Qubes OS updates Weekly Review - Y2025-W17

General Discussion
,
1

Qubes OS updates Weekly Review - Y2025-W17

Introduction

Weekly review of new packages uploaded to Qubes OS repositories. Link to previous version here.

Alphabetically sorted list of new packages uploaded to Qubes OS repositories 
kernel-latest-6.14.4-1.qubes.fc37.x86_64.rpm
kernel-latest-6.14.4-1.qubes.fc41.x86_64.rpm
kernel-latest-devel-6.14.4-1.qubes.fc37.x86_64.rpm
kernel-latest-devel-6.14.4-1.qubes.fc41.x86_64.rpm
kernel-latest-modules-6.14.4-1.qubes.fc37.x86_64.rpm
kernel-latest-modules-6.14.4-1.qubes.fc41.x86_64.rpm
kernel-latest-qubes-vm-6.14.4-1.qubes.fc37.x86_64.rpm
kernel-latest-qubes-vm-6.14.4-1.qubes.fc41.x86_64.rpm
libqrexec-utils4_4.3.7-1+deb12u1_amd64.deb
libqrexec-utils4_4.3.7-1+deb13u1_amd64.deb
libqrexec-utils4_4.3.7-1+jammy1_amd64.deb
libqrexec-utils4_4.3.7-1+noble1_amd64.deb
libqrexec-utils4-dbgsym_4.3.7-1+deb12u1_amd64.deb
libqrexec-utils4-dbgsym_4.3.7-1+deb13u1_amd64.deb
libqrexec-utils-dev_4.3.7-1+deb12u1_amd64.deb
libqrexec-utils-dev_4.3.7-1+deb13u1_amd64.deb
libqrexec-utils-dev_4.3.7-1+jammy1_amd64.deb
libqrexec-utils-dev_4.3.7-1+noble1_amd64.deb
python3-dnf-plugins-qubes-hooks-4.2.42-1.fc40.noarch.rpm
python3-qrexec_4.3.7-1+deb12u1_amd64.deb
python3-qrexec_4.3.7-1+deb13u1_amd64.deb
python3-qrexec_4.3.7-1+jammy1_amd64.deb
python3-qrexec_4.3.7-1+noble1_amd64.deb
qubes-core-agent_4.2.42-1+deb12u1_amd64.deb
qubes-core-agent_4.2.42-1+deb13u1_amd64.deb
qubes-core-agent-4.2.42-1.fc40.x86_64.rpm
qubes-core-agent-4.2.42-1.fc41.x86_64.rpm
qubes-core-agent_4.2.42-1+jammy1_amd64.deb
qubes-core-agent_4.2.42-1+noble1_amd64.deb
qubes-core-agent-caja_4.2.42-1+deb12u1_amd64.deb
qubes-core-agent-caja_4.2.42-1+deb13u1_amd64.deb
qubes-core-agent-caja-4.2.42-1.fc40.x86_64.rpm
qubes-core-agent-caja-4.2.42-1.fc41.x86_64.rpm
qubes-core-agent-caja_4.2.42-1+jammy1_amd64.deb
qubes-core-agent-caja_4.2.42-1+noble1_amd64.deb
qubes-core-agent-dbgsym_4.2.42-1+deb12u1_amd64.deb
qubes-core-agent-dbgsym_4.2.42-1+deb13u1_amd64.deb
qubes-core-agent-dom0-updates_4.2.42-1+deb12u1_amd64.deb
qubes-core-agent-dom0-updates_4.2.42-1+deb13u1_amd64.deb
qubes-core-agent-dom0-updates-4.2.42-1.fc40.noarch.rpm
qubes-core-agent-dom0-updates-4.2.42-1.fc41.noarch.rpm
qubes-core-agent-dom0-updates_4.2.42-1+jammy1_amd64.deb
qubes-core-agent-dom0-updates_4.2.42-1+noble1_amd64.deb
qubes-core-agent-nautilus_4.2.42-1+deb12u1_amd64.deb
qubes-core-agent-nautilus_4.2.42-1+deb13u1_amd64.deb
qubes-core-agent-nautilus-4.2.42-1.fc40.x86_64.rpm
qubes-core-agent-nautilus-4.2.42-1.fc41.x86_64.rpm
qubes-core-agent-nautilus_4.2.42-1+jammy1_amd64.deb
qubes-core-agent-nautilus_4.2.42-1+noble1_amd64.deb
qubes-core-agent-networking_4.2.42-1+deb12u1_amd64.deb
qubes-core-agent-networking_4.2.42-1+deb13u1_amd64.deb
qubes-core-agent-networking-4.2.42-1.fc40.noarch.rpm
qubes-core-agent-networking-4.2.42-1.fc41.noarch.rpm
qubes-core-agent-networking_4.2.42-1+jammy1_amd64.deb
qubes-core-agent-networking_4.2.42-1+noble1_amd64.deb
qubes-core-agent-network-manager_4.2.42-1+deb12u1_amd64.deb
qubes-core-agent-network-manager_4.2.42-1+deb13u1_amd64.deb
qubes-core-agent-network-manager-4.2.42-1.fc40.noarch.rpm
qubes-core-agent-network-manager-4.2.42-1.fc41.noarch.rpm
qubes-core-agent-network-manager_4.2.42-1+jammy1_amd64.deb
qubes-core-agent-network-manager_4.2.42-1+noble1_amd64.deb
qubes-core-agent-passwordless-root_4.2.42-1+deb12u1_amd64.deb
qubes-core-agent-passwordless-root_4.2.42-1+deb13u1_amd64.deb
qubes-core-agent-passwordless-root-4.2.42-1.fc40.noarch.rpm
qubes-core-agent-passwordless-root-4.2.42-1.fc41.noarch.rpm
qubes-core-agent-passwordless-root_4.2.42-1+jammy1_amd64.deb
qubes-core-agent-passwordless-root_4.2.42-1+noble1_amd64.deb
qubes-core-agent-selinux-4.2.42-1.fc40.noarch.rpm
qubes-core-agent-selinux-4.2.42-1.fc41.noarch.rpm
qubes-core-agent-systemd-4.2.42-1.fc40.x86_64.rpm
qubes-core-agent-systemd-4.2.42-1.fc41.x86_64.rpm
qubes-core-agent-thunar_4.2.42-1+deb12u1_amd64.deb
qubes-core-agent-thunar_4.2.42-1+deb13u1_amd64.deb
qubes-core-agent-thunar-4.2.42-1.fc40.x86_64.rpm
qubes-core-agent-thunar-4.2.42-1.fc41.x86_64.rpm
qubes-core-agent-thunar_4.2.42-1+jammy1_amd64.deb
qubes-core-agent-thunar_4.2.42-1+noble1_amd64.deb
qubes-core-dom0-4.3.25-1.2.fc41.noarch.rpm
qubes-core-qrexec_4.3.7-1+deb12u1_amd64.deb
qubes-core-qrexec_4.3.7-1+deb13u1_amd64.deb
qubes-core-qrexec-4.3.7-1.fc40.x86_64.rpm
qubes-core-qrexec-4.3.7-1.fc41.x86_64.rpm
qubes-core-qrexec-4.3.7-1.fc42.x86_64.rpm
qubes-core-qrexec_4.3.7-1+jammy1_amd64.deb
qubes-core-qrexec_4.3.7-1+noble1_amd64.deb
qubes-core-qrexec-dbgsym_4.3.7-1+deb12u1_amd64.deb
qubes-core-qrexec-dbgsym_4.3.7-1+deb13u1_amd64.deb
qubes-core-qrexec-devel-4.3.7-1.fc40.x86_64.rpm
qubes-core-qrexec-devel-4.3.7-1.fc41.x86_64.rpm
qubes-core-qrexec-devel-4.3.7-1.fc42.x86_64.rpm
qubes-core-qrexec-dom0-4.3.7-1.fc41.x86_64.rpm
qubes-core-qrexec-libs-4.3.7-1.fc40.x86_64.rpm
qubes-core-qrexec-libs-4.3.7-1.fc41.x86_64.rpm
qubes-core-qrexec-libs-4.3.7-1.fc42.x86_64.rpm
qubes-core-qrexec-vm-4.3.7-1.fc40.x86_64.rpm
qubes-core-qrexec-vm-4.3.7-1.fc41.x86_64.rpm
qubes-core-qrexec-vm-4.3.7-1.fc42.x86_64.rpm
qubes-core-qrexec-vm-selinux-4.3.7-1.fc40.x86_64.rpm
qubes-core-qrexec-vm-selinux-4.3.7-1.fc41.x86_64.rpm
qubes-core-qrexec-vm-selinux-4.3.7-1.fc42.x86_64.rpm
qubes-manager_4.2.11-1+deb12u1_amd64.deb
qubes-manager_4.2.11-1+deb13u1_amd64.deb
qubes-manager-4.2.11-1.fc37.noarch.rpm
qubes-manager-4.2.11-1.fc40.noarch.rpm
qubes-manager-4.2.11-1.fc41.noarch.rpm
qubes-manager_4.2.11-1+jammy1_amd64.deb
qubes-manager_4.2.11-1+noble1_amd64.deb
qubes-mgmt-salt-dom0-qubes-infrastructure-4.2.2-1.fc37.noarch.rpm
qubes-mgmt-salt-dom0-qubes-infrastructure-4.2.2-1.fc41.noarch.rpm
qubes-release-4.3-0.5.fc41.noarch.rpm
qubes-release-notes-4.3-0.5.fc41.noarch.rpm
qubes-template-kicksecure-17-4.2.0-202504261018.noarch.rpm
qubes-vm-core-4.2.42-1-x86_64.pkg.tar.zst
qubes-vm-keyring-4.2.42-1-x86_64.pkg.tar.zst
qubes-vm-networking-4.2.42-1-x86_64.pkg.tar.zst
qubes-vm-passwordless-root-4.2.42-1-x86_64.pkg.tar.zst

Highlights

  • Major parts of Qubes Air implementation
  • Kicksecure template

Details

In addition to the usual minor fixes and patches (full list here):

  • qubes-template-kicksecure-17 4.2.0-202504261018 (r4.2)
    Kicksecure testing template (only for r4.2). This time we have the template only for r4.2 and not r4.3 (for those who complained that good things are only coming to r4.3).

  • linux-kernel-latest v6.14.4-1 (r4.2 & r4.3)
    . We finally get the new exciting Kernel 6.14 (for both host and VMs). This kernel is not installed by default and is optional (as kernel-latest & kernel-latest-qubes-vm packages in dom0). Making this version available in Qubes OS was delayed because of an issue with Gigabit Ethernet on some NovaCustom laptops (all certified HW are thoroughly tested).
    . Linux (Kernel) 6.14 highlights on KernelNewbies and other media.

  • manager v4.2.11-1 (r4.2)
    Mostly fixes for unittests

  • core-agent-linux v4.2.42 (r4.2)
    Many fixes and improvements which were tested on r4.3 are now backported to current stable. Some of the notable improvements:
    . Fix for the issue with .deb based templates, not sending their outdated status notification.
    . On .deb based templates, assuring installing updates directly with apt update;apt upgrade clears the Updates Available flag for that template (but please don’t do it).
    . The fix for Intel BE200 Wifi Adapter malfunction after resuming from suspend (I believe someone asked for this recently?).
    . If you use a shared template for AudioVM, it is assured that after installing volumeicon and/or pasystray systray widgets, they are automatically launched only for AudioVM and not other qube based on that template.

  • core-qrexec v4.3.7 (r4.3)
    . Here we have around ~1500 lines of code & documentation for Qubes Air implementation. Luckily the documentation is comprehensive and informative. It also provides two very useful diagrams. The 1st diagram presents the general Qubes Air implementation (In this scenario, LocalVM and RemoteVM are two qubes on two different Qubes OS machines):

    image
    image5520×2944 343 KB

    . The 2nd diagram presents particular special use case. RemoteVM could be a KVM virtual machine, a VPS Box or even not a VM but rather an actual hardware which has qrexec-client-vm installed on its operating system. It could have a totally different architecture (ARM, RISC-V, OpenPOWER, etc.). And it could have a totally different operating system (even Windows, MacOS, FreeBSD, …):
    image
    image4376×2724 228 KB

    . I am not going to copy/paste from the documentation. Here is the direct link.

Epilogue

As was mentioned during the last week Newsletter discussions, if you are currently using r4.3 or testing repositories on r4.2, giving a thumbs-up to the new updates (in updates-status repository) which are working without any issues (or thumbs down in case of problems with appropriate comment) is going to be very helpful to developers to decide when it will be ready to be released to stable branch. But please be aware that some changes (e.g. Qubes Air) might require much longer testing period compared to simpler changes. And they might come in multiple PRs to different repositories.

11 Likes
2

The documentation is also online at Service call to a RemoteVM — qubes-core-qrexec v4.3.7-0-ge1b9013 documentation

6 Likes