Hello TUXEDO Fans and Open-Source Enthusiasts!
Our developer Tuxes are dancing with joy on their keyboards: Greg Kroah-Hartman , longtime kernel maintainer and savior of countless Linux systems, has been honored in Brussels with the European Open Source Award for „Excellence in Open Source“.
Who else ensures week after week that billions of devices around the world run smoothly? For us, it’s clear: without Greg, many security updates wouldn’t exist, and some Tux penguins would have to take care of the kernel themselves – a thought that makes our feathers stand on end.
Alongside this accolade, there’s, of course, more to discover in the latest TWIX: we introduce KTrip, the handy KDE travel companion, take a look at the Mouse Tiler 4.0 update, and present the freshest system updates as always.
Enjoy reading,
The TUXEDO OS Team
Note: We would like to keep you updated on the latest developments in TUXEDO OS with the TWIX series and introduce you to exciting applications as well as practical tips related to the KDE desktop and TUXEDO OS. However, this section should not be a one-way street: your feedback, ideas, and suggestions for improvement are very welcome! For this purpose, we have created a thread on Reddit, where you can reach us directly.
Updates in TUXEDO OS
tuxedo-tomte-light 1.0.0
Hardened Python codebase and testing infrastructure
Added tuxedo-repository and tuxedo-suite as dependencies/recommended packages
Fixed error with unhandled exit code in the installation function
Introduced separate logging for package installations and program executions
More information on TUXEDO Tomte Light
FAI 6.0.5–2.2.0
Changed Debian package from tuxedo-tomte to tuxedo-tomte-light
Masked power-profiles-daemon for TUXEDO OS
tuxedo-tomte 3.0.0 (Debian)
Transitional package for tuxedo-tomte-light
VirtualBox 7.2.6-dfsg-2~tux1
New upstream version
Fixed VNC extension bug (also in 7.2.4-dfsg-4~tux1)
Includes fix for issues with various programs in Windows 11 VMs
tuxedo-theme-plasma 4.0.3~tux1
Removed all xdg-desktop-menu commands
Package now only creates the TUXEDO category in the menu
Package deletes all unwanted tuxedo .desktop files in /usr/local/share/applications
tuxedo-accessibility-collection 1.0.0
Meta-package for accessibility
Important Guides (new or updated)
KDE App of the Week: KTrip – The KDE Travel Companion
This week, our KDE App of the Week is KTrip – the little sibling of KDE Itinerary, which we already featured in TWIX #41–2024 . KTrip was also featured in this column a year ago. Since then, the app has seen significant improvements, and the installation method on Android has changed.
What is KTrip?
Many of us know the situation: you’re on a train and want to quickly check a connection – but the public transport app on your smartphone is cluttered, full of ads, or tied to a single transport provider. This is exactly where KTrip comes in. The app offers a simple, free solution for bus and train travel on Linux, Plasma Mobile, and Android.
KTrip is a KDE application built on Qt and the KDE Frameworks. It integrates seamlessly into Plasma and relies entirely on local data storage. As a public transport assistant, the app primarily takes care of two tasks for you: finding connections and keeping track of departures.
Before searching for a connection, first select the transport providers and save them in KTrip so the app can display all relevant data for bus and train connections.
KTrip lists connections including travel time, departure, and arrival. Clicking a connection opens additional details like delays or alternative routes.
What can KTrip do?
KTrip helps you with the following tasks:
Searching for journeys between two locations
Viewing departures and arrivals at a specific stop
Displaying real-time information on delays and disruptions from the respective data provider
Accessing information from multiple transport providers via KPublicTransport without being tied to a single company
Maintaining control over your own data: unlike many commercial public transport apps, there are no trackers, ads, or mandatory accounts
This makes KTrip a streamlined tool tailored specifically to the daily needs of public transport users. Those who want to plan complete trips including hotels, flights, or rental cars, and access station or airport maps, can turn to the bigger sibling, KDE Itinerary.
Availability
KTrip is not preinstalled in TUXEDO OS, but it is available in the Discover software store as both a Debian package and a Flatpak. Alternatively, it can be installed via the terminal:
sudo apt update && sudo apt install ktrip
Travel data should also be available on the go. While KTrip is not in the Google Play Store, it can be installed through the open-source app store F-Droid . To do this, visit the corresponding KDE website and scan the provided QR code. This adds the KDE repository to F-Droid and currently provides KTrip along with 24 other KDE apps. After confirming the repository on your Android device, KTrip can be installed as usual. The app is not yet available for iOS.
Synchronizing travel data created on a PC with an Android device still requires manual steps. Unlike KDE Itinerary, KTrip data must be transferred via KDE Connect or sent through Dolphin’s Send to Device function. Users of tools like Syncthing can automate synchronization.
Info: Are you interested in Plasma development and want to know what new features are planned and which programs have been recently updated? You can find a detailed overview in the weekly column This week in Plasma by KDE developer Nate Graham.
TUXEDO OS Tips & Tricks: Mouse Tiler 4.0 and Soon 5.0
In TWIX 02–2026 we already introduced the Mouse Tiler – a KWin script that lets you automatically arrange windows on your screen using the mouse. The concept is reminiscent of classic tiling window managers like Hyprland, but it works directly within the familiar KDE Plasma desktop without sacrificing its comfort and flexibility.
Back then, version 1.0 was the focus. The developer has been very active since, and Mouse Tiler 4.0 is now available. Work on version 5.0 is already underway, introducing a so-called „Auto Tiler.“ The developer is currently gathering community feedback for this new concept.
Mouse Tiler 4.0 introduces a new virtual desktop manager, allowing windows to be arranged directly on the grid with the mouse and moved flexibly between workspaces.
New since our last update is an integrated virtual desktop manager. It allows windows to be moved or placed on other virtual workspaces via drag & drop. Numerous options control visibility, window-dropping behavior, and the automatic removal of empty desktops. The package is complemented by customized default fonts, configurable screen edges, and a web-based layout editor.
Installation is still conveniently done via System Settings » Window Management » KWin Scripts » Get New Scripts… . Updates are usually delivered automatically through Discover’s standard system updates. If an update fails, removing the script and reinstalling it as described typically resolves the issue, while personal settings are usually retained.
If you’re new to Mouse Tiler, the detailed video by Brodie Robertson is worth watching. He explains the extension in depth and demonstrates many practical use cases. In the comments, the Mouse Tiler developer notes that version 5.0 is already 98% complete. Development is progressing steadily – and some of the extension’s features may even be integrated directly into KDE Plasma in the future.
YouTuber Brodie Robertson explains Mouse Tiler in a detailed video, showing practical examples of how the KWin script can be used effectively in everyday work.
Ubuntu Security Updates
The security updates listed here from Ubuntu are directly integrated into TUXEDO OS:
USN-8018–1: Python vulnerabilities : Several security issues were fixed in Python.
IDs: CVE-2025–15366, CVE-2025–15367, CVE-2025–13837 + 5 others
Affects: Ubuntu 25.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS, Ubuntu 14.04 LTS
USN-8019–1: tracker-miners vulnerabilities : tracker-miners could be made to crash or run programs as your login if it opened a specially crafted file.
IDs: CVE-2026–1764, CVE-2026–1767, CVE-2026–1766 + 1 other
Affects: Ubuntu 25.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS
USN-8017–1: GLib vulnerabilities : Several security issues were fixed in GLib.
IDs: CVE-2026–1484, CVE-2026–1489, CVE-2026–1485
Affects: Ubuntu 25.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS
USN-8015–2: Linux kernel (Real-time) vulnerabilities : Several security issues were fixed in the Linux kernel.
IDs: CVE-2025–38561, CVE-2025–39698, CVE-2025–40019
Affects: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS
USN-8016–1: Linux kernel (NVIDIA) vulnerabilities : Several security issues were fixed in the Linux kernel.
IDs: CVE-2025–38561, CVE-2025–68746, CVE-2025–39698 + 1 other
Affects: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS
USN-8015–1: Linux kernel vulnerabilities : Several security issues were fixed in the Linux kernel.
IDs: CVE-2025–38561, CVE-2025–39698, CVE-2025–40019
Affects: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS
USN-8014–1: Linux kernel vulnerabilities : Several security issues were fixed in the Linux kernel.
IDs: CVE-2025–40019, CVE-2025–40214
Affects: Ubuntu 25.10, Ubuntu 24.04 LTS
USN-8012–1: GitHub CLI vulnerabilities : Several security issues were fixed in GitHub CLI.
IDs: CVE-2024–53858, CVE-2024–54132
Affects: Ubuntu 24.04 LTS
USN-8011–1: Emacs vulnerabilities : Several security issues were fixed in Emacs.
IDs: CVE-2025–1244, CVE-2024–53920
Affects: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS
USN-8009–1: Django vulnerabilities : Several security issues were fixed in Django.
IDs: CVE-2026–1312, CVE-2026–1287, CVE-2026–1207 + 3 others
Affects: Ubuntu 25.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS, Ubuntu 14.04 LTS
USN-8008–1: Keystone Middleware vulnerability : Keystone Middleware could allow unintended access to network services.
IDs: CVE-2026–22797
Affects: Ubuntu 25.10, Ubuntu 24.04 LTS
USN-8007–1: ImageMagick vulnerabilities : Several security issues were fixed in ImageMagick.
IDs: CVE-2025–68618, CVE-2025–43965, CVE-2025–69204
Affects: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS, Ubuntu 14.04 LTS
USN-8005–1: GNU C Library vulnerabilities : Several security issues were fixed in GNU C Library.
IDs: CVE-2026–0861, CVE-2026–0915, CVE-2025–15281 + 1 other
Affects: Ubuntu 25.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS
USN-8004–1: FreeRDP vulnerabilities : Several security issues were fixed in FreeRDP.
IDs: CVE-2026–23533, CVE-2026–23531, CVE-2026–23534 + 2 others
Affects: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS
USN-7998–1: OpenJDK 17 vulnerabilities : Several security issues were fixed in OpenJDK 17.
IDs: CVE-2026–21945, CVE-2026–21932, CVE-2026–21925 + 1 other
Affects: Ubuntu 25.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS
USN-8002–1: OpenJDK 21 vulnerabilities : Several security issues were fixed in OpenJDK 21.
IDs: CVE-2026–21925, CVE-2026–21933, CVE-2026–21932 + 1 other
Affects: Ubuntu 25.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS
USN-8001–1: OpenJDK 11 vulnerabilities : Several security issues were fixed in OpenJDK 11.
IDs: CVE-2026–21925, CVE-2026–21933, CVE-2026–21932 + 1 other
Affects: Ubuntu 25.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS
USN-8000–1: OpenJDK 8 vulnerabilities : Several security issues were fixed in OpenJDK 8.
IDs: CVE-2026–21932, CVE-2026–21925, CVE-2026–21945 + 1 other
Affects: Ubuntu 25.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04 LTS
USN-7999–1: Filelock vulnerabilities : Several security issues were fixed in Filelock.
IDs: CVE-2025–68146, CVE-2026–22701
Affects: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS
USN-7995–1: OpenJDK 25 vulnerabilities : Several security issues were fixed in OpenJDK 25.
IDs: CVE-2026–21945, CVE-2026–21932, CVE-2026–21925 + 1 other
Affects: Ubuntu 25.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS
USN-7994–1: MySQL vulnerabilities : Several security issues were fixed in MySQL.
IDs: CVE-2026–21937, CVE-2026–21941, CVE-2026–21964 + 3 others
Affects: Ubuntu 25.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS
USN-7993–1: libpng vulnerabilities : libpng could be made to crash if it opened a specially crafted file.
IDs: CVE-2025–28164, CVE-2025–28162
Affects: Ubuntu 24.04 LTS
USN-7992–1: Inetutils vulnerability : Inetutils could allow unintended access to network services.
IDs: CVE-2026–24061
Affects: Ubuntu 25.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS
USN-7989–1: The Internet Archive Python Library vulnerability : The Internet Archive Python Library would allow unintended access to files.
IDs: CVE-2025–58438
Affects: Ubuntu 25.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS