This Week in TUXEDO OS #45-2025 - TUXEDO Computers

Hello TUXEDO Fans and Open-Source Enthusiasts!

The Developer-TUX colony huddles a little closer together on their shimmering ice floe – winter is just around the corner! As temperatures slowly drop outside, it’s finally cozy-cold enough for our little Linux penguins to enjoy refreshing shrimp cocktails and the occasional ice bath.

To bridge the time until the first real frost, this week we’re taking a look at two exciting applications: Converseen, the versatile image conversion tool, and Qmmp, the classic music player with nostalgic charm and modern tech under the hood. So bundle up, get your tea or mulled punch ready – and let’s dive into this week’s highlights!

Enjoy reading,
The TUXEDO OS Team

TUXEDO OS Updates

Linux Kernel 6.14.0–114034.34~24.04.1tux1

• Rebased on the new Ubuntu version
• Fixes freeze issues on TUXEDO InfinityBook Pro Gen10

WebFAI

• The package tuxedo-fix-kvm-virt-at-load is now preinstalled by default on all Ubuntu and Debian systems

New ISO for TUXEDO OS

• Calamares no longer shows LVM volume groups as installation targets (Issue)
• System applications (e.g., GParted, Partition Manager) no longer require the root password in Live mode
• Includes all updates up to 06.11.2025, 15:00

tuxedo-systeminfos

• New package: tuxedo-systeminfos is now part of TUXEDO OS as well as Ubuntu and Debian systems installed via WebFAI
• More information: Article, GitHub

KDE App of the Week: Image Conversion with Converseen

Converseen is a lightweight, graphical open-source application for image conversion, built on the proven command-line tool Imagemagick. While not directly part of the KDE project, Converseen uses the Qt6 library, allowing it to integrate seamlessly into the Plasma desktop of TUXEDO OS.

Powerful Batch Processing

Converseen is perfect for converting, resizing, rotating, or renaming large numbers of images at once. It supports over 100 formats, including JPEG, PNG, TIFF, GIF, SVG, and modern formats such as AVIF, DPX, and EXR. Especially useful is the ability to convert PDF files into image sequences – ideal for documentation, presentations, or web articles.

You also have full control over image quality: sliders allow fine-tuning of compression, while resolution and image size can be adjusted in batch mode. Even without translation in other languages, the interface remains clear and intuitive.

Installation on TUXEDO OS

Converseen is not preinstalled but can be easily installed via the Discover package manager – either as a native package or as a Flatpak. To make the program appear directly in Dolphin’s context menu, you can optionally create a custom service menu:

mkdir -p ~/.local/share/kio/servicemenus/
cd ~/.local/share/kio/servicemenus/
touch converseen.desktop
chmod +x converseen.desktop
kate converseen.desktop

Then open the file converseen.desktop and add the following content:

Desktop Entry
Type=Service
ServiceTypes=KonqPopupMenu/Plugin
MimeType=image/jpeg;image/png;image/bmp;image/gif;
Actions=ConvertWithConverseen;

Desktop Action ConvertWithConverseen
Name=Open with Converseen
Icon=converseen
Exec=converseen %F

After restarting Dolphin, Converseen will be available directly via right-click in the context menu. With its wide format support, easy operation, and practical batch functions, Converseen is a powerful tool for anyone working with images regularly – from photographers and bloggers to developers.

TUXEDO OS Tips & Tricks: Winamp à la KDE with Qmmp

Some software classics have shaped computing history – among them the file manager Norton Commander with successors like Total Commander or, on Linux, the Midnight Commander. And of course, the legendary audio player Winamp. Younger readers may forgive the nostalgia: ICQ, Winamp, Total Commander, and WinRAR were once among the first programs installed on nearly every Windows 95 PC.

After a failed open-source attempt, Winamp today hardly matters. Only the Android version is still actively developed – most users have moved on to streaming services like Spotify, Tidal, or Deezer. Yet many music lovers still store their collections locally as MP3 or FLAC files – and deliberately avoid streaming via self-hosted solutions like Nextcloud Music or Navidrome. For this audience, Qmmp could be an exciting option.

Qmmp Whips the Penguin’s Ass

Qmmp (short for Qt-based Multimedia Player) is a classic music player that operates without a database by default. If your music is neatly organized in folders, simply enable the file browser under View » Files and navigate to your music folder – you’re ready to go.

Qmmp offers a clear interface with cover display, visualization, and a waveform seek bar (enable under View), allowing you to jump to any position in a track. Window areas can be freely arranged via drag & drop to customize the interface to your liking.

Optional Winamp Style

Like the original, Qmmp includes a psychedelic visualization of the playing song (Tools » Visualization), perfect for parties – though it may still display incorrectly under Wayland.

For full nostalgia, activate Skinned User Interface under Edit » Preferences » Interface and restart Qmmp. The player then appears in classic Winamp style. The illusion is complete if you download the original skin from the Winamp Skin Museum and activate it under Settings » Appearance.

Better KDE Plasma Integration

Check Settings » Modules: The MPRIS module integrates Qmmp seamlessly into the Plasma desktop – complete with media controls in the panel and song change notifications.

If your music is properly tagged with ID3 metadata, also enable the Media Library module. Add your music directories in its configuration and display the library panel via View » Library to conveniently browse your tracks.

Installation on TUXEDO OS

Qmmp is included in the TUXEDO OS package repositories and can be easily installed via the Discover software manager. The software is available both as a classic package in an older version and as a Flatpak in the current version 2.3.0. To take advantage of all the latest features, we recommend the Flatpak version.

Ubuntu Security Updates

The security updates listed here from Ubuntu are directly integrated into TUXEDO OS:

• USN-7861–2: Linux kernel (Real-time) vulnerabilities: Several security issues were fixed in the Linux kernel.
  IDs: CVE-2025–40300, CVE-2025–38118, CVE-2025–38352, +1 other.
  Affects: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS.

• USN-7864–1: Linux kernel (GCP and GKE) vulnerabilities: Several security issues were fixed in the Linux kernel.
  IDs: CVE-2025–40300, CVE-2025–38118, CVE-2025–38425, +2 others.
  Affects: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS.

• USN-7860–2: Linux kernel (Real-time) vulnerability: The system could be made to expose sensitive information.
  IDs: CVE-2025–40300.
  Affects: Ubuntu 24.04 LTS.

• USN-7861–1: Linux kernel vulnerabilities: Several security issues were fixed in the Linux kernel.
  IDs: CVE-2025–40300, CVE-2025–38118, CVE-2025–38352, +1 other.
  Affects: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS.

• USN-7860–1: Linux kernel vulnerability: The system could be made to expose sensitive information.
  IDs: CVE-2025–40300.
  Affects: Ubuntu 25.04, Ubuntu 24.04 LTS.

• USN-7859–1: Django vulnerabilities: Django could be made to run programs if it received specially crafted network traffic.
  IDs: CVE-2025–64459.
  Affects: Ubuntu 25.10, Ubuntu 25.04, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS.

• USN-7858–1: poppler vulnerability: poppler could be made to crash if it opened a specially crafted file.
  IDs: CVE-2025–52885.
  Affects: Ubuntu 25.10, Ubuntu 25.04, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS.

• USN-7857–1: OpenStack Keystone vulnerability: OpenStack Keystone could allow unintended access to network services.
  IDs: —
  Affects: Ubuntu 25.10, Ubuntu 25.04, Ubuntu 24.04 LTS.

• USN-7851–1: runC vulnerabilities: Several security issues were fixed in runC.
  IDs: CVE-2025–52565, CVE-2025–52881, CVE-2025–31133.
  Affects: Ubuntu 25.10, Ubuntu 25.04, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS.

• USN-7856–1: Linux kernel (HWE) vulnerabilities: Several security issues were fixed in the Linux kernel.
  IDs: CVE-2025–38231, CVE-2025–38220, CVE-2025–38418, +178 others.
  Affects: Ubuntu 24.04 LTS.

• USN-7855–1: Unbound vulnerability: Unbound could be made to hijack domains if it received specially crafted network traffic.
  IDs: CVE-2025–11411.
  Affects: Ubuntu 25.10, Ubuntu 25.04, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS.

• USN-7849–1: libssh vulnerability: libssh could be made to crash.
  IDs: CVE-2025–8114.
  Affects: Ubuntu 25.10, Ubuntu 25.04, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS.

• USN-7839–2: Google Guest Agent vulnerability: Google Guest Agent could allow unintended access to network services.
  IDs: CVE-2024–45337.
  Affects: Ubuntu 25.04, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS.

• USN-7833–4: Linux kernel (GCP) vulnerabilities: Several security issues were fixed in the Linux kernel.
  IDs: CVE-2025–38263, CVE-2025–38218, CVE-2025–38331, +170 others.
  Affects: Ubuntu 24.04 LTS.

• USN-7852–1: libxml2 vulnerability: libxml2 could be made to crash or run programs if it opened a specially crafted file.
  IDs: CVE-2025–7425.
  Affects: Ubuntu 25.04, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS.

• USN-7847–1: GNU binutils vulnerabilities: Several security issues were fixed in GNU binutils.
  IDs: CVE-2025–11083, CVE-2025–1147, CVE-2025–5245, +8 others.
  Affects: Ubuntu 25.04, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS.

• USN-7846–1: X.Org X Server vulnerabilities: Several security issues were fixed in X.Org X Server.
  IDs: CVE-2025–62230, CVE-2025–62231, CVE-2025–62229.
  Affects: Ubuntu 25.10, Ubuntu 25.04, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS.

• USN-7844–1: YAML::Syck vulnerability: The system could be made to expose sensitive information.
  IDs: CVE-2025–11683.
  Affects: Ubuntu 25.10, Ubuntu 25.04, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS.

• USN-7845–1: Squid vulnerability: Squid would allow unintended access to sensitive information over the network.
  IDs: CVE-2025–62168.
  Affects: Ubuntu 25.10, Ubuntu 25.04, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS.

• USN-7843–1: Netty vulnerability: Netty could be made to send emails as your login if it received specially crafted input.
  IDs: CVE-2025–59419.
  Affects: Ubuntu 25.10, Ubuntu 25.04, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS.

Current BIOS/EC Versions

An EC/BIOS update affects key system components. Please ensure that you follow the instructions carefully and take your time. The process is usually completed quickly. If you have any doubts, our support team is happy to assist you. The following devices have BIOS/EC updates available: