Qubes OS updates Weekly Review - Y2025-W47

General Discussion
,
1

Qubes OS updates Weekly Review - Y2025-W47

Introduction

Weekly review of new packages uploaded to Qubes OS repositories. Link to previous Newsletter here.

Alphabetically sorted list of new packages uploaded to Qubes OS repositories 
kernel-515-5.15.196-1.qubes.fc37.x86_64.rpm
kernel-515-devel-5.15.196-1.qubes.fc37.x86_64.rpm
kernel-515-modules-5.15.196-1.qubes.fc37.x86_64.rpm
kernel-515-qubes-vm-5.15.196-1.qubes.fc37.x86_64.rpm
kernel-6.12.58-1.qubes.fc37.x86_64.rpm
kernel-6.12.58-1.qubes.fc41.x86_64.rpm
kernel-61-6.1.158-1.qubes.fc37.x86_64.rpm
kernel-61-devel-6.1.158-1.qubes.fc37.x86_64.rpm
kernel-61-modules-6.1.158-1.qubes.fc37.x86_64.rpm
kernel-61-qubes-vm-6.1.158-1.qubes.fc37.x86_64.rpm
kernel-66-6.6.116-1.qubes.fc37.x86_64.rpm
kernel-66-devel-6.6.116-1.qubes.fc37.x86_64.rpm
kernel-66-modules-6.6.116-1.qubes.fc37.x86_64.rpm
kernel-66-qubes-vm-6.6.116-1.qubes.fc37.x86_64.rpm
kernel-devel-6.12.58-1.qubes.fc37.x86_64.rpm
kernel-devel-6.12.58-1.qubes.fc41.x86_64.rpm
kernel-latest-6.17.8-1.qubes.fc37.x86_64.rpm
kernel-latest-6.17.8-1.qubes.fc41.x86_64.rpm
kernel-latest-6.17.8-2.qubes.fc37.x86_64.rpm
kernel-latest-6.17.8-2.qubes.fc41.x86_64.rpm
kernel-latest-devel-6.17.8-1.qubes.fc37.x86_64.rpm
kernel-latest-devel-6.17.8-1.qubes.fc41.x86_64.rpm
kernel-latest-devel-6.17.8-2.qubes.fc37.x86_64.rpm
kernel-latest-devel-6.17.8-2.qubes.fc41.x86_64.rpm
kernel-latest-modules-6.17.8-1.qubes.fc37.x86_64.rpm
kernel-latest-modules-6.17.8-1.qubes.fc41.x86_64.rpm
kernel-latest-modules-6.17.8-2.qubes.fc37.x86_64.rpm
kernel-latest-modules-6.17.8-2.qubes.fc41.x86_64.rpm
kernel-latest-qubes-vm-6.17.8-1.qubes.fc37.x86_64.rpm
kernel-latest-qubes-vm-6.17.8-1.qubes.fc41.x86_64.rpm
kernel-latest-qubes-vm-6.17.8-2.qubes.fc37.x86_64.rpm
kernel-latest-qubes-vm-6.17.8-2.qubes.fc41.x86_64.rpm
kernel-modules-6.12.58-1.qubes.fc37.x86_64.rpm
kernel-modules-6.12.58-1.qubes.fc41.x86_64.rpm
kernel-qubes-vm-6.12.58-1.qubes.fc37.x86_64.rpm
kernel-qubes-vm-6.12.58-1.qubes.fc41.x86_64.rpm
libnvpair3-2.3.5-1.fc37.x86_64.rpm
libnvpair3-2.3.5-1.fc41.x86_64.rpm
libuutil3-2.3.5-1.fc37.x86_64.rpm
libuutil3-2.3.5-1.fc41.x86_64.rpm
libzfs6-2.3.5-1.fc37.x86_64.rpm
libzfs6-2.3.5-1.fc41.x86_64.rpm
libzfs6-devel-2.3.5-1.fc37.x86_64.rpm
libzfs6-devel-2.3.5-1.fc41.x86_64.rpm
libzpool6-2.3.5-1.fc37.x86_64.rpm
libzpool6-2.3.5-1.fc41.x86_64.rpm
python3-pyzfs-2.3.5-1.fc37.noarch.rpm
python3-pyzfs-2.3.5-1.fc41.noarch.rpm
qubes-artwork-4.3.9-1.fc41.noarch.rpm
qubes-artwork-4.3.9-1.fc42.noarch.rpm
qubes-artwork-4.3.9-1.fc43.noarch.rpm
qubes-artwork-anaconda-4.3.9-1.fc41.noarch.rpm
qubes-artwork-anaconda-4.3.9-1.fc42.noarch.rpm
qubes-artwork-anaconda-4.3.9-1.fc43.noarch.rpm
qubes-artwork-efi-4.3.9-1.fc41.noarch.rpm
qubes-artwork-efi-4.3.9-1.fc42.noarch.rpm
qubes-artwork-efi-4.3.9-1.fc43.noarch.rpm
qubes-artwork-plymouth-4.3.9-1.fc41.noarch.rpm
qubes-artwork-plymouth-4.3.9-1.fc42.noarch.rpm
qubes-artwork-plymouth-4.3.9-1.fc43.noarch.rpm
qubes-artwork_4.3.9-1+deb12u1_amd64.deb
qubes-artwork_4.3.9-1+deb13u1_amd64.deb
qubes-artwork_4.3.9-1+jammy1_amd64.deb
qubes-artwork_4.3.9-1+noble1_amd64.deb
qubes-core-agent-4.3.36-1.fc41.x86_64.rpm
qubes-core-agent-4.3.36-1.fc42.x86_64.rpm
qubes-core-agent-4.3.36-1.fc43.x86_64.rpm
qubes-core-agent-caja-4.3.36-1.fc41.x86_64.rpm
qubes-core-agent-caja-4.3.36-1.fc42.x86_64.rpm
qubes-core-agent-caja-4.3.36-1.fc43.x86_64.rpm
qubes-core-agent-caja_4.3.36-1+deb12u1_amd64.deb
qubes-core-agent-caja_4.3.36-1+deb13u1_amd64.deb
qubes-core-agent-caja_4.3.36-1+jammy1_amd64.deb
qubes-core-agent-caja_4.3.36-1+noble1_amd64.deb
qubes-core-agent-dbgsym_4.3.36-1+deb12u1_amd64.deb
qubes-core-agent-dbgsym_4.3.36-1+deb13u1_amd64.deb
qubes-core-agent-dom0-updates-4.3.36-1.fc41.noarch.rpm
qubes-core-agent-dom0-updates-4.3.36-1.fc42.noarch.rpm
qubes-core-agent-dom0-updates-4.3.36-1.fc43.noarch.rpm
qubes-core-agent-dom0-updates_4.3.36-1+deb12u1_amd64.deb
qubes-core-agent-dom0-updates_4.3.36-1+deb13u1_amd64.deb
qubes-core-agent-dom0-updates_4.3.36-1+jammy1_amd64.deb
qubes-core-agent-dom0-updates_4.3.36-1+noble1_amd64.deb
qubes-core-agent-nautilus-4.3.36-1.fc41.x86_64.rpm
qubes-core-agent-nautilus-4.3.36-1.fc42.x86_64.rpm
qubes-core-agent-nautilus-4.3.36-1.fc43.x86_64.rpm
qubes-core-agent-nautilus_4.3.36-1+deb12u1_amd64.deb
qubes-core-agent-nautilus_4.3.36-1+deb13u1_amd64.deb
qubes-core-agent-nautilus_4.3.36-1+jammy1_amd64.deb
qubes-core-agent-nautilus_4.3.36-1+noble1_amd64.deb
qubes-core-agent-network-manager-4.3.36-1.fc41.noarch.rpm
qubes-core-agent-network-manager-4.3.36-1.fc42.noarch.rpm
qubes-core-agent-network-manager-4.3.36-1.fc43.noarch.rpm
qubes-core-agent-network-manager_4.3.36-1+deb12u1_amd64.deb
qubes-core-agent-network-manager_4.3.36-1+deb13u1_amd64.deb
qubes-core-agent-network-manager_4.3.36-1+jammy1_amd64.deb
qubes-core-agent-network-manager_4.3.36-1+noble1_amd64.deb
qubes-core-agent-networking-4.3.36-1.fc41.noarch.rpm
qubes-core-agent-networking-4.3.36-1.fc42.noarch.rpm
qubes-core-agent-networking-4.3.36-1.fc43.noarch.rpm
qubes-core-agent-networking_4.3.36-1+deb12u1_amd64.deb
qubes-core-agent-networking_4.3.36-1+deb13u1_amd64.deb
qubes-core-agent-networking_4.3.36-1+jammy1_amd64.deb
qubes-core-agent-networking_4.3.36-1+noble1_amd64.deb
qubes-core-agent-passwordless-root-4.3.36-1.fc41.noarch.rpm
qubes-core-agent-passwordless-root-4.3.36-1.fc42.noarch.rpm
qubes-core-agent-passwordless-root-4.3.36-1.fc43.noarch.rpm
qubes-core-agent-passwordless-root_4.3.36-1+deb12u1_amd64.deb
qubes-core-agent-passwordless-root_4.3.36-1+deb13u1_amd64.deb
qubes-core-agent-passwordless-root_4.3.36-1+jammy1_amd64.deb
qubes-core-agent-passwordless-root_4.3.36-1+noble1_amd64.deb
qubes-core-agent-pcmanfm-qt_4.3.36-1+deb12u1_amd64.deb
qubes-core-agent-pcmanfm-qt_4.3.36-1+deb13u1_amd64.deb
qubes-core-agent-pcmanfm-qt_4.3.36-1+jammy1_amd64.deb
qubes-core-agent-pcmanfm-qt_4.3.36-1+noble1_amd64.deb
qubes-core-agent-selinux-4.3.36-1.fc41.noarch.rpm
qubes-core-agent-selinux-4.3.36-1.fc42.noarch.rpm
qubes-core-agent-selinux-4.3.36-1.fc43.noarch.rpm
qubes-core-agent-systemd-4.3.36-1.fc41.x86_64.rpm
qubes-core-agent-systemd-4.3.36-1.fc42.x86_64.rpm
qubes-core-agent-systemd-4.3.36-1.fc43.x86_64.rpm
qubes-core-agent-thunar-4.3.36-1.fc41.x86_64.rpm
qubes-core-agent-thunar-4.3.36-1.fc42.x86_64.rpm
qubes-core-agent-thunar-4.3.36-1.fc43.x86_64.rpm
qubes-core-agent-thunar_4.3.36-1+deb12u1_amd64.deb
qubes-core-agent-thunar_4.3.36-1+deb13u1_amd64.deb
qubes-core-agent-thunar_4.3.36-1+jammy1_amd64.deb
qubes-core-agent-thunar_4.3.36-1+noble1_amd64.deb
qubes-core-agent_4.3.36-1+deb12u1_amd64.deb
qubes-core-agent_4.3.36-1+deb13u1_amd64.deb
qubes-core-agent_4.3.36-1+jammy1_amd64.deb
qubes-core-agent_4.3.36-1+noble1_amd64.deb
qubes-template-kicksecure-18-4.3.0-202511221309.noarch.rpm
qubes-video-companion-1.1.8-1.fc41.noarch.rpm
qubes-video-companion-1.1.8-1.fc42.noarch.rpm
qubes-video-companion-4.3.0-1.fc41.noarch.rpm
qubes-video-companion-4.3.0-1.fc42.noarch.rpm
qubes-video-companion-4.3.0-1.fc43.noarch.rpm
qubes-video-companion-docs-1.1.8-1.fc41.noarch.rpm
qubes-video-companion-docs-1.1.8-1.fc42.noarch.rpm
qubes-video-companion-docs-4.3.0-1.fc41.noarch.rpm
qubes-video-companion-docs-4.3.0-1.fc42.noarch.rpm
qubes-video-companion-docs-4.3.0-1.fc43.noarch.rpm
qubes-video-companion-dom0-1.1.8-1.fc37.noarch.rpm
qubes-video-companion-dom0-4.3.0-1.fc41.noarch.rpm
qubes-video-companion-license-1.1.8-1.fc41.noarch.rpm
qubes-video-companion-license-1.1.8-1.fc42.noarch.rpm
qubes-video-companion-license-4.3.0-1.fc41.noarch.rpm
qubes-video-companion-license-4.3.0-1.fc42.noarch.rpm
qubes-video-companion-license-4.3.0-1.fc43.noarch.rpm
qubes-video-companion-receiver-1.1.8-1.fc41.noarch.rpm
qubes-video-companion-receiver-1.1.8-1.fc42.noarch.rpm
qubes-video-companion-receiver-4.3.0-1.fc41.noarch.rpm
qubes-video-companion-receiver-4.3.0-1.fc42.noarch.rpm
qubes-video-companion-receiver-4.3.0-1.fc43.noarch.rpm
qubes-video-companion-sender-1.1.8-1.fc41.noarch.rpm
qubes-video-companion-sender-1.1.8-1.fc42.noarch.rpm
qubes-video-companion-sender-4.3.0-1.fc41.noarch.rpm
qubes-video-companion-sender-4.3.0-1.fc42.noarch.rpm
qubes-video-companion-sender-4.3.0-1.fc43.noarch.rpm
qubes-video-companion_1.1.8-1+deb12u1_all.deb
qubes-video-companion_1.1.8-1+deb13u1_all.deb
qubes-video-companion_1.1.8-1+jammy1_all.deb
qubes-video-companion_1.1.8-1+noble1_all.deb
qubes-video-companion_4.3.0-1+deb12u1_all.deb
qubes-video-companion_4.3.0-1+deb13u1_all.deb
qubes-video-companion_4.3.0-1+jammy1_all.deb
qubes-video-companion_4.3.0-1+noble1_all.deb
qubes-vm-caja-4.3.36-1-x86_64.pkg.tar.zst
qubes-vm-core-4.3.36-1-x86_64.pkg.tar.zst
qubes-vm-dom0-updates-4.3.36-1-x86_64.pkg.tar.zst
qubes-vm-keyring-4.3.36-1-x86_64.pkg.tar.zst
qubes-vm-nautilus-4.3.36-1-x86_64.pkg.tar.zst
qubes-vm-networking-4.3.36-1-x86_64.pkg.tar.zst
qubes-vm-passwordless-root-4.3.36-1-x86_64.pkg.tar.zst
qubes-vm-thunar-4.3.36-1-x86_64.pkg.tar.zst
qubes-windows-tools-4.2.2-1.fc41.noarch.rpm
zfs-2.3.5-1.fc37.x86_64.rpm
zfs-2.3.5-1.fc41.x86_64.rpm
zfs-dkms-2.3.5-1.fc37.noarch.rpm
zfs-dkms-2.3.5-1.fc41.noarch.rpm
zfs-dracut-2.3.5-1.fc37.noarch.rpm
zfs-dracut-2.3.5-1.fc41.noarch.rpm
zfs-test-2.3.5-1.fc37.x86_64.rpm
zfs-test-2.3.5-1.fc41.x86_64.rpm

Highlights

  • Major work on Qubes Video Companion.

Details

In addition to the usual minor fixes and patches (full list here):

  • gui-agent-linux v4.3.15 (r4.3)

    • Two patches related to qubes-video-companion. One for Debian based qubes and one for minimal ServiceVMs.
    • A major project is ongoing to allow delayed gui-agent connection to gui-daemon. As a necessity for preloaded disposables (but it has other benefits). While the patches on the GUI Daemon side is still in progress, some on the agent side are merged in this release.
    • The above project broke sys-gui (not sys-gui-gpu) connection to dom0 display(s). Fixes were necessary.

  • notification-proxy v1.0.6 (r4.3)
    To allow delayed GUI session, the notification proxy start had to be waited as well.

  • linux-kernel-latest v6.17.8-2-latest (r4.3)
    linux-kernel-latest v6.17.8-2-latest (r4.2)
    linux-kernel-latest v6.17.8-1-latest (r4.3)
    linux-kernel-latest v6.17.8-1-latest (r4.2)
    linux-kernel (current stable) v6.12.58-1 (r4.3)
    linux-kernel (current stable) v6.12.58-1 (r4.2)
    linux-kernel-66 (old stable) v6.6.116-1 (r4.2)
    linux-kernel-61 (older stable) v6.1.158-1 (r4.2)
    linux-kernel-515 (ancient stable) v5.15.196-1 (r4.2)
    Linux kernel weekly updates. We have two for kernel-latest since some debugging was going on in the meantime.

  • qubes-template-whonix-workstation-18 4.3.0-202511221309 (r4.3)
    qubes-template-whonix-gateway-18 4.3.0-202511221309 (r4.3)
    Failed attempt to build Whonix templates.

  • qubes-template-kicksecure-18 4.3.0-202511221309 (r4.3)
    A fresh Kicksecure template with latest updates.

  • installer-qubes-os-windows-tools v4.2.2-1 (r4.3)
    installer-qubes-os-windows-tools v4.2.1-1 (r4.3)

    • This is a real new release of QWT.
    • Automatically accepting test-signed drivers via focus-stealing techniques.
    • QWT installer should allow user to select auto-login (I do not have a screenshot).
    • Unlike Linux guests, QWT is not automatically updated. Users are supposed to manually mount the updated QWT ISO and upgrade (do not forget to backup/snapshot before upgrading). I have not tested this QWT release personally since my test system does not have enough storage space nor enough memory for a dedicated Windows qube.

  • windows-utils v4.2.2 (r4.3)
    Cleanup and documentation on how to build from source.

  • core-agent-windows v4.2.2 (r4.3)

    • Cleanup and documentation on how to build from source.
    • Auto-login code (to generate a random password, setting it in Windows registry, …).
    • Allowing qubes.StartApp for Windows qubes which have auto-login enabled.

  • core-agent-linux v4.3.36 (r4.3)
    Fixing specialtarget=dns for Qubes Firewall on DNS changes.

  • video-companion v4.3.0-1 (r4.3)
    video-companion v1.1.8-1 (r4.3)
    video-companion v1.1.8-1 (r4.2)

    • Allowing qubes-video-companion on Kicksecure and Whonix qubes which have sysmaint enabled.
    • Continuation of the project to allow multiple webcams (or video input devices).
    • Major project to integrate qubes-video-companion to Qui Devices widget. After implemented, Qui Devices will prefer Qubes Video Companion to transfer video to target qube instead of attaching the USB camera directly. This will have security benefit (in case the firmware of the webcam/video-device is tampered).
    • Unfortunately screenshare is not integrated to Qui Devices (but appears to be easy).

  • artwork v4.3.9-1 (r4.3)

    • The old raster PNG icons are deleted to allow new SVG icons to take effect.
    • Previously PNG icons had to be re-generated via Inkscape script every time SVG icons were updated. And they were installed as a part of default Qubes XDG icon set. As far as I understand, DE and GUI toolkits (XFCE, GTK) might require to dynamically render SVGs on the fly now (for App Menu, Qui widgets and some other places). The performance penalty should be negligible these days.

  • zfs v2.3.5-1 (r4.2)
    zfs v2.3.5-1 (r4.3)
    zfs-dkms v2.3.5-1 (r4.2)
    zfs-dkms v2.3.5-1 (r4.3)
    Bumping up to OpenZFS 2.3.5. Release notes here.

11 Likes
2

Not even that. PNG are still installed, but they are generated at the package build time, which ensures fresh SVG are used. Previously, some old PNG were installed because they weren’t updated after updating SVG.

1 Like
3

Most important part: Linux 6.17 compatibility.

1 Like
4

Ah. I see. And BTW, did they also take care of this for Kernel 6.18?

5

Are we getting the rc4 release this week?

6

That would be the case according to the schedule, but due to some organizational stuff, a bit later: Announcement: Qubes OS 4.3.0-rc4 is available for testing by andrewdavidwong · Pull Request #154 · QubesOS/qubes-posts · GitHub

1 Like
7

No idea, I’m not tracking it this closely. But issues like this are the reason why I don’t want out-of-tree modules being necessary for basic system operation (in other words: veto for ZFS as an option in the installer).

1 Like
8

I checked it both on R4.3-rc3 and R4.2.4, and it looks quite good, see Windows 11 in Qubes. Still, the graphics driver has its problems, but who does not have them using W10 or W11?

The autologon feature seems to be working, but I’m still testing and will report on it.

1 Like
9

I checked the autologon feature, and it is working as it should. One advantage to directly modifying the registry is that it uses a random password, which is not stored in the registry value DefaultPassword and so cannot be found by an attacker.

This, however, has the effect that you cannot log out of a Windows VM and later on log in again, because you don’t know this password. Resetting this password via the usual Windows recovery mechanism will break autologon, because that feature is not changed accordingly. This can be repaired by using the netplwiz utility, as described in the documentation. In this case, the new password that you select is still hidden.

One may ask why the Windows password recovery is not able to execute such a reasonable change, but again, one should not expect Windows to perform anything sensible …

I am now updating the documentation accordingly.

3 Likes
10

I’m running RC3, should I turn on the repo for testing in Global settings ? I would think so since RC3 is listed as unstable/testing but it would also think the default install would have it on, if so

11

I believe the stable repos for r4.3 has been available since July 2025. Yet they are just created for the convenience of testers to avoid the necessity to change the repos in global settings (as well as individual templates). Otherwise they are the exact duplicates of testing repos. I assume they will diverge again after actual r4.3 stable is released.

1 Like
12

Ahh, that’s good to know. Thanks!

13

core-agent-linux update breaks things!

14

Oh. I was not aware of that since I do not use Debian based NetVMs. And it is strange it was not detected during OpenQA tests.

15

core-agent-linux update breaks things!

GitHub - QubesOS/qubes-issues: The Qubes OS Project issue tracker

Man… Is the 4.3 release the most problem one yet? (/kinda sarcastic)

16

well, I have no choice. 4.2 does not support meteor lake gpu accel in dom0, so graphics performance falls through the floor. otherwise 4.3 is pretty stable!