Heya folks! It's sync day, and that means it's time for the weekly Solus roundup! We have a lot to cover today, so let's jump right in.
In preparation for a new repository epoch, that is, version of the package repository, (more on this Soon!), we've changed the ownership of some files from the pisi package to the eopkg package. Our Pisi package now will only provide the Python 2 module necessary to keep the Solus Software Center working until the full transition is ready.
Our Budgie Desktop edition has a new default look. Since Materia died shortly after it was chosen to be the default theme, we need a new one. The winner is the Pocillo GTK theme created and maintained by the Ubuntu Budgie team. This theme is designed specifically for Budgie Desktop, and provides a good default experience.
OpenSSH has been updated to 10.2 this week. In the course of updating the package, the directory of the default configuration files has changed to better align the package with the AerynOS package. The default configuration directory is now /usr/share/defaults/ssh instead of /usr/share/defaults/etc/ssh. This should have no effect on users.
The libnfs package has been updated. While doing this update, the NFS utility binaries were split into their own package: libnfs-utils. If you need the tools previously provided by the libnfs package, you will have to install the new one as well.
projectM, an advanced open source music visualizer, has been updated to a new major version. This is a significant rework of the project; it is now a code library instead of a graphical client. There are a couple of different frontends available, but none have been packaged so far.
stress-ng has received some updates this week. It now supports not just CPU stress tests, but also GPU stress tests, file system stress tests, and more. It's an easy way to test the behavior of your system under high CPU load, GPU load, I/O, or any combination thereof! Check out the README for some example uses.
This week sees the end of OpenSSL 1.1.1 in Solus. The version of that we were on contains vulnerabilities, and updates are for premium support customers only, meaning we can no longer update our package. The only remaining consumers of openssl-11 on Solus were Pytorch and transgui, a torrent client. transgui has not had a release since 2019, and there has been little work done on it in the last few years. Given the the availability of alternative clients, this package has been deprecated. Pytorch appears to build just fine using OpenSSL 3, meaning we no longer need OpenSSL 1.1.1 for it. With those out of the way, the most responsible course of action was to then deprecate OpenSSL 1.1.1.
Now, we have some new packages this week. Yazi is a fast terminal file manager written in Rust, and based on asynchronous I/O. mozilla-vpn-client has been added to the repository. It is the official client of the Mozilla VPN product. Lastly, Sniffnet, a network monitoring tool, is now in our repository.
Security updates
- golang was updated to 1.25.2-133 (@silkeh). Includes security fixes for CVE-2025-58187, CVE-2025-58189, CVE-2025-58186, CVE-2025-61723, CVE-2025-58185, CVE-2025-47912, CVE-2025-58183, CVE-2025-61725, CVE-2025-58188, CVE-2025-61724.
- openssh was updated to 10-2_p1-63 (@EbonJaeger and @EbonJaeger). Includes security fixes for CVE-2025-61984.
- valkey was updated to 8.1.4-7 (@androidnisse). Includes security fixes for CVE-2025-46818, CVE-2025-49844, CVE-2025-46817, CVE-2025-46819.
General updates
The full list of updated packages can be found here.
For the list of currently known issues, see the dedicated thread for it. If you begin experiencing a bug, please look for an issue on our issue tracker, and open a new one if one does not exist.
That’s all for this week, folks! We'll be here same time, same place next week for another roundup of the news!
