Qubes OS 4.0.2 has been released!

193 views
Skip to first unread message

Andrew David Wong

unread,
Jan 2, 2020, 9:21:22 PM1/2/20
to qubes-a...@googlegroups.com, qubes...@googlegroups.com, qubes...@googlegroups.com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Dear Qubes Community,

We're pleased to announce the release of Qubes 4.0.2! This is the second
stable point release of Qubes 4.0. It includes many updates over the
initial 4.0 release, in particular:

- - All 4.0 dom0 updates to date
- - Fedora 30 TemplateVM
- - Debian 10 TemplateVM
- - Whonix 15 Gateway and Workstation TemplateVMs
- - Linux kernel 4.19 by default

Qubes 4.0.2 is available on the Downloads page:

https://www.qubes-os.org/downloads/


What is a point release?
- ------------------------

A point release does not designate a separate, new version of Qubes OS.
Rather, it designates its respective major or minor release (in this
case, 4.0) inclusive of all updates up to a certain point. Installing
Qubes 4.0 and fully updating it results in the same system as installing
Qubes 4.0.2.


What should I do?
- -----------------

If you installed Qubes 4.0 or 4.0.1 and have fully updated, then your
system is already equivalent to a Qubes 4.0.2 installation. [1] No
further action is required.

Similarly, if you're currently using a Qubes 4.0.2 release candidate
(4.0.2-rc1, 4.0.2-rc2, or 4.0.2-rc3), and your system is fully updated,
then your system is equivalent to a 4.0.2 stable installation, and no
additional action is needed. [1]

Regardless of your current OS, if you wish to install (or reinstall)
Qubes 4.0 for any reason, then the 4.0.2 ISO makes this more convenient
and secure, since it bundles all Qubes 4.0 updates to date.

*Note:* At 4.5 GiB, the Qubes 4.0.2 ISO will not fit on a single-layer
DVD (for the technical details underlying this, please see issue
#5367). [2] Instead, we recommend copying the ISO onto a sufficiently
large USB drive. [3] However, if you would prefer to use optical media,
we suggest selecting a dual-layer DVD or Blu-ray disc.

Thank you to all the release candidate users for testing this release
and reporting issues! [4]


[1] https://www.qubes-os.org/doc/updating-qubes-os/
[2] https://github.com/QubesOS/qubes-issues/issues/5367
[3] https://www.qubes-os.org/doc/installation-guide/#copying-the-iso-onto-the-installation-medium
[4] https://www.qubes-os.org/doc/reporting-bugs/

This announcement is also available on the Qubes website:
https://www.qubes-os.org/news/2020/01/02/qubes-4-0-2/

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----
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=K5j1
-----END PGP SIGNATURE-----

haaber

unread,
Jan 3, 2020, 8:44:03 AM1/3/20
to qubes...@googlegroups.com
On 1/3/20 3:21 AM, Andrew David Wong wrote:
> Dear Qubes Community,
>
> We're pleased to announce the release of Qubes 4.0.2! This is the second
> stable point release of Qubes 4.0. It includes many updates over the
> initial 4.0 release, in particular:
>
> - - All 4.0 dom0 updates to date
> - - Fedora 30 TemplateVM
> - - Debian 10 TemplateVM
> - - Whonix 15 Gateway and Workstation TemplateVMs
> - - Linux kernel 4.19 by default
>
> Qubes 4.0.2 is available on the Downloads page:
> ...

Dear Andrew (and other users), thanks and a happy new year! I observe
since one week, that my usual update command

sudo qubes-dom0-update --enablerepo=qubes*testing

shows "no new updates available", despite this announcement and a
previous QSB announcement by Marek. Is this normal? Should I worry?
Thank you, Bernhard

Andrew David Wong

unread,
Jan 4, 2020, 8:05:54 AM1/4/20
to haaber, qubes...@googlegroups.com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

In a dom0 terminal, the command "sudo dnf history" will show you the
package transaction history of your dom0 updates. The most recent one
I have is from early-mid December.

Each one has an ID number, which you can use to get more info. For
example, if the ID number at the top of your list is 42, try "sudo dnf
history info 42". Now you can see which packages were installed,
updated, uninstalled, etc.

My aforementioned most recent entry from early-mid December involved
upgrading Xen packages to 4.8.5-14 for QSB #055. [1]

However, you're probably thinking of the more recent QSB #056, which
was published on December 25. [2] As stated in that QSB, the packages
are only for TemplateVMs and StandaloneVMs. ("The packages for domUs
are to be installed in TemplateVMs and StandaloneVMs via the Qube
Manager or via their respective package managers...").

In short, I'm not aware of any dom0 updates in the past couple of weeks.


[1] https://www.qubes-os.org/news/2019/12/11/qsb-055/
[2] https://www.qubes-os.org/news/2019/12/25/qsb-056/

- --
Andrew David Wong (Axon)
Community Manager, Qubes OS
https://www.qubes-os.org

-----BEGIN PGP SIGNATURE-----
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=MVm1
-----END PGP SIGNATURE-----

Diederik de Haas

unread,
Jan 6, 2020, 2:35:36 PM1/6/20
to qubes...@googlegroups.com
On vrijdag 3 januari 2020 03:21:07 CET Andrew David Wong wrote:
> Qubes 4.0.2 is available on the Downloads page:
>
> https://www.qubes-os.org/downloads/

I'm only seeing 4.0.2-rc3, but not the final one on that page.

The files are on https://ftp.qubes-os.org/iso/ so I assume it's also on other
mirrors, but the primary download page doesn't list it.
signature.asc

dhorf-hfre...@hashmail.org

unread,
Jan 6, 2020, 2:40:45 PM1/6/20
to Diederik de Haas, qubes...@googlegroups.com
On Mon, Jan 06, 2020 at 08:35:07PM +0100, Diederik de Haas wrote:
> On vrijdag 3 januari 2020 03:21:07 CET Andrew David Wong wrote:
> > Qubes 4.0.2 is available on the Downloads page:
> I'm only seeing 4.0.2-rc3, but not the final one on that page.

retracted because a critical kernel bug made it past all testing.
if 4.0.2 or the rc3 work for you, all is well.
if not, go with 4.0.1 for now.

whichever you install, please make sure to update both dom0 and
all templates after install.


Andrew David Wong

unread,
Jan 8, 2020, 6:54:44 AM1/8/20
to qubes-a...@googlegroups.com, qubes...@googlegroups.com, qubes...@googlegroups.com
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Dear Qubes Community,

Shortly after this announcement was originally sent, a bug was
discovered in the dom0 kernel included in Qubes 4.0.2:

https://github.com/QubesOS/qubes-issues/issues/5553

Since this bug would present installation problems for the majority of
users, we have temporarily removed it from the Downloads page and
reinstated the latest release candidate (Qubes 4.0.2-rc3) in its place.


On 2020-01-02 8:21 PM, Andrew David Wong wrote:
> Dear Qubes Community,
>
> We're pleased to announce the release of Qubes 4.0.2! This is the second
> stable point release of Qubes 4.0. It includes many updates over the
> initial 4.0 release, in particular:
>
> - All 4.0 dom0 updates to date
> - Fedora 30 TemplateVM
> - Debian 10 TemplateVM
> - Whonix 15 Gateway and Workstation TemplateVMs
> - Linux kernel 4.19 by default
>
> Qubes 4.0.2 is available on the Downloads page:
>
> https://www.qubes-os.org/downloads/
>
>
> What is a point release?
> ------------------------
>
> A point release does not designate a separate, new version of Qubes OS.
> Rather, it designates its respective major or minor release (in this
> case, 4.0) inclusive of all updates up to a certain point. Installing
> Qubes 4.0 and fully updating it results in the same system as installing
> Qubes 4.0.2.
>
>
> What should I do?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=B08q
-----END PGP SIGNATURE-----

fiftyfour...@gmail.com

unread,
Jan 8, 2020, 9:07:02 AM1/8/20
to qubes-users
Hi Andrew,

I installed 4.0.2 on my Dell Inspiron 5593 without new issues.

The answer to the following question seems to have been implied in earlier responses, but I'd just like an explicit clarification: Can the "critical kernel bug" affect my security in any way?

Marek Marczykowski-Górecki

unread,
Jan 9, 2020, 8:16:58 PM1/9/20
to fiftyfour...@gmail.com, qubes-users
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
No, it doesn't affect security. It simply crashes (and reboot). If it
works on your particular hardware, then you're lucky and should be safe
to continue using it.

- --
Best Regards,
Marek Marczykowski-Górecki
Invisible Things Lab
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEhrpukzGPukRmQqkK24/THMrX1ywFAl4X0IEACgkQ24/THMrX
1yzgDgf8CAQZyZQLeuF45UToxe4lumA3PWb9q8j82LW7p/Llizwu97T1pF/c6mGJ
MXuUGyu8H8AS2nEK6W4zC1ZDClTFMGvsmMOwhkDbSUuSxyK1WXtRdAhsHK32jQ6j
0xnS6woUeFUkmBonjfQZxrDtj719WwrLWsJWffrDG4GPRoQkk6Mp+QjB8N1d/0bX
9hPjWxok0c6Up4hTOoGLVlnW0OlRgZ35P4UOGqxxscjygpgBwXvD+BXg8YMP+f/v
t6gEu7oLJ9faxtNT4nGHgQZhKayuhAGFvf5Q+uvyBplGWqwGpHmEh6FJnlKEoWYD
UbaUNGX1UPuBM8WMstJ/F9P3n8a/tA==
=xWrL
-----END PGP SIGNATURE-----

fiftyfour...@gmail.com

unread,
Jan 9, 2020, 9:59:04 PM1/9/20
to qubes-users
Thanks, and keep up the good work!

trueriver

unread,
Jan 13, 2020, 11:06:24 AM1/13/20
to qubes-users


On Friday, 10 January 2020 01:16:58 UTC, Marek Marczykowski-Górecki wrote:

No, it doesn't affect security. It simply crashes (and reboot). If it
works on your particular hardware, then you're lucky and should be safe
to continue using it.


I got through install, and had problems restoring from backups. Those problems were
not cnsistent, but included

- sometimes the machine crashed without warning
- complaints from the backup process that a "file list" was missing
- creating space on the LVM for the restored machines but then announcing BOTH
     in green that the restore had worked AND in red that it failed
- on exactly one occasion actually working

I am guessing that the critical bug is one that is timing dependent in some way, and in fairness
to your testers those are the hardest ones to spot as they depend on the hardware, on the
day of the week, and possibly the conjunction of Mercury and Mars...

Anyway, after a thorough test of my drive, and on similar symptoms appearing on a second
machine, I reverted to rc3 and those problems resolved.

Let me know if you would believe it would be useful to add these comments to the -issues
facility:  I won't unless you ask

Warmly
R~~
Those problems went away
Reply all
Reply to author
Forward
0 new messages