Heya folks! It's sync day, and that means it's time for the weekly Solus roundup!
We have some significant developments to talk about with the kernels this week. First off, our LTS kernel has been bumped to the 6.18 LTS series. For the time being, both the current and LTS kernels are on the same version. Secondly, our kernel configuration and patch sets are now the same as the ones used on AerynOS, except for a couple of distribution-specific patch differences. All hardware support has been enabled, so users should, in theory, be able to run our provided kernels on whatever hardware they have. All the Zen patches, and some other performance patches have been removed until they can be re-evaluated to see if they are actually useful. If they are, then they will be added again in the future.
Fooyin has been updated to 0.10.1. This is one of the biggest releases yet, bringing some of the most requested playback features to fooyin. The major additions are DSP support with a built-in DSP suite and a new equalizer, configurable cross-fading and fading for track changes and seeking, and Discord Rich Presence integration. Check out the full changelog here.
Museeks has been updated to 0.23.4. Users should be aware that it suffers from this issue where the window decorations (close button, maximize button, etc.) may be unresponsive until the title bar is double-clicked. Enabling the Wayland enhancements in the options seems to fix this issue as a workaround.
This week, we've added the Reuse tool to the repository. This is a tool for developers to audit their license compliance in their projects, and can generate a "bill of goods" in relation to your project's licenses.
Security updates
We have a bunch of security updates this week. Make sure to install your available updates to receive the latest vulnerability fixes!
- curl was updated to 8.19.0-113 (@silkeh). Includes security fixes for CVE-2026-1965, CVE-2026-3805, CVE-2026-3783, CVE-2026-3784.
- ghostty was updated to 1.3.0-18 (@Jaredy899). Includes security fixes for CVE-2026-26982.
- giflib was updated to 6.1.2-13 (@Jaredy899). Includes security fixes for CVE-2021-40633, CVE-2025-31344, CVE-2026-23868.
- imagemagick was updated to 7.1.2.16-208 (@Jaredy899). Includes security fixes for CVE-2026-28692, CVE-2026-30935, CVE-2026-28690, CVE-2026-30936, CVE-2026-28693, CVE-2026-28691.
- libssh was updated to 0.11.4-19 (@davidjharder). Includes security fixes for CVE-2026-0966, CVE-2026-0968, CVE-2026-0967, CVE-2026-0965.
- openssl was updated to 3.6.1-57 (@EbonJaeger). Includes security fixes for CVE-2026-22796, CVE-2025-69419, CVE-2025-15467, CVE-2026-22795, CVE-2025-15469, CVE-2025-11187, CVE-2025-69418, CVE-2025-15468, CVE-2025-69420, CVE-2025-66199, CVE-2025-68160, CVE-2025-69421.
- python-markdown was updated to 3.10.2-16 (@EbonJaeger). Includes security fixes for CVE-2025-69534.
- qt6-webengine was updated to 6.10.2-60 (@joebonrichie, @HarveyDevel). Includes security fixes for CVE-2026-3062, CVE-2026-3540, CVE-2026-3536, CVE-2026-3544, CVE-2026-3543, CVE-2026-3061, CVE-2026-3545, CVE-2026-3538, CVE-2026-3539, CVE-2026-3542, CVE-2026-3541.
General updates
The full list of updated packages can be found here.
For the list of currently known issues, see the dedicated thread for it. If you begin experiencing a bug, please look for an issue on our issue tracker, and open a new one if one does not exist.
That’s all for this week, folks! We'll be here same time, same place next week for another roundup of the news!
