Heya folks! It's sync day, and that means it's time for the weekly Solus roundup!
Important note about the Epoch process: After going through the epoch transition, make sure you install package updates before trying to install new packages. If Python 3 is updated before Python 2 is removed, system breakage will occur. Given that we only have one case of this so far, it seems to be a rare scenario.
We've updated KDE Plasma to 6.5.3. Even though packages that appear on ISOs are frozen, we felt it was important to get the latest version of the Plasma desktop in for the release. 6.5.3 is a bugfix release, and the full changelog can be found here.
Our main focus is still on getting the Solus 4.8 release out, so most of the updates this week outside of Plasma are security updates.
Warning: nvidia-470-glx/nvidia-470-glx-current users:
This driver is EOL. Nvidia stopped supporting it over a year ago, and Solus has had to add an increasing number of patches to keep this driver working. Solus will stop supporting this driver for kernel 6.18.x. Users will then have to rely on the nouveau driver, or upgrade their GPU.
Additionally, this driver has no Wayland support. Users of this driver on Plasma must install the plasma-x11 package, and select the Plasma (X11) session on the login screen to have a working system. GNOME users must install the gnome-session-shell-x11 package, and select the "GNOME on XOrg" session from the login menu. Please note that GNOME has already announced plans to drop x11 support with Gnome 50.
Security updates
Speaking of security updates, we have a bunch. Make sure to install updates to get the latest vulnerability fixes.
- audiofile was updated to 0.3.6-4 (@androidnisse). Includes security fixes for CVE-2019-13147, CVE-2022-24599.
- libgnutls was updated to 3.8.11-51 (@EbonJaeger). Includes security fixes for CVE-2025-9820.
- libwebkit-gtk was updated to 2.50.2-133 (@EbonJaeger). Includes security fixes for CVE-2023-43000, CVE-2025-43429, CVE-2025-43443, CVE-2025-43425, CVE-2025-43431, CVE-2025-43434, CVE-2025-43427, CVE-2025-43419, CVE-2025-43432, CVE-2025-43430, CVE-2025-43480, CVE-2025-43392, CVE-2025-43440.
- libwebkit-gtk41 was updated to 2.50.2-46 (@EbonJaeger). Includes security fixes for CVE-2023-43000, CVE-2025-43429, CVE-2025-43443, CVE-2025-43425, CVE-2025-43431, CVE-2025-43434, CVE-2025-43427, CVE-2025-43419, CVE-2025-43432, CVE-2025-43430, CVE-2025-43480, CVE-2025-43392, CVE-2025-43440.
- libwebkit-gtk6 was updated to 2.50.2-19 (@EbonJaeger). Includes security fixes for CVE-2023-43000, CVE-2025-43429, CVE-2025-43443, CVE-2025-43425, CVE-2025-43431, CVE-2025-43434, CVE-2025-43427, CVE-2025-43419, CVE-2025-43432, CVE-2025-43430, CVE-2025-43480, CVE-2025-43392, CVE-2025-43440.
- openvpn was updated to 2.6.16-38 (@EbonJaeger). Includes security fixes for CVE-2025-13086.
- opera-stable was updated to 124.0.5705.42-364 (@HarveyDevel). Includes security fixes for CVE-2025-13223.
- postgresql was updated to 18.1-61 (@silkeh). Includes security fixes for CVE-2025-12817, CVE-2025-12818.
General updates
The full list of updated packages can be found here.
For the list of currently known issues, see the dedicated thread for it. If you begin experiencing a bug, please look for an issue on our issue tracker, and open a new one if one does not exist.
That’s all for this week, folks! We'll be here same time, same place next week for another roundup of the news!
