Heya folks! It's Friday, and that means it's time for the weekly Solus roundup!
There are a couple of new packages included in the repository this week. The first is doctl, a CLI tool to help manage Digital Ocean resources. If you use Digital Ocean services, you'll likely want to check this out. Next is kamoso, a KDE Gear application for taking photos and video using your webcam.
Deprecated this week is the package latencytop. The program is unmaintained upstream, and has the major disadvantage that building a kernel with it has a per-kernel-task memory penalty, even when the user space tooling is not active.
Security updates
We begin this week with security updates. @algent resolved issues with two packages, opensc and libebml. opensc was updated to 0.24.0, fixing a total of four vulnerabilities:
Likewise, libebml was updated to 1.4.5, fixing CVE-2023-52339.
Glibc has some widely reported-on vulnerabilities this week that were resolved by importing the upstream patches. These vulnerabilities could be used for local privilege escalation, but could usually not be exploited remotely.
Runc had a container breakout vulnerability patched by updating to the latest release:
OpenSSL had several minor vulnerabilities patched by updating to 3.1.5. These are generally not exploitable, which is why we did not update the package previously with backported fixes.
As always, ensure that you install updates to get the latest security vulnerability fixes.
Media updates
aom was updated to 3.8.1 (@ReillyBrogan)geeqie was updated to 2.2.0 (@algent)geonkick was updated to 3.3.2 (@malfisya)mediainfo was updated to 24.01 (@Harvey)
Gaming updates
frozen-bubble had AppStream metadata included (@malfisya)ppsspp was updated to 1.17 (@ReillyBrogan)
CLI tool updates
System updates
Language updates
openjdk-11 was update to 11.0.22 (@ReillyBrogan)openjdk-11 had webkit support enabled for the included OpenJFX runtime. This runtime has also now been split out to the openjfx-11 package, if you need this, please install the new package to continue using it (@ReillyBrogan)openjdk-17 was updated to 17.0.10 (@ReillyBrogan)php was updated to 8.2.15 (@ReillyBrogan)
Other desktop updates
Budgie Desktop has been updated to the latest 10.9 series this week! 10.9 includes a completely redesigned Bluetooth applet, early porting efforts towards Wayland, and adopting a fork of gnome-session named budgie-session for session management. If you haven't yet, be sure to check out their blog posts for 10.9 and 10.9.1. Additionally, if you haven't seen their earlier blog post, check out the State of the Budgie 2023!
Work progresses steadily on Plasma 6. KDE Frameworks 6 was updated to the latest RC2 this week by @ReillyBrogan. While very few Solus packages currently use KF6, keeping those packages up-to-date is important for the Plasma 6 efforts. It also enables developers to develop applications using KF6. KDE Gear for Plasma 6 has also been updated to RC2.
For Plasma 5, Akonadi was modified to fix its AppArmor rules and to use Sqlite as the default backend instead of MariaDB (MySQL). This change only affects new installations of Akonadi. If you would like to switch the backend configuration for an existing installation, see here. Note: Because you are changing the backend storage, existing stored contacts and events will be lost! Once you have switched over to the Sqlite backend, feel free to remove the mariadb-server package if you otherwise don't need it.
Note that if you were previously having the issue where Akonadi was not starting up, you may need to run sudo systemctl reload apparmor after updating in order for the updated AppArmor rules to be imported by the kernel.
bibata-cursors was updated to 2.0.6 (@algent)- Brave was updated to 1.62.156 (@algent)
budgie-desktop-branding was updated to include missing defaults that had been removed (@EbonJaeger)burn-my-windows was updated to v40 (@ReillyBrogan)- CoreCtrl was updated to 1.3.9 (@ermo)
colord was updated to 1.4.7 (@ReillyBrogan)- Discord was updated to 0.0.42 (@joebonrichie)
- Element was updated to 1.11.57 (@silkeh)
font-iosevka-ttf was updated to 28.0.6 (@nazar)gpxsee was updated to 13.15 (@nazar)kitty was updated to 0.32.1 (@nazar)korla-icon-theme was updated to 1.6.0 (@algent)- Fixed a crash with Krita and gmic (@ReillyBrogan)
libei was updated to 1.2.0 (@ReillyBrogan)libinput was updated to 1.25.0 (@ReillyBrogan)nextcloud-client was updated to 3.11.1 (@silkeh)- Opera was updated to 106.0.4998.70 (@Harvey)
qpwgraph was updated to 0.6.2 (@ReillyBrogan)sardi-icons was updated to 23.12.07, and icons for XFCE were enabled (@algent)tailscale was updated to 1.58.2 (@nazar)- Telegram was updated to 4.14.12 (@ReillyBrogan)
texstudio was updated to 4.7.2 (@algent)- Vivaldi (stable) was updated to 6.5.3206.59 (@Harvey)
- Vivaldi (snapshot) was updated to 6.6.3256.4 (@Harvey)
- VSCode was updated to 1.86.0. Wayland is now enabled by default when running in a Wayland session. To disable this, you can set the
VSCODE_NO_WAYLAND environmental variable before launching VSCode. (@ReillyBrogan)
- Davmail had support for handling Office365 login windows enabled by switching it to depend on the new openjfx-11 package (@ReillyBrogan)
xdg-utils was updated to 1.2.0 (@ReillyBrogan)yubikey-manager was updated to 5.3.0 (@joebonrichie)
That’s all for this week, folks! We'll be here same time, same place next week for another roundup of the news!
