This Week in TUXEDO OS #29-2026 - TUXEDO Computers

Hello TUXEDO Fans and Open-Source Enthusiasts!

Not only will TUXEDO OS use Debian as its new foundation in the future – Hannah Montana Linux is also making a comeback with a Debian base. The unusual Linux project, once known primarily as a curiosity, has been revived and combines nostalgic design with modern open source technology.

The new version Hannah Montana Linux 26 is based on KDE Plasma 6 and comes with a refreshed appearance featuring new icons, colors, and wallpapers. Behind the playful interface, however, is a fully-fledged Linux desktop that can handle all the tasks expected from a modern system thanks to KDE Plasma. You can get an impression of the project in this video.

Of course, we will once again take a look at the latest developments around TUXEDO OS. You will learn which updates and improvements have arrived in recent days. We will also introduce MPC-QT as our App of the Week and take a look at SuperFile, a modern file manager for the terminal.

Enjoy reading,
The TUXEDO OS Team

Latest News about TUXEDO OS

Updated Download Infrastructure for TUXEDO OS ISOs

We have completely redesigned the download page for our TUXEDO OS installation images and simplified the underlying infrastructure. The new platform provides a cleaner layout and focuses on the information and files required for a secure download. We also explain how to verify the integrity of a downloaded ISO image. Learn more here: https://www.tuxedocomputers.com/en/New-download-infrastructure-for-TUXEDO-OS-ISOs.tuxedo

More Information about TUXEDO OS Moving to Debian

Since announcing the planned transition of TUXEDO OS from Ubuntu LTS to Debian Testing, we have received many questions—especially about how we will maintain the system’s security. In a detailed article, we explain our security concept and the measures we take to make Debian Testing suitable for everyday use. We also outline what the transition means for users of existing Ubuntu- and Kubuntu-based TUXEDO OS installations, including how long these systems will continue to receive support. Learn more here:

• Security on TUXEDO OS: How we secure Debian Testing: https://www.tuxedocomputers.com/en/Security-on-TUXEDO-OS-How-we-secure-Debian-Testing.tuxedo
• What the future holds for TUXEDO OS, Ubuntu and Kubuntu: https://www.tuxedocomputers.com/en/What-the-future-holds-for-TUXEDO-OS-Ubuntu-and-Kubuntu.tuxedo

Updates in TUXEDO OS

tuxedo-runtime 1.0.0

• Initial release of runtime.sh as a package.

Linux 7.0.0–107027.27tux1 (26.04)

• Added a partial fix for the audio jack on the InfinityBook Pro 16 Gen10 AMD.

Firefox 152.0.6

• Updated to Firefox 152.0.6.
• Release notes: https://www.firefox.com/en-US/firefox/152.0.6/releasenotes

KDE App of the Week: MPC-QT – A Touch of Windows Nostalgia for Linux

Anyone who used Windows for many years will probably remember the Media Player Classic, which has not seen active development for almost a decade. This lightweight, resource-friendly video player was one of the most popular alternatives to Windows Media Player, thanks to its clean interface and straightforward usability. With MPC-QT, the same concept lives on under Linux—powered by modern multimedia technology.

Classic User Interface

From the very first launch, it becomes obvious how closely MPC-QT follows its inspiration. The menu bar, toolbar, and familiar playback controls immediately evoke the look and feel of Media Player Classic Home Cinema (MPC-HC). Users switching from Windows to Linux will therefore feel right at home without having to learn a completely new interface.

Under the hood, however, MPC-QT relies not on an aging multimedia framework but on the modern libmpv library, which also powers applications such as SMPlayer. As a result, it supports virtually all current audio and video formats, hardware acceleration, and modern codecs without requiring additional codec packs.

More Than a Clone

Despite its familiar appearance, MPC-QT is a thoroughly modern media player. It offers multiple playlists, thumbnail previews while seeking through videos, customizable keyboard shortcuts and mouse actions, and multimedia key support via MPRIS. Users can also open online videos directly using yt-dlp, while a built-in web interface allows the player to be controlled remotely from another device on the local network.

Actively Maintained

MPC-QT continues to receive regular updates. Version 26.07, released just a few days ago, improves video loading times and speeds up switching between media files. Timeline navigation is now smoother, Wayland support has been further refined, and Dark Mode now works reliably on GNOME as well.

Installation

Ubuntu is notably absent from the list of distributions that package MPC-QT in their official repositories. However, the application is available as a Flatpak and can easily be installed via the Discover software center.

If Media Player Classic used to be one of your favorite applications on Windows, MPC-QT will feel instantly familiar. At the same time, it benefits from a modern playback engine and active development, making it an excellent blend of classic usability and contemporary multimedia technology.

TUXEDO OS Tips & Tricks: SuperFile – Modern File Manager for the Terminal

SuperFile brings a modern file manager to the command line. Developed in Go, the file manager combines the speed of a CLI tool with a clean text-based user interface (TUI). Colors, icons, and a clear panel layout make SuperFile feel almost as intuitive to use as a graphical file manager.

The feature set covers all essential file operations such as copying, moving, renaming, deleting, and creating new files or directories. ZIP archives can also be created and extracted directly. Multiple open panels make it easier to work with different folders, while a sidebar provides quick access and a preview panel displays additional information.

Operation is entirely keyboard-based. The arrow keys are used to navigate through directories, Enter opens files or folders, and Backspace moves to the parent directory. Practical features such as searching with /, displaying hidden files with ., and toggling the file preview with F make everyday work easier.

SuperFile can also be customized extensively. Vim users can enable corresponding keyboard shortcuts, use custom themes such as Nord or Dracula, and configure the interface according to their personal preferences. At the same time, the application integrates smoothly into existing workflows with external editors and other command-line tools.

Installation

The developers provide precompiled binaries through the GitHub releases. After downloading the archive, copy the executable either system-wide to /usr/local/bin or only for your user account to ~/.local/bin. Both variants allow SuperFile to be launched directly using the command spf.

System-wide installation

tar xzf superfile-linux-v1.6.0-amd64.tar.gz
cd dist/superfile-linux-v1.6.0-amd64/
sudo install -m755 spf /usr/local/bin/

Installation for the current user

mkdir -p ~/.local/bin
tar xzf superfile-linux-v1.6.0-amd64.tar.gz
cd dist/superfile-linux-v1.6.0-amd64/
install -m755 spf ~/.local/bin/

If you use ~/.local/bin, the directory must be included in your PATH environment variable. Afterwards, start SuperFile directly from a terminal:

spf

Setting up Nerd Fonts

To display all symbols correctly, SuperFile requires a Nerd Font. These enhanced fonts contain additional icons used by many modern terminal applications. Without a suitable font, some symbols may not be displayed or may appear incorrectly.

The installation is particularly simple with getnf, a command-line tool for downloading and managing Nerd Fonts. On TUXEDO OS, first install the required dependencies and then download the current getnf binary.

sudo apt install curl
curl -fsSL https://raw.githubusercontent.com/getnf/getnf/main/install.sh | sh

Using getnf, you can search for a font and install it directly from the terminal. For example, the „JetBrainsMono Nerd Font“ can be installed with the following command:

getnf JetBrainsMono

Afterwards, update the font cache so that the system recognizes the new font:

fc-cache -fv

Then restart SuperFile or your terminal emulator. If the icons are still not displayed correctly, logging out and back into your system once usually resolves the issue.

Images and graphics in the terminal

SuperFile can display image previews directly in the terminal. However, the application relies on the Kitty Graphics Protocol, which is not supported by every terminal emulator. Konsole currently does not provide support for this feature. If you want to use image previews, a compatible terminal emulator such as Ghostty or Kitty is recommended. All other SuperFile features remain fully available without support for the graphics protocol.

Ubuntu Security Updates

The Ubuntu security updates listed here are generally incorporated directly into TUXEDO OS. Some updates are only available from Ubuntu for a fee and are therefore not made available to the community until a later date. Unfortunately, we have no control over this:

• USN-8477–2: tar regression: USN-8477–1 introduced a regression in tar.
  IDs: CVE-2026–5704
  Affects: Ubuntu 26.04, Ubuntu 24.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04, Ubuntu 16.04, Ubuntu 14.04

• USN-8557–1: Authlib vulnerabilities: Several security issues were fixed in Authlib.
  IDs: CVE-2026–28490, CVE-2026–27962, CVE-2026–28498 + 1 other
  Affects: Ubuntu 26.04, Ubuntu 24.04, Ubuntu 22.04

• USN-8555–1: Ubuntu Advantage Tools (pro client) vulnerabilities: Several security issues were fixed in Ubuntu Advantage Tools.
  IDs: CVE-2026–9494, CVE-2026–12391, CVE-2026–11386
  Affects: Ubuntu 26.04, Ubuntu 24.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04, Ubuntu 16.04, Ubuntu 14.04

• USN-8554–1: NTFS-3G vulnerabilities: Several security issues were fixed in NTFS-3G.
  IDs: CVE-2026–42616, CVE-2026–56135, CVE-2026–46570 + 6 others
  Affects: Ubuntu 26.04, Ubuntu 24.04, Ubuntu 22.04

• USN-8553–1: .NET vulnerabilities: Several security issues were fixed in .NET.
  IDs: CVE-2026–57108, CVE-2026–50659, CVE-2026–47304 + 10 others
  Affects: Ubuntu 26.04, Ubuntu 24.04, Ubuntu 22.04

• USN-8552–1: Sympa vulnerability: Sympa could allow unintended access to network services.
  IDs: CVE-2024–55919
  Affects: Ubuntu 24.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04, Ubuntu 16.04

• USN-8550–1: libslirp vulnerability: libslirp could be made to expose sensitive information over the network.
  IDs: CVE-2026–9539
  Affects: Ubuntu 26.04, Ubuntu 24.04, Ubuntu 22.04

• USN-8549–1: idna vulnerability: idna could be made to consume resources if it received specially crafted input.
  IDs: CVE-2026–45409
  Affects: Ubuntu 26.04, Ubuntu 24.04, Ubuntu 22.04

• USN-8545–1: Linux kernel (HWE) vulnerabilities: Several security issues were fixed in the Linux kernel.
  IDs: CVE-2026–43341, CVE-2026–31669, CVE-2026–43376 + 59 others
  Affects: Ubuntu 24.04

• USN-8544–1: LuaJIT vulnerabilities: Several security issues were fixed in LuaJIT.
  IDs: CVE-2024–25177, CVE-2024–25176, CVE-2024–25178
  Affects: Ubuntu 24.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04, Ubuntu 16.04, Ubuntu 14.04

• USN-8543–1: Wget vulnerabilities: Several security issues were fixed in Wget.
  IDs: CVE-2026–58470, CVE-2024–38428, CVE-2026–58472 + 2 others
  Affects: Ubuntu 26.04, Ubuntu 24.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04, Ubuntu 16.04, Ubuntu 14.04

• USN-8542–1: Dnsmasq vulnerabilities: Several security issues were fixed in Dnsmasq.
  IDs: CVE-2026–12725, CVE-2026–12969
  Affects: Ubuntu 26.04, Ubuntu 24.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04, Ubuntu 16.04

• USN-8526–2: libheif vulnerabilities: Several security issues were fixed in libheif.
  IDs: CVE-2026–47714, CVE-2026–47709
  Affects: Ubuntu 24.04

• USN-8541–1: Vim vulnerabilities: Several security issues were fixed in Vim.
  IDs: CVE-2026–59857, CVE-2026–59858, CVE-2026–59856
  Affects: Ubuntu 26.04, Ubuntu 24.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04, Ubuntu 16.04, Ubuntu 14.04

• USN-8540–1: OpenVPN vulnerabilities: Several security issues were fixed in OpenVPN.
  IDs: CVE-2026–13117, CVE-2026–13698, CVE-2026–13122 + 3 others
  Affects: Ubuntu 26.04, Ubuntu 24.04, Ubuntu 22.04

• USN-8538–1: alsa-lib vulnerability: alsa-lib could be made to crash or run programs as your login if it opened a specially crafted file.
  IDs: CVE-2026–56109
  Affects: Ubuntu 26.04, Ubuntu 24.04, Ubuntu 22.04

• USN-8537–1: httplib2 vulnerability: httplib2 could be made to crash if it received specially crafted network traffic.
  IDs: CVE-2026–59939
  Affects: Ubuntu 26.04, Ubuntu 24.04, Ubuntu 22.04

• USN-8535–1: PipeWire vulnerabilities: Several security issues were fixed in PipeWire.
  IDs: CVE-2026–14324, CVE-2026–14330
  Affects: Ubuntu 26.04, Ubuntu 24.04, Ubuntu 22.04

• USN-8534–1: LibreOffice vulnerabilities: Several security issues were fixed in LibreOffice.
  IDs: CVE-2026–6039, CVE-2026–8356, CVE-2026–6045 + 3 others
  Affects: Ubuntu 26.04, Ubuntu 24.04, Ubuntu 22.04

• USN-8533–1: OpenSSH vulnerabilities: Several security issues were fixed in OpenSSH.
  IDs: CVE-2026–60001, CVE-2026–60002, CVE-2026–59998 + 5 others
  Affects: Ubuntu 26.04, Ubuntu 24.04, Ubuntu 22.04

• USN-8532–1: libssh2 vulnerabilities: Several security issues were fixed in libssh2.
  IDs: CVE-2026–58051, CVE-2026–58050
  Affects: Ubuntu 26.04, Ubuntu 24.04

• USN-8496–3: cifs-utils vulnerability: cifs-utils could be made to run programs as an administrator.
  IDs: CVE-2026–12505
  Affects: Ubuntu 26.04, Ubuntu 24.04, Ubuntu 22.04

• USN-8531–1: libexif vulnerabilities: Several security issues were fixed in libexif.
  IDs: CVE-2026–40385, CVE-2026–40386, CVE-2026–32775
  Affects: Ubuntu 26.04, Ubuntu 24.04, Ubuntu 22.04

Current BIOS/EC Versions

An EC/BIOS update affects key system components. Please ensure that you follow the instructions carefully and take your time. The process is usually completed quickly. If you have any doubts, our support team is happy to assist you. The following devices have BIOS/EC updates available:

Model	CPU	GPU	BIOS	EC
InfinityBook Pro 14 Gen 10	AMD Ryzen 7 255		N.1.10A11	1.36.00
InfinityBook Pro 14 Gen 10	AMD Ryzen AI 7 350		N.1.22A22	1.36.00
InfinityBook Pro 14 Gen 10	AMD Ryzen AI 9 365		N.1.22A22	1.36.00
InfinityBook Pro 14 Gen 10	AMD Ryzen AI 9 HX 370		N.1.22A22	1.36.00
InfinityBook Pro 15 Gen 10	AMD Ryzen 7 255		N.1.10A11	1.36.00
InfinityBook Pro 15 Gen 10	AMD Ryzen AI 7 350		N.1.22A22	1.36.00
InfinityBook Pro 15 Gen 10	AMD Ryzen AI 9 365		N.1.22A22	1.36.00
InfinityBook Pro 15 Gen 10	AMD Ryzen AI 9 HX 370		N.1.22A22	1.36.00
InfinityBook Max 15 Gen 10	AMD Ryzen AI 7 350	RTX 5060	N.1.22A22	1.36.00
InfinityBook Max 15 Gen 10	AMD Ryzen AI 7 350	RTX 5070	N.1.22A22	1.36.00
InfinityBook Max 15 Gen 10	AMD Ryzen AI 9 365	RTX 5060	N.1.22A22	1.36.00
InfinityBook Max 15 Gen 10	AMD Ryzen AI 9 365	RTX 5070	N.1.22A22	1.36.00
InfinityBook Max 15 Gen 10	AMD Ryzen AI 9 HX 370	RTX 5060	N.1.22A22	1.36.00
InfinityBook Max 15 Gen 10	AMD Ryzen AI 9 HX 370	RTX 5070	N.1.22A22	1.36.00
InfinityBook Max 16 Gen 10	AMD Ryzen AI 7 350	RTX 5060	N.1.22A22	1.36.00
InfinityBook Max 16 Gen 10	AMD Ryzen AI 7 350	RTX 5070	N.1.22A22	1.36.00
InfinityBook Max 16 Gen 10	AMD Ryzen AI 9 365	RTX 5060	N.1.22A22	1.36.00
InfinityBook Max 16 Gen 10	AMD Ryzen AI 9 365	RTX 5070	N.1.22A22	1.36.00
InfinityBook Max 16 Gen 10	AMD Ryzen AI 9 HX 370	RTX 5060	N.1.22A22	1.36.00
InfinityBook Max 16 Gen 10	AMD Ryzen AI 9 HX 370	RTX 5070	N.1.22A22	1.36.00