb
libvchan-xen1_4.2.7-1+deb13u1_amd64.deb
libvchan-xen1_4.2.7-1+jammy1_amd64.deb
libvchan-xen1_4.2.7-1+noble1_amd64.deb
libvchan-xen1-dbgsym_4.2.7-1+deb12u1_amd64.deb
libvchan-xen1-dbgsym_4.2.7-1+deb13u1_amd64.deb
libvchan-xen-dev_4.2.7-1+deb12u1_amd64.deb
libvchan-xen-dev_4.2.7-1+deb13u1_amd64.deb
libvchan-xen-dev_4.2.7-1+jammy1_amd64.deb
libvchan-xen-dev_4.2.7-1+noble1_amd64.deb
python3-dnf-plugins-qubes-hooks-4.3.20-1.fc40.noarch.rpm
python3-qubes-menu_1.2.3-1+deb12u1_amd64.deb
python3-qubes-menu_1.2.3-1+deb13u1_amd64.deb
python3-qubes-menu_1.2.3-1+jammy1_amd64.deb
python3-qubes-menu_1.2.3-1+noble1_amd64.deb
qubes-audio-daemon_4.3.8-1+deb12u1_amd64.deb
qubes-audio-daemon-4.3.8-1.fc40.x86_64.rpm
qubes-audio-daemon-4.3.8-1.fc41.x86_64.rpm
qubes-audio-daemon-4.3.8-1.fc42.x86_64.rpm
qubes-audio-daemon_4.3.8-1+jammy1_amd64.deb
qubes-audio-daemon_4.3.8-1+noble1_amd64.deb
qubes-audio-daemon-dbgsym_4.3.8-1+deb12u1_amd64.deb
qubes-audio-dom0-4.3.8-1.fc40.x86_64.rpm
qubes-audio-dom0-4.3.8-1.fc41.x86_64.rpm
qubes-audio-dom0-4.3.8-1.fc42.x86_64.rpm
qubes-core-agent_4.3.20-1+deb12u1_amd64.deb
qubes-core-agent_4.3.20-1+deb13u1_amd64.deb
qubes-core-agent-4.3.20-1.fc40.x86_64.rpm
qubes-core-agent-4.3.20-1.fc41.x86_64.rpm
qubes-core-agent-4.3.20-1.fc42.x86_64.rpm
qubes-core-agent_4.3.20-1+jammy1_amd64.deb
qubes-core-agent_4.3.20-1+noble1_amd64.deb
qubes-core-agent-caja_4.3.20-1+deb12u1_amd64.deb
qubes-core-agent-caja_4.3.20-1+deb13u1_amd64.deb
qubes-core-agent-caja-4.3.20-1.fc40.x86_64.rpm
qubes-core-agent-caja-4.3.20-1.fc41.x86_64.rpm
qubes-core-agent-caja-4.3.20-1.fc42.x86_64.rpm
qubes-core-agent-caja_4.3.20-1+jammy1_amd64.deb
qubes-core-agent-caja_4.3.20-1+noble1_amd64.deb
qubes-core-agent-dbgsym_4.3.20-1+deb12u1_amd64.deb
qubes-core-agent-dbgsym_4.3.20-1+deb13u1_amd64.deb
qubes-core-agent-dom0-updates_4.3.20-1+deb12u1_amd64.deb
qubes-core-agent-dom0-updates_4.3.20-1+deb13u1_amd64.deb
qubes-core-agent-dom0-updates-4.3.20-1.fc40.noarch.rpm
qubes-core-agent-dom0-updates-4.3.20-1.fc41.noarch.rpm
qubes-core-agent-dom0-updates-4.3.20-1.fc42.noarch.rpm
qubes-core-agent-dom0-updates_4.3.20-1+jammy1_amd64.deb
qubes-core-agent-dom0-updates_4.3.20-1+noble1_amd64.deb
qubes-core-agent-nautilus_4.3.20-1+deb12u1_amd64.deb
qubes-core-agent-nautilus_4.3.20-1+deb13u1_amd64.deb
qubes-core-agent-nautilus-4.3.20-1.fc40.x86_64.rpm
qubes-core-agent-nautilus-4.3.20-1.fc41.x86_64.rpm
qubes-core-agent-nautilus-4.3.20-1.fc42.x86_64.rpm
qubes-core-agent-nautilus_4.3.20-1+jammy1_amd64.deb
qubes-core-agent-nautilus_4.3.20-1+noble1_amd64.deb
qubes-core-agent-networking_4.3.20-1+deb12u1_amd64.deb
qubes-core-agent-networking_4.3.20-1+deb13u1_amd64.deb
qubes-core-agent-networking-4.3.20-1.fc40.noarch.rpm
qubes-core-agent-networking-4.3.20-1.fc41.noarch.rpm
qubes-core-agent-networking-4.3.20-1.fc42.noarch.rpm
qubes-core-agent-networking_4.3.20-1+jammy1_amd64.deb
qubes-core-agent-networking_4.3.20-1+noble1_amd64.deb
qubes-core-agent-network-manager_4.3.20-1+deb12u1_amd64.deb
qubes-core-agent-network-manager_4.3.20-1+deb13u1_amd64.deb
qubes-core-agent-network-manager-4.3.20-1.fc40.noarch.rpm
qubes-core-agent-network-manager-4.3.20-1.fc41.noarch.rpm
qubes-core-agent-network-manager-4.3.20-1.fc42.noarch.rpm
qubes-core-agent-network-manager_4.3.20-1+jammy1_amd64.deb
qubes-core-agent-network-manager_4.3.20-1+noble1_amd64.deb
qubes-core-agent-passwordless-root_4.3.20-1+deb12u1_amd64.deb
qubes-core-agent-passwordless-root_4.3.20-1+deb13u1_amd64.deb
qubes-core-agent-passwordless-root-4.3.20-1.fc40.noarch.rpm
qubes-core-agent-passwordless-root-4.3.20-1.fc41.noarch.rpm
qubes-core-agent-passwordless-root-4.3.20-1.fc42.noarch.rpm
qubes-core-agent-passwordless-root_4.3.20-1+jammy1_amd64.deb
qubes-core-agent-passwordless-root_4.3.20-1+noble1_amd64.deb
qubes-core-agent-selinux-4.3.20-1.fc40.noarch.rpm
qubes-core-agent-selinux-4.3.20-1.fc41.noarch.rpm
qubes-core-agent-selinux-4.3.20-1.fc42.noarch.rpm
qubes-core-agent-systemd-4.3.20-1.fc40.x86_64.rpm
qubes-core-agent-systemd-4.3.20-1.fc41.x86_64.rpm
qubes-core-agent-systemd-4.3.20-1.fc42.x86_64.rpm
qubes-core-agent-thunar_4.3.20-1+deb12u1_amd64.deb
qubes-core-agent-thunar_4.3.20-1+deb13u1_amd64.deb
qubes-core-agent-thunar-4.3.20-1.fc40.x86_64.rpm
qubes-core-agent-thunar-4.3.20-1.fc41.x86_64.rpm
qubes-core-agent-thunar-4.3.20-1.fc42.x86_64.rpm
qubes-core-agent-thunar_4.3.20-1+jammy1_amd64.deb
qubes-core-agent-thunar_4.3.20-1+noble1_amd64.deb
qubes-desktop-linux-menu_1.2.3-1+deb12u1_amd64.deb
qubes-desktop-linux-menu_1.2.3-1+deb13u1_amd64.deb
qubes-desktop-linux-menu-1.2.3-1.fc40.noarch.rpm
qubes-desktop-linux-menu-1.2.3-1.fc41.noarch.rpm
qubes-desktop-linux-menu-1.2.3-1.fc42.noarch.rpm
qubes-desktop-linux-menu_1.2.3-1+jammy1_amd64.deb
qubes-desktop-linux-menu_1.2.3-1+noble1_amd64.deb
qubes-gui-daemon_4.3.8-1+deb12u1_amd64.deb
qubes-gui-daemon-4.3.8-1.fc40.x86_64.rpm
qubes-gui-daemon-4.3.8-1.fc41.x86_64.rpm
qubes-gui-daemon-4.3.8-1.fc42.x86_64.rpm
qubes-gui-daemon_4.3.8-1+jammy1_amd64.deb
qubes-gui-daemon_4.3.8-1+noble1_amd64.deb
qubes-gui-daemon-dbgsym_4.3.8-1+deb12u1_amd64.deb
qubes-gui-daemon-pulseaudio_4.3.8-1+deb12u1_amd64.deb
qubes-gui-daemon-pulseaudio_4.3.8-1+jammy1_amd64.deb
qubes-gui-daemon-pulseaudio_4.3.8-1+noble1_amd64.deb
qubes-gui-daemon-selinux-4.3.8-1.fc40.x86_64.rpm
qubes-gui-daemon-selinux-4.3.8-1.fc41.x86_64.rpm
qubes-gui-daemon-selinux-4.3.8-1.fc42.x86_64.rpm
qubes-gui-dom0-4.3.8-1.fc40.x86_64.rpm
qubes-gui-dom0-4.3.8-1.fc41.x86_64.rpm
qubes-gui-dom0-4.3.8-1.fc42.x86_64.rpm
qubes-libvchan-xen-4.2.7-1.fc37.x86_64.rpm
qubes-libvchan-xen-4.2.7-1.fc40.x86_64.rpm
qubes-libvchan-xen-4.2.7-1.fc41.x86_64.rpm
qubes-libvchan-xen-4.2.7-1.fc42.x86_64.rpm
qubes-libvchan-xen-4.2.7-1-x86_64.pkg.tar.zst
qubes-libvchan-xen-devel-4.2.7-1.fc37.x86_64.rpm
qubes-libvchan-xen-devel-4.2.7-1.fc40.x86_64.rpm
qubes-libvchan-xen-devel-4.2.7-1.fc41.x86_64.rpm
qubes-libvchan-xen-devel-4.2.7-1.fc42.x86_64.rpm
qubes-vm-core-4.3.20-1-x86_64.pkg.tar.zst
qubes-vm-dom0-updates-4.3.20-1-x86_64.pkg.tar.zst
qubes-vm-keyring-4.3.20-1-x86_64.pkg.tar.zst
qubes-vm-networking-4.3.20-1-x86_64.pkg.tar.zst
qubes-vm-passwordless-root-4.3.20-1-x86_64.pkg.tar.zst
xen-utils-guest_5.0.3-1+deb12u1_amd64.deb
xen-utils-guest_5.0.3-1+deb13u1_amd64.deb
xen-utils-guest_5.0.3-1+jammy1_amd64.deb
xen-utils-guest_5.0.3-1+noble1_amd64.deb

Highlights

  • Work on QWT and Wayland (KDE Plasma) is on track and ongoing.
  • Interesting updates on community templates.

Details

In addition to the usual minor fixes and patches (full list here):

  • core-vchan-xen v4.2.7 (r4.2 & r4.3)
    . Extensive list of PRs related to QWT support for Windows 10 & 11 support.
    . Overall overview of the new QWT was covered in the previous version of this newsletter.
    . PRs are merged for both r4.2 & r4.3. Which might be a sign that the new QWT might not be limited to r4.3

  • linux-kernel-latest v6.13.7-1-latest (r4.2 & r4.3)
    linux-kernel (LTS) v6.1.131-1 (r4.2)
    linux-kernel-66 (LTS) v6.6.83-1 (r4.2)
    Linux 6.14 did not make it for the usual Saturday updates and was released on 24th March. Hopefully it would be packaged for Qubes and will be covered next week.

  • core-agent-linux v4.3.20 (r4.3)
    . Due to a 64 character limit, Firewall entries for very long hostnames crashed the firewall daemon. The crash is fixed but the limitation still exists.
    . Some missing dependencies for packaging files.
    . Improving network interface error logging.

  • grub2 v2.06-7 (r4.3)
    . Fixing an error on missing fonts on EFI systems.

  • desktop-linux-menu v1.2.3 (r4.3)
    . Wayland support for the Appmenu. The patch adds support for compositors that support the wlr-layer-shell protocol, which includes KWin, Sway, COSMIC, niri, Mir, GameScope, and Jay.
    . Adding some missing dependencies and a minor fix.

  • vmm-xen-guest v5.0.3-1 (r4.3)
    Xen 4.20 in trixie

  • gui-daemon v4.3.8 (r4.3)
    Minor fix to add Clipboard metadata for QWT

Epilogue

In parallel universes, work on Whonix improvements and GUIX/NixOS support for Qubes is going on. And Kicksecure is also approved as a community template. We should expect its release in near future.

10 Likes

One thing that is not obvious from the changelog, it the package rebuild on trixie. Trixie got libxen package update in the meantime, and rebuilding core-vchan-xen (and gui-daemon if one wants GUI domain) was necessary for building Debian 13 based templates (looking at kali specifically).

5 Likes

I was wondering, do the improvements in NixOS support have a goal of a NixOS template, or a NixOS dom0 (or something else)?

The latter is for sure. A NixOS template should be a side-effect of the primary goal.