Heya folks! It's Friday, and that means it's time for the weekly Solus roundup!
There are a couple of new packages included in the repository this week. The first is doctl
, a CLI tool to help manage Digital Ocean resources. If you use Digital Ocean services, you'll likely want to check this out. Next is kamoso
, a KDE Gear application for taking photos and video using your webcam.
Deprecated this week is the package latencytop
. The program is unmaintained upstream, and has the major disadvantage that building a kernel with it has a per-kernel-task memory penalty, even when the user space tooling is not active.
Security updates
We begin this week with security updates. @algent resolved issues with two packages, opensc
and libebml
. opensc
was updated to 0.24.0, fixing a total of four vulnerabilities:
Likewise, libebml
was updated to 1.4.5, fixing CVE-2023-52339.
Glibc has some widely reported-on vulnerabilities this week that were resolved by importing the upstream patches. These vulnerabilities could be used for local privilege escalation, but could usually not be exploited remotely.
Runc had a container breakout vulnerability patched by updating to the latest release:
OpenSSL had several minor vulnerabilities patched by updating to 3.1.5. These are generally not exploitable, which is why we did not update the package previously with backported fixes.
As always, ensure that you install updates to get the latest security vulnerability fixes.
Media updates
aom
was updated to 3.8.1 (@ReillyBrogan)
geeqie
was updated to 2.2.0 (@algent)
geonkick
was updated to 3.3.2 (@malfisya)
mediainfo
was updated to 24.01 (@Harvey)
Gaming updates
frozen-bubble
had AppStream metadata included (@malfisya)
ppsspp
was updated to 1.17 (@ReillyBrogan)
CLI tool updates
System updates
Language updates
openjdk-11
was update to 11.0.22 (@ReillyBrogan)
openjdk-11
had webkit support enabled for the included OpenJFX runtime. This runtime has also now been split out to the openjfx-11
package, if you need this, please install the new package to continue using it (@ReillyBrogan)
openjdk-17
was updated to 17.0.10 (@ReillyBrogan)
php
was updated to 8.2.15 (@ReillyBrogan)
Other desktop updates
Budgie Desktop has been updated to the latest 10.9 series this week! 10.9 includes a completely redesigned Bluetooth applet, early porting efforts towards Wayland, and adopting a fork of gnome-session
named budgie-session
for session management. If you haven't yet, be sure to check out their blog posts for 10.9 and 10.9.1. Additionally, if you haven't seen their earlier blog post, check out the State of the Budgie 2023!
Work progresses steadily on Plasma 6. KDE Frameworks 6 was updated to the latest RC2 this week by @ReillyBrogan. While very few Solus packages currently use KF6, keeping those packages up-to-date is important for the Plasma 6 efforts. It also enables developers to develop applications using KF6. KDE Gear for Plasma 6 has also been updated to RC2.
For Plasma 5, Akonadi was modified to fix its AppArmor rules and to use Sqlite as the default backend instead of MariaDB (MySQL). This change only affects new installations of Akonadi. If you would like to switch the backend configuration for an existing installation, see here. Note: Because you are changing the backend storage, existing stored contacts and events will be lost! Once you have switched over to the Sqlite backend, feel free to remove the mariadb-server
package if you otherwise don't need it.
Note that if you were previously having the issue where Akonadi was not starting up, you may need to run sudo systemctl reload apparmor
after updating in order for the updated AppArmor rules to be imported by the kernel.
bibata-cursors
was updated to 2.0.6 (@algent)
- Brave was updated to 1.62.156 (@algent)
budgie-desktop-branding
was updated to include missing defaults that had been removed (@EbonJaeger)
burn-my-windows
was updated to v40 (@ReillyBrogan)
- CoreCtrl was updated to 1.3.9 (@ermo)
colord
was updated to 1.4.7 (@ReillyBrogan)
- Discord was updated to 0.0.42 (@joebonrichie)
- Element was updated to 1.11.57 (@silkeh)
font-iosevka-ttf
was updated to 28.0.6 (@nazar)
gpxsee
was updated to 13.15 (@nazar)
kitty
was updated to 0.32.1 (@nazar)
korla-icon-theme
was updated to 1.6.0 (@algent)
- Fixed a crash with Krita and gmic (@ReillyBrogan)
libei
was updated to 1.2.0 (@ReillyBrogan)
libinput
was updated to 1.25.0 (@ReillyBrogan)
nextcloud-client
was updated to 3.11.1 (@silkeh)
- Opera was updated to 106.0.4998.70 (@Harvey)
qpwgraph
was updated to 0.6.2 (@ReillyBrogan)
sardi-icons
was updated to 23.12.07, and icons for XFCE were enabled (@algent)
tailscale
was updated to 1.58.2 (@nazar)
- Telegram was updated to 4.14.12 (@ReillyBrogan)
texstudio
was updated to 4.7.2 (@algent)
- Vivaldi (stable) was updated to 6.5.3206.59 (@Harvey)
- Vivaldi (snapshot) was updated to 6.6.3256.4 (@Harvey)
- VSCode was updated to 1.86.0. Wayland is now enabled by default when running in a Wayland session. To disable this, you can set the
VSCODE_NO_WAYLAND
environmental variable before launching VSCode. (@ReillyBrogan)
- Davmail had support for handling Office365 login windows enabled by switching it to depend on the new openjfx-11 package (@ReillyBrogan)
xdg-utils
was updated to 1.2.0 (@ReillyBrogan)
yubikey-manager
was updated to 5.3.0 (@joebonrichie)
That’s all for this week, folks! We'll be here same time, same place next week for another roundup of the news!