Heya folks! It's sync day, and that means it's time for the weekly Solus roundup!
wget has been updated to wget2 this week. This is a rewrite of the wget project. Designed and written from scratch, it wraps around libwget, that provides the basic functions needed by a web client. The full changelog up to version 2.2.1, the version we are now on, can be found here. In addition, we've enabled more features and capabilities in our package.
The Korla icon theme has been updated to 2.0.0. This version removes the Light and Light-panel separate themes.
yubikey-personalization-gui has been deprecated this week. The project has been unmaintained since 2019. There is a replacement in the form of yubikey-manager.
We have some new packages this time around.
First up is the addition of Pear Desktop, a desktop application for YouTube Music.
Second is croc, a tool for transferring files and folders between computers. It is fast, secure, and easy to use. It works on any two computers, even if they are behind firewalls or NATs.
Thirdly, we have openmohaa, an open-source game engine compatible with Medal of Honor: Allied Assault and its expansions (Spearhead and Breakthrough). You'll need to extract the original game assets to ~/.openmohaa to play; this is easiest done with the GOG installer for the original game. The open-source engine has some nice features over the original game such as continuing to support multi-player, security updates, as well as an improved renderer, to name a few.
Lastly, we have wdisplays. This is a graphical tool to configure displays when using wlroots-based compositors such as labwc. Most desktops making use of these compositors require the user to configure their display setup by hand using a text file. With this program, that can be done much more easily.
Security updates
We have some security updates for everyone. As always, make sure to install updates to get the latest vulnerability fixes.
- curl was updated to 8.18.0-112 (@EbonJaeger). Includes security fixes for CVE-2025-14524, CVE-2025-13034, CVE-2025-15224, CVE-2025-14017, CVE-2025-14819, CVE-2025-15079.
- imagemagick was updated to 7.1.2.12-205 (@davidjharder). Includes security fixes for GHSA-hrh7-j8q2-4qcw, GHSA-7rvh-xqp3-pr8j, GHSA-p27m-hp98-6637.
- python-aiohttp was updated to 3.13.3-23 (@EbonJaeger). Includes security fixes for CVE-2025-69225, CVE-2025-69229, CVE-2025-69228, CVE-2025-69230, CVE-2025-69224, CVE-2025-69223, CVE-2025-69226, CVE-2025-69227.
- qt6-webengine was updated to 6.10.1-52 (@HarveyDevel, @HarveyDevel, @HarveyDevel). Includes security fixes for CVE-2025-64720, CVE-2025-48174, CVE-2025-14174, CVE-2025-13721, CVE-2025-13639, CVE-2025-13224, CVE-2025-64505, CVE-2025-13720, CVE-2025-13634, CVE-2025-141765, CVE-2025-13638, CVE-2025-64506, CVE-2025-48175, CVE-2025-65018, CVE-2025-66293.
General updates
The full list of updated packages can be found here.
For the list of currently known issues, see the dedicated thread for it. If you begin experiencing a bug, please look for an issue on our issue tracker, and open a new one if one does not exist.
That’s all for this week, folks! We'll be here same time, same place next week for another roundup of the news!
