Тег: qubes.os

Qubes OS 4.2.2

The Qubes OS team have announced a new update to the project's security-focused operating system. One of the significant changes in Qubes OS 4.2.2 is an adjustment to how files are transferreed between isolated envirnonments, called qubes. "Qubes 4.2.2 includes a fix for #8332: File-copy qrexec service is overly restrictive. As explained in the issue comments, we introduced a change in Qubes 4.2.0 that caused inter-qube file-copy/move actions to reject filenames containing, e.g., non-Latin characters and certain symbols. The rationale for this change was to mitigate the security risks associated with unusual unicode characters and invalid encoding in filenames, which some software might handle in an unsafe manner and which might cause confusion for users. Such a change represents a trade-off between security and usability. After the change went live, we received several user reports indicating more severe usability problems than we had anticipated. Moreover, these problems were prompting users to resort to dangerous workarounds (such as packing files into an archive format prior to copying) that carry far more risk than the original risk posed by the unrestricted filenames. In addition, we realized that this was a backward-incompatible change that should not have been introduced in a minor release in the first place. Therefore, we have decided, for the time being, to restore the original (pre-4.2) behavior by introducing a new allow-all-names argument for the qubes.Filecopy service. By default, qvm-copy and similar tools will use this less restrictive service (qubes.Filecopy +allow-all-names) whenever they detect any files that would be have been blocked by the more restrictive service (qubes.Filecopy +). If no such files are detected, they will use the more restrictive service."

Софт

Qubes OS 4.2.0

Qubes OS is a security-focused operating system which isolates system components and applications to minimialize the damage which can be done do to a security breech in any one aspect of the platform. The project's latest release, Qubes OS 4.2.0, offers both Debian and Fedora templates and shifts the default desktop from GNOME to Xfce. "Dom0 upgraded to Fedora 37. Xen upgraded to version 4.17. Default Debian template upgraded to Debian 12. Default Fedora and Debian templates use Xfce instead of GNOME. SELinux support in Fedora templates. Several GUI applications rewritten, including: Applications Menu (also available as preview in R4.1); Qubes Global Settings; create New Qube Qubes Update; Unified grub.cfg location for both UEFI and legacy boot; PipeWire support; fwupd integration for firmware updates; optional automatic clipboard clearing; Official packages built using Qubes Builder v2; Split GPG management in Qubes Global Settings; Qrexec services use new qrexec policy format by default (but old format is still supported)."

Софт

Qubes OS 4.1.2, the latest "patch" release of the project's security-oriented operating system for single-user desktop computing, is now available. This version brings the Fedora template up to version 37 and adds an optional "kernel-latest" Linux kernel, version 6.1.12: "We are pleased to announce the stable release of Qubes 4.1.2. This release aims to consolidate all the security patches, bug fixes, and upstream template OS upgrades that have occurred since the initial Qubes 4.1.0 release. Our goal is to provide a secure and convenient way for users to install (or reinstall) the latest stable Qubes release with an up-to-date ISO. If you are already using any version of Qubes 4.1 (including 4.1.0, 4.1.1, 4.1.2-rc1, and 4.1.2-rc2), then you should simply update normally (which includes upgrading any EOL templates you might have) in order to make your system effectively equivalent to this stable Qubes 4.1.2 release. No reinstallation or other special action is required. Qubes 4.1.2 includes numerous updates over the initial 4.1.0 release, in particular: all 4.1 dom0 updates to date; Fedora 37 template; USB keyboard support in the installer; kernel-latest available as a boot option when starting the installer."

Софт

Qubes OS 4.1.1
This version upgrades the Fedora template to version 36 and the Linux kernel to version 5.15: "We're pleased to announce the stable release of Qubes 4.1.1. This release aims to consolidate all the security patches, bug fixes, and upstream template OS upgrades that have occurred since the initial Qubes 4.1.0 release in February. Our goal is to provide a secure and convenient way for users to install (or reinstall) the latest stable Qubes release with an up-to-date ISO. If you are already using Qubes 4.1.0 or Qubes 4.1.1-rc1, then you should simply update normally (which includes upgrading any EOL templates you might have) in order to make your system essentially equivalent to this stable Qubes 4.1.1 release. No special action is required on your part. Qubes 4.1.1 includes numerous updates over the initial 4.1.0 release, in particular: 4.1.0 dom0 updates to date; Fedora 36 template (upgraded from Fedora 34); Linux kernel 5.15 (upgraded from 5.10)."

Софт