Heya folks! It's Friday, and that means it's time for the weekly Solus roundup!
Not only is it Friday, but we're also in October 🎃, and that means Hacktoberfest 2024 is underway! Like last year, Solus is participating. Check out our blog post for more information on how you can participate, and earn rewards.
Since the Usr-Merge began rolling out, we've had no reports of problems relating to it. Therefore, we are confident that we can open the floodgates and allow all users to go through the Usr-Merge process. If you aren't familiar with Usr-Merge, go check out our blog post about it.
To go along with all updating users getting Usr-Merged, we want to release ISOs, so users can install already merged systems. As such, we are now in a package freeze 🧊! Core packages that appear on the ISOs will not see updates until after the freeze has ended, except for critical or security updates. Additionally, the team's focus will largely be on testing the ISOs before release. Lastly, there will be no weekly ISO for OpenCollective backers this week while we put out Release Candidate ISOs. Stay tuned!
Our Qt6 stack has been updated to 6.7.3. This is a bugfix release, addressing many Qt bugs. The webkitgtk packages were updated to the 2.46 series, bringing much improved rendering performance. You can read about that here.
Our Solus Cleanup Crew™️ has been hard at work this week bringing the repository up to current standards:
Most of these tasks are beginner-friendly, and can be a great way to learn Solus packaging. We invite anyone that has the time and inclination to join us!
If you would like to join:
- Join the Solus Packaging Room on Matrix
- Read and practice our packaging documentation
- Submit your first Pull Request. We recommend doing the homepage task
- Follow along the review process until your PR gets merged
- Continue on contributing!
Security updates
We have several security updates this week.
All of our webkitgtk packages have been updated regarding WSA-2024-005.
GNOME libgsf has been updated to fix CVE-2024-42415.
Lastly, oauth-toolkit was updated to fix CVE-2024-47191.
As always, make sure to install updates for the latest vulnerability protections.
General updates
The full list of updated packages can be found here.
That’s all for this week, folks! We'll be here same time, same place next week for another roundup of the news!
Known issues
- When running
eopkg check, linux-current and linux-lts show as broken. These are false positives, and can be disregarded.
