Heya folks! It's sync day, and that means it's time for the weekly Solus roundup!
Our kernels have been updated again this week to the latest point releases in each series. The current kernel is now at version 6.18.13, while the LTS kernel is now 6.12.74. Important! We are looking at updating the LTS branch to a newer LTS kernel series very soon! Please make sure that if you are using the LTS kernel that the 6.18 series works on your hardware!
WARNING: If you are using the nvidia-470* driver, this driver has not been supported by Nvidia for over a year and a half. It will be removed from the Solus repository in the not-so-distant future! When it is deprecated, you will be forced back to the nouveau driver, which will result in massive performance drops compared to what you are used to.
Your choices are upgrade your GPU, or accept worse performance.
KDE Plasma has been updated to 6.6.1. Plasma 6.6 is a major update to the Plasma experience aimed at improving usability and accessability, with some new practical features thrown in. This release features a new built-in on-screen keyboard, and the Spectacle screenshot tool can now extract text from screenshots. Check out the release announcement here.
The budgie-session package had a fix backported (and cherry-picked to Polaris users) to fix the session crashing when using Firefox and Firefox forks.
Developers using the Vala programming langauge can now install two tools from the Solus repository. Now packaged are Vala language server, and vala-lint. These tools make it easier to write better Vala code.
Security updates
As usual, we have some security updates this week. Make sure to install available updates for the latest vulnerability fixes.
- caddy was updated to 2.11.1-24 (@davidjharder). Includes security fixes for CVE-2026-27585, CVE-2026-27590, CVE-2026-27586, CVE-2026-27587, CVE-2026-27589, CVE-2026-27588.
- nodejs-20 was updated to 20.20.0-8 (@Jaredy899). Includes security fixes for CVE-2026-21637, CVE-2025-55132, CVE-2025-55130, CVE-2025-59465, CVE-2025-55131.
- nodejs-22 was updated to 22.22.0-9 (@Jaredy899). Includes security fixes for CVE-2026-21637, CVE-2025-55132, CVE-2025-55130, CVE-2025-59465, CVE-2025-59466, CVE-2025-55131.
- python-cryptography was updated to 46.0.5-34 (@EbonJaeger). Includes security fixes for CVE-2026-26007.
- qt6-webengine was updated to 6.10.2-58 (@HarveyDevel). Includes security fixes for CVE-2026-2648, CVE-2026-2649.
- udisks was updated to 2.11.1-32 (@HarveyDevel). Includes security fixes for CVE-2026-26103, CVE-2026-26104.
- valkey was updated to 9.0.3-11 (@androidnisse). Includes security fixes for CVE-2026-21863, CVE-2026-27623, CVE-2025-67733.
- yt-dlp was updated to 2026.02.21-267 (@HarveyDevel). Includes security fixes for CVE-2026-26331.
General updates
The full list of updated packages can be found here.
For the list of currently known issues, see the dedicated thread for it. If you begin experiencing a bug, please look for an issue on our issue tracker, and open a new one if one does not exist.
That’s all for this week, folks! We'll be here same time, same place next week for another roundup of the news!