This Week in TUXEDO OS #21-2025 - TUXEDO Computers

Hello TUXEDO Fans and Open-Source Enthusiasts!

Last weekend, our developer penguins were glued to their screens—it was time for the ESC, the European Software Contest! Echoes rang out across Europe: “And our 12 points go to… LIIINUUUX!” With more than just a bottle of krill Prosecco, a table full of delicious fishy snacks, and high spirits all around, they celebrated the triumphs of free software. There’s plenty of fresh news in TUXEDO OS too: a brand-new kernel brings improved drivers, Karton teases KDE virtualization and as a musical treat, we’re introducing the PlasMusic Toolbar.

Enjoy reading,
The TUXEDO OS Team

TUXEDO OS Updates

linux 6.11.0–116025.25~24.04.1tux1

• drm/i915/rc6: Disabled RC6 for InfinityBook Pro Gen8 — found to resolve spontaneous reset issues on InfinityBook Pro Gen8. (Patch)
• acpi/ec: Added device to acpi_ec_no_wakeup quirk list (already set in tomte, now added as upstream solution)

linux 6.11.0–114025.25~24.04.1tux1

• Rebased to the latest Ubuntu kernel

tuxedo-drivers 4.13.1

• InfinityFlex: FN key no longer disables the touchpad
• NB02: Prevent FN key from spamming dmesg
• NB02: Fix touchpad toggle key functionality under Wayland
• Aura 14/15 Gen4: Webcam switch now correctly hidden when disabled in BIOS
• Sirius 16 Gen1/2: Add udev-hid-bpf as recommended dependency for keyboard fix
• Kernel Compatibility: Resolve build issues with Linux 6.14 and 6.15

tuxedo-drivers 4.13.0

• Touchpad toggle key fixed on NB02 under Wayland
• Webcam switch on Aura 14/15 Gen4 now correctly disappears when disabled in BIOS
• udev-hid-bpf now recommended for keyboard fix on Sirius 16 Gen1/2
• Fixed build issues with kernels 6.14 and 6.15

tuxedo-tomte 2.52.0

• Removed tuxedoplasmaupgrade from TUXEDO OS jammy

Chromium 136.0.7103.113

• Stable channel update
• CVE-2025–4664: Inadequate policy enforcement in the loader
• CVE-2025–4609: Incorrect handle passing in Mojo
• Details on the Chromium Blog

Firefox 138.0.4

• Changelog at Mozilla
• Security fixes per MFSA 2025–36

Thunderbird 128.10.1esr

• Release notes at Thunderbird
• Security fixes per MFSA 2025–35

KDE App of the Week: Virtual Machines in Karton

This week’s featured KDE app is, in a way, still virtual itself—it hasn’t been officially released yet. We’re talking about Karton, a native virtual machine manager for KDE with a name that says it all.

What is virtualization?

Our knowledge base includes a detailed article on how to run TUXEDO OS in various virtualization tools. Among these is GNOME Boxes—the only virtualization app specifically designed for a desktop environment. While it’s perfectly possible to use Boxes in KDE environments like TUXEDO OS, it requires pulling in a host of GTK libraries—unnecessary overhead when KDE could offer a native alternative.

As hinted above, this wish may soon come true: the native KDE application Karton is currently being developed as part of the Google Summer of Code 2025.

The technical foundation

Karton is being built with Qt Quick, a free application framework, along with Kirigami—the Qt Quick plugin collection for creating cross-platform user interfaces. Under the hood, it uses Libvirt, an open-source toolkit that provides a unified API, background daemon, and tools to manage a wide range of virtualization technologies. This allows Karton to control virtual machines (VMs) and related resources across many hypervisors, including KVM, QEMU, Xen, VMware ESXi, VirtualBox, Hyper-V, and more.

Planned features

As part of the GSoC project, the following features are expected to be implemented:

• A user-friendly graphical interface
• Support for snapshots to save and restore the state of your virtual machines
• A system monitor to visualize CPU and RAM usage of VMs, similar to what Virt-Manager offers
• Device passthrough from host to guest (e.g., USB sticks or webcams)

The project aims for completion by mid-July, with an official handover to the KDE project scheduled for September 1. We’ll update the linked article as soon as Karton becomes officially available.

TUXEDO OS Tips & Tricks: Music Control with the PlasMusic Toolbar

Do you listen to music on TUXEDO OS using Elisa, Clementine, or Spotify—and wish you could control playback right from your panel or desktop widget? The PlasMusic Toolbar is a compact widget for the Plasma 6 desktop that does exactly that.

Using the MPRIS interface, the widget displays the currently playing track and artist directly in your panel. It also provides playback controls: play, pause, next and previous track, and volume adjustment. In its expanded view, it shows album art and adds features like shuffle and repeat.

The layout is highly customizable: you can adjust icon sizes, choose which controls appear in the panel, and select your preferred media player as the data source. Supported players include Elisa, VLC, Spotify, and Clementine—as long as they use the MPRIS protocol.

Installation

To install the widget, right-click an empty space in your bottom panel and select Add or Manage Widgets…. In the dialog that opens, click Get New… and then Download New Plasma Widgets. Search for „music“ — one of the top results should be the plasmusic-toolbar widget. Click Install to add it to your system.

After installation, you’ll find PlasMusic Toolbar listed among your available widgets. Just drag it onto your desktop or panel—depending on whether you prefer quick access or a full-featured music controller with album art.

Ubuntu Security Updates

The security updates listed here from Ubuntu are directly integrated into TUXEDO OS:

• USN-7528–1: SQLite vulnerabilities: Several security issues were fixed in SQLite.
  IDs: CVE-2025–29088, CVE-2025–3277, CVE-2025–29087
  Affects: Ubuntu 25.04, Ubuntu 24.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS

• USN-7525–1: Tomcat vulnerability: Tomcat could expose sensitive files or run programs if it received specially crafted network traffic.
  IDs: CVE-2025–24813
  Affects: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 LTS

• USN-7523–1: Linux kernel (Raspberry Pi Real-time) vulnerabilities: Several security issues were fixed in the Linux kernel.
  IDs: CVE-2024–57793, CVE-2024–53068, CVE-2024–53096 (+701 others)
  Affects: Ubuntu 24.04 LTS

• USN-7515–2: Linux kernel vulnerabilities: Several security issues were fixed in the Linux kernel.
  IDs: CVE-2024–57793, CVE-2024–56670, CVE-2025–21649 (+131 others)
  Affects: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS

• USN-7522–1: Linux kernel (Azure, N-Series) vulnerabilities: Several security issues were fixed in the Linux kernel.
  IDs: CVE-2024–57793, CVE-2024–56670, CVE-2025–21649 (+133 others)
  Affects: Ubuntu 24.04 LTS

• USN-7513–3: Linux kernel vulnerabilities: Several security issues were fixed in the Linux kernel.
  IDs: CVE-2025–21639, CVE-2025–21655, CVE-2024–53179 (+130 others)
  Affects: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS

• USN-7521–1: Linux kernel vulnerabilities: Several security issues were fixed in the Linux kernel.
  IDs: CVE-2025–21716, CVE-2024–57986, CVE-2025–21866 (+225 others)
  Affects: Ubuntu 24.10, Ubuntu 24.04 LTS

• USN-7520–1: PostgreSQL vulnerability: PostgreSQL could be made to crash if it received specially crafted network traffic.
  IDs: CVE-2025–4207
  Affects: Ubuntu 24.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS

Current BIOS/EC Versions

An EC/BIOS update affects key system components. Please ensure that you follow the instructions carefully and take your time. The process is usually completed quickly. If you have any doubts, our support team is happy to assist you. The following devices have BIOS/EC updates available: