This Week in TUXEDO OS #03-2025 - TUXEDO Computers

Hello TUXEDO fans and open-source enthusiasts!

The new year is gaining momentum. Our penguins have provided a new ISO that not only delivers the latest versions of KDE Plasma, KDE Frameworks, and KDE Gear but also brings back full disk encryption in the installer. Of course, the security vulnerabilities in rsync that were disclosed this week have already been addressed by TUXEDO.

Enjoy reading,
The TUXEDO OS Team

Updates for TUXEDO OS

Changes in the Repositories

• Plasma 6.2.6: Details on improvements can be found here.
• Frameworks 6.10.0: Release information is available here.
• Gear 24.12.1: Further information is also available at this link.

New ISO Image for TUXEDO OS

• Plasma Update: The updated ISO contains the changes mentioned above.
• Additional Updates: All updates from Ubuntu and TUXEDO OS since December 18, 2024, are included.
• Guided Installation for Encrypted Systems: It is now again possible to choose full disk encryption during installation. Please note that this will use the entire selected disk.

Patch for udev-hid-bpf Integrated into Mainline

A new update in the Mainline branch of udev-hid-bpf optimizes the use of fan control on the TUXEDO Sirius 16 Gen1 and Gen2 notebooks. These devices feature an additional „Fan“ button next to F12. This button has the following functions:

• Single press: Sends an F14 signal, which can be customized by users.
• With FN key: Activates the fan mode with 100% fan speed and additionally sends an F13 signal, which by default leads to the system control in desktop environments like KDE Plasma.

To avoid unwanted FN key double bindings, the new BPF program suppresses the F13 output when the FN key is used in combination with the „Fan“ button.

KDE App of the Week: Accounting with Skrooge

Accounting is not something most people enjoy; rather, it is a necessary chore often carried out with proprietary software. However, in the Linux ecosystem, there are applications that tackle this disliked task. One of these applications is Skrooge, which has been maintained by the KDE developers for many years and provides organization and oversight of personal finances and accounting in the SOHO (Small Office, Home Office) sector.

With Skrooge, you can manage multiple accounts, including bank accounts, credit cards, and cash. You can create budgets, track whether you’re staying within set limits, and discover potential savings. Detailed reports and charts help you identify financial trends and spending patterns. Skrooge also offers powerful import and export options, supporting formats such as QIF, CSV, and OFX. You can import data from financial apps like GnuCash, Grisbi, HomeBank, and Money Manager Ex, and export it to KMyMoney, another KDE app for personal finances. The search and filter functions allow for quick and precise data retrieval.

If you’re looking for detailed control and analysis of your finances, Skrooge is an excellent choice. Recently, the application was ported to the current Version 25.1.0 based on KDE Frameworks 6 and Qt 6, making it a perfect fit for the latest TUXEDO OS. Skrooge can be installed via the Dolphin package manager or as a Flatpak. The source code is available at the application’s download portal. The comprehensive manual answers all your questions.

You can find other KDE apps that were updated last week in the column This Week in KDE Apps.

KDE Tips and Tricks: Find the Mouse Pointer

Unfortunately, not everyone has perfect vision. Many users enlarge the text on their computer, increase desktop scaling, or prefer larger displays with lower resolution. However, even people with 20/20 vision can occasionally lose track of the mouse pointer.

To quickly find it again, TUXEDO OS, in combination with KDE, offers a handy feature: Shake the mouse! Simply try it out: Move the mouse back and forth several times or swipe your finger over the touchpad. With each shake, the mouse pointer grows a little larger. Once you stop moving the mouse, the pointer returns to its original size.

If desired, you can enable or disable this feature under System Settings » Input & Output » Accessibility » Shake Cursor and adjust the magnification as needed.

Security Updates for Ubuntu

The security updates listed here are directly integrated into TUXEDO OS:

• USN-7216–1: tqdm vulnerability: tqdm could be crashed or allow arbitrary code execution if it receives specially crafted inputs.
  Identifier: CVE-2024–34062
  Affected: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS
• USN-7206–2: rsync regression: USN-7206–1 caused some regressions in rsync.
  Affected: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 ESM, Ubuntu 16.04 ESM, Ubuntu 14.04 ESM
• USN-7215–1: libxml2 vulnerability: libxml2 could disclose sensitive information over the network.
  Identifier: CVE-2024–40896
  Affected: Ubuntu 24.10
• USN-7214–1: HarfBuzz vulnerability: HarfBuzz could be crashed or execute programs as your login if it opens a specially crafted file.
  Identifier: CVE-2024–56732
  Affected: Ubuntu 24.10
• USN-7213–1: poppler vulnerability: poppler could be crashed or disclose sensitive information if it opens a specially crafted file.
  Identifier: CVE-2024–56378
  Affected: Ubuntu 24.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 ESM, Ubuntu 16.04 ESM
• USN-7212–1: Python 2.7 vulnerabilities: Several security issues were fixed in Python 2.7.
  Identifier: CVE-2022–45061, CVE-2019–9674, CVE-2024–0450
  Affected: Ubuntu 22.04 LTS, Ubuntu 20.04 LTS
• USN-7211–1: Audacity vulnerability: Audacity could disclose sensitive information.
  Identifier: CVE-2020–11867
  Affected: Ubuntu 20.04 LTS, Ubuntu 18.04 ESM, Ubuntu 16.04 ESM
• USN-7209–1: GIMP DDS Plugin vulnerabilities: The GIMP DDS plugin could be crashed or execute programs as your login if it opens a specially crafted file.
  Identifier: CVE-2023–44441
  Affected: Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 ESM, Ubuntu 16.04 ESM
• USN-7208–1: Apache Commons BCEL vulnerability: Apache Commons BCEL could be crashed or cause program execution when receiving specially crafted network traffic.
  Identifier: CVE-2022–42920
  Affected: Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 ESM, Ubuntu 16.04 ESM
• USN-7210–1: .NET vulnerabilities: Several security issues were fixed in .NET.
  Identifier: CVE-2025–21176, CVE-2025–21171, CVE-2025–21173, and 1 other
  Affected: Ubuntu 24.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS
• USN-7173–3: Linux kernel (Raspberry Pi) vulnerabilities: Several security issues were fixed in the Linux kernel.
  Identifier: CVE-2024–50264, CVE-2024–53057, CVE-2024–35965, and 13 more
  Affected: Ubuntu 18.04 ESM
• USN-7204–1: NeoMutt vulnerabilities: Several security issues were fixed in NeoMutt.
  Identifier: CVE-2018–14361, CVE-2020–28896, CVE-2021–32055, and 18 more
  Affected: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 ESM
• USN-7206–1: rsync vulnerabilities: Several security issues were fixed in rsync.
  Identifier: CVE-2024–12085, CVE-2024–12084, CVE-2024–12088, and 3 more
  Affected: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 ESM, Ubuntu 16.04 ESM, Ubuntu 14.04 ESM
• USN-7207–1: Git vulnerabilities: Several security issues were fixed in Git.
  Identifier: CVE-2024–52006, CVE-2024–50349
  Affected: Ubuntu 24.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS
• USN-7195–2: Linux kernel (Azure) vulnerabilities: Several security issues were fixed in the Linux kernel.
  Identifier: CVE-2024–53057, CVE-2024–35965, CVE-2023–52497, and 36 more
  Affected: Ubuntu 18.04 ESM
• USN-7205–1: Django vulnerability: Django could cause a Denial-of-Service when it receives a specially crafted IPv6 string.
  Identifier: CVE-2024–56374
  Affected: Ubuntu 24.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS
• USN-7203–1: PowerDNS vulnerabilities: Several security issues were fixed in PowerDNS.
  Identifier: CVE-2018–1046, CVE-2018–10851, CVE-2020–17482, and 3 more
  Affected: Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 ESM, Ubuntu 16.04 ESM
• USN-7202–1: HPLIP vulnerability: HPLIP could be crashed or execute programs when it receives specially crafted network traffic.
  Identifier: CVE-2020–6923
  Affected: Ubuntu 20.04 LTS
• USN-7201–1: WebKitGTK vulnerabilities: Several security issues were fixed in WebKitGTK.
  Identifier: CVE-2024–54479, CVE-2024–54505, CVE-2024–54502, and 1 other
  Affected: Ubuntu 24.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS
• USN-7200–1: Roundcube vulnerability: Roundcube could disclose sensitive information.
  Identifier: CVE-2017–16651
  Affected: Ubuntu 16.04 ESM
• USN-6940–2: snapd vulnerabilities: Several security issues were fixed in snapd.
  Identifier: CVE-2024–29068, CVE-2024–29069, CVE-2024–1724
  Affected: Ubuntu 18.04 ESM, Ubuntu 16.04 ESM
• USN-7199–1: xmltok library vulnerabilities: Several security issues were fixed in libxmltok.
  Identifier: CVE-2019–15903, CVE-2022–22824, CVE-2022–22822, and 9 more
  Affected: Ubuntu 24.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 ESM

Current BIOS/EC Versions

An EC/BIOS update affects key system components. Please ensure that you follow the instructions carefully and take your time. The process is usually completed quickly. If you have any doubts, our support team is happy to assist you. The following devices have BIOS/EC updates available: