This Week in TUXEDO OS #34-2026 - TUXEDO Computers

Hello TUXEDO Fans and Open-Source Enthusiasts!

Debian is celebrating its 33rd anniversary. We would like to congratulate the community and everyone involved on this bedrock distribution. Known as the „universal operating system,“ Debian forms an essential foundation for modern IT infrastructure. Whether as the base for numerous Linux distributions or as a reliable system in data centers worldwide – Debian remains one of the most vital pillars of the open-source world and the internet.

We at TUXEDO Computers are also increasingly turning to Debian in the future. TUXEDO OS is changing its base, moving away from Ubuntu towards Debian – specifically Debian Testing. This journey has already begun, and the first beta is now publicly available. As a user, you can already start testing and – if you wish – report bugs or suggestions for improvement. While it will still take some time until the final release of TUXEDO OS based on Debian, we will keep you updated on our progress.

In this issue of TWIX, we help you stay focused and maintain regular breaks with the KDE app Francis. For those who prefer managing files directly in the terminal, Yazi offers a powerful tool featuring file previews and Vim-like controls. As usual, we also summarize the most important software updates and technical innovations in TUXEDO OS for you.

Enjoy reading,
The TUXEDO OS Team

Updates in TUXEDO OS

Linux 7.0.0–108029.29~24.04.1tux2

• Release: Initial kernel 7.0 release for TUXEDO OS based on Ubuntu 24.04 (Noble Numbat).
• All Kernel 7.0 Details

VirtualBox 7.1.18-dfsg-1~tux1

• Build: Clean build from upstream sources.
• Compatibility: Updated and compiled to build successfully against Linux kernel 7.0.

Flatpak 1.16.6–2~tux1~really1.16.7

• Update: Updated to version 1.16.6 (based on Ubuntu Resolute) including all patches from version 1.16.7.
• Security: Addresses two known vulnerabilities (GHSA-8688–9x26-hhxj, GHSA-fqx6-vh4p-42cg).
• Dependencies: bubblewrap version 0.11 is now a required dependency for Flatpak 1.16.

Chromium 151.0.7922.169

• Updated to Chromium 151.
• Details and bug fixes can be found in the official Release Notes.

Firefox 2:154.0~tux2

• Package Maintenance: Cumulative updates based on version 153.0.4~tux2.
• Configuration: Built-in AI features are disabled by default.
• Further information is available in the official Release Notes.

Thunderbird 3:153.1.0esr~tux1

• Updated to Thunderbird ESR 153.1.0 with various stability and bug fixes.
• Release Notes.

Updates in TUXEDO OS – Debian (Open Beta)

Vscodium 1.126.04524

• Updated as part of the ongoing beta phase of the Debian-based distribution.
• Release Notes.

Updates in Ubuntu 24.04 (Base)

evdi-dkms 1.14.15+dfsg-0ubuntu1~tux1

• Backport: Backported from Ubuntu Resolute.
• Compatibility: Provides the necessary driver structures to support Linux kernel 7.

KDE App of the Week: Work with Focus, Rest at the Right Time

When focusing on a screen, it is easy to lose track of time and skip necessary recovery phases. The Pomodoro Technique addresses this by establishing a steady rhythm of work and rest. With Francis, the KDE community provides a minimalist tool that digitally implements this workflow.

The method dates back to Francesco Cirillo, who in the late 1980s used a tomato-shaped kitchen timer (Italian: pomodoro) to structure his tasks. The principle is simple: a phase of concentrated work is followed by a short interruption. After several cycles, a longer regeneration phase follows.

Focus in Fixed Intervals

Francis focuses on the core functionality of this process. After startup, the application presents a timer that defaults to a 25-minute work unit. Once the time expires, the tool signals a five-minute break. After four intervals, Francis reminds you to take a more extensive rest.

Technically, Francis follows a strict approach: the application deliberately lacks a settings dialog or configuration files for adjusting intervals. Users follow the classic Pomodoro rhythm but can skip current units if necessary. This minimalism ensures that the software itself does not become a distraction.

The advantage over a conventional timer lies in the automation of the rhythm. Francis manages the timing and reliably informs you about the switch between work and rest phases while remaining discreetly in the background.

Installation in TUXEDO OS

On TUXEDO OS, the easiest way to install Francis is as a Flatpak via the Discover software center. Since the application requires no further setup, you can start your first interval immediately after launching it.

For those who tend to postpone breaks while working at a desk, Francis serves as a straightforward digital assistant for better time management in daily life.

TUXEDO OS Tips & Tricks: Keyboard-Driven File Management with Yazi

If you prefer managing files directly in the terminal, you should take a look at Yazi. This modern file manager combines Vim-like operation with features usually found in graphical applications like Dolphin: tabs, bulk renaming, multi-selection, previews, and a plugin interface. Thanks to its asynchronous architecture, Yazi displays even large directories without any lag.

Installation on TUXEDO OS

An official APT repository is now available for Debian, Ubuntu, and TUXEDO OS. The documentation provides the necessary commands to integrate the source into your system. This allows you to install Yazi directly via the package management and keep the tool updated effortlessly through regular system updates.

If you do not want to add an additional software source, you can alternatively use the precompiled binary. In this case, however, you will have to handle updates manually. On TUXEDO OS, the official repository is the most convenient choice: once set up, Yazi is maintained automatically along with the rest of the system.

After installation, start the file manager with:

yazi

A small shell wrapper is even more practical. It ensures that the shell automatically switches to the last visited directory after exiting Yazi:

function y() {
    local tmp="$(mktemp -t "yazi-cwd.XXXXXX")" cwd
    command yazi "$@" --cwd-file="$tmp"
    IFS= read -r -d '' cwd < "$tmp"
    [ "$cwd" != "$PWD" ] && [ -d "$cwd" ] && builtin cd -- "$cwd"
    rm -f -- "$tmp"
}

You can add this code to your ~/.bashrc file, for example. After restarting the shell, simply call the command y. Press Q to exit Yazi and adopt the current directory into the shell. Pressing Shift+Q exits the program without changing the shell’s working directory.

To edit text files, a default editor should be defined via the $EDITOR variable, for example:

export EDITOR=/usr/bin/nano

How Yazi Works

By default, Yazi divides the window into three areas: the parent folder on the left, the current path in the middle, and a dynamic preview on the right. This allows you to always keep the context in view while navigating.

The controls are closely based on Vim. Use H, J, K, and L to navigate through the structure. Enter or L opens a folder, while H moves up one level. Use Space to select individual files; in visual mode (V), you can select entire ranges.

Overview of the most important operations:

Key	Function
Y	Copy
X	Cut
P	Paste
R	Rename
D	Move to trash
Shift+D	Delete permanently
A	Create file or directory
.	Toggle hidden files
T	Open new tab
O	Open with standard application
F1	Show help

Previews Directly in the Terminal

One of Yazi’s particular strengths is the integrated preview for images, videos, PDFs, and archives. Source code is automatically displayed with syntax highlighting. Since the preview is scrollable, you can quickly check documents without opening an external editor.

Image display depends on the terminal used. Yazi supports modern protocols such as Sixel and Kitty Graphics. TUXEDO OS with KDE Plasma provides ideal conditions for this: The standard terminal emulator Konsole has supported Sixel for quite some time. In contrast, this feature is currently missing in GNOME Console. You can quickly check if your environment is compatible with the following command (requires the imagemagick package):

convert example.jpg -geometry 800 sixel:-

Efficient Navigation and Tabs

Press T to open additional tabs, which you can switch between using keyboard shortcuts. This makes moving files between distant directories much easier. For frequently visited locations, you can define your own jump targets in the configuration file ~/.config/yazi/keymap.toml.

Safety through Trash Support

Yazi implements the FreeDesktop.org Trash Specification. This means that files moved with D are first sent safely to the system-wide trash. This prevents data loss from accidental keystrokes and allows you to revise cleanup actions later.

Latest Developments

Continuous development regularly brings new features. Current highlights include drag-and-drop support, a powerful Command Palette (via the help menu), and an improved input history with context-sensitive icons. In addition, the Lua API has been expanded, enabling even more powerful plugins. Support for terminal multiplexers like Zellij and alternative graphics backend solutions has also been optimized.

Extending Yazi

Yazi can be tailored exactly to your needs via Lua plugins and themes (Flavors). Management is handled by the ya tool. For example, you can install a plugin like this:

ya pkg add yazi-rs/plugins:full-border

You can view installed extensions with the list switch:

ya pkg list
(out)Plugins:
(out)   yazi-rs/plugins:full-border (6f26ae0)
(out)   yazi-rs/plugins:smart-enter (6f26ae0)
(out)   yazi-rs/plugins:zoom (6f26ae0)
(out)Flavors:
(out)   bennyyip/gruvbox-dark (619fdc5)

Configuration is centralized under ~/.config/yazi. Here, you control the behavior of extensions in init.lua, while theme.toml is responsible for the visual design.

Our Tip

Yazi is a powerful tool for anyone who wants to work efficiently in the terminal. The combination of speed, modern graphics protocols, and familiar Vim logic makes it an excellent alternative for TUXEDO users looking for a high-performance console file manager. It’s worth taking a look at the help menu (F1) right at the start to discover its numerous functions.

Ubuntu Security Updates

The Ubuntu security updates listed here are generally incorporated directly into TUXEDO OS. Some updates are only available from Ubuntu for a fee and are therefore not made available to the community until a later date. Unfortunately, we have no control over this:

• USN-8665–1: Linux kernel (Raspberry Pi) vulnerabilities: It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local…
  IDs: CVE-2026–45855, CVE-2026–31610, CVE-2026–46098, CVE-2026–31417 plus 908 others
  Affects: Ubuntu 24.04

• USN-8663–1: Linux kernel (NVIDIA) vulnerabilities: It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly…
  IDs: CVE-2026–64234, CVE-2026–53372, CVE-2026–53060, CVE-2026–63900 plus 858 others
  Affects: Ubuntu 24.04, Ubuntu 26.04

• USN-8659–1: Linux kernel vulnerability: A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the…
  IDs: CVE-2026–64531
  Affects: Ubuntu 24.04, Ubuntu 26.04

• USN-8643–2: Linux kernel vulnerabilities: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects…
  IDs: CVE-2026–53246, CVE-2026–53247, CVE-2026–64531, CVE-2026–53224
  Affects: Ubuntu 24.04, Ubuntu 22.04

• USN-8543–2: Wget regression: USN-8543–1 fixed vulnerabilities in Wget. The update for CVE-2026–58472 was incomplete and could introduce a regression. This update fixes the…
  IDs: -
  Affects: Ubuntu 24.04, Ubuntu 26.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04, Ubuntu 16.04, Ubuntu 14.04

• USN-8654–1: Netty vulnerabilities: It was discovered that Netty did not properly handle malformed HTTP/2 control frames. An attacker could use this to cause a denial of service via…
  IDs: CVE-2025–55163, CVE-2025–67735
  Affects: Ubuntu 24.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04, Ubuntu 16.04

• USN-8653–1: PostgreSQL vulnerabilities: It was discovered that PostgreSQL incorrectly handled COPY FROM STDIN when an early failure occurred. An authenticated user could possibly use this…
  IDs: CVE-2025–8714, CVE-2026–14677, CVE-2026–14676, CVE-2026–15741 plus 26 others
  Affects: Ubuntu 24.04, Ubuntu 26.04, Ubuntu 22.04

• USN-8563–4: nginx regression: USN-8563–3 fixed a vulnerability in nginx. The fix introduced a regression in certain environments. This update reverts the fix for CVE-2026–42533…
  IDs: -
  Affects: Ubuntu 24.04, Ubuntu 26.04, Ubuntu 22.04

• USN-8651–1: curl vulnerability: It was discovered that curl incorrectly handled reusing connections when the origin changed between transfers. A remote attacker could possibly use…
  IDs: CVE-2026–11856
  Affects: Ubuntu 24.04, Ubuntu 26.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04, Ubuntu 16.04, Ubuntu 14.04

• USN-8650–1: Cap’n Proto vulnerabilities: Chanho Kim and Jihyeok Han discovered that Cap’n Proto incorrectly handled negative Content-Length values or excessively large chunk sizes when…
  IDs: CVE-2026–32240, CVE-2026–32239
  Affects: Ubuntu 24.04, Ubuntu 26.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04

• USN-8649–1: libheif vulnerabilities: It was discovered that libheif had an integer underflow in the Fraction constructor when a clap transform was applied twice. An attacker could…
  IDs: CVE-2026–62289, CVE-2026–62292
  Affects: Ubuntu 24.04, Ubuntu 26.04

• USN-8563–3: nginx vulnerability: USN-8563–1 fixed vulnerabilities in nginx. The fix for CVE-2026–42533 was backed out in USN-8563–2 because it could cause a regression. This update…
  IDs: CVE-2026–42533
  Affects: Ubuntu 24.04, Ubuntu 26.04, Ubuntu 22.04

• USN-8648–1: Bind vulnerabilities: It was discovered that Bind incorrectly accepted NSEC3 records whose signer name did not match the owning zone. A remote attacker could possibly use…
  IDs: CVE-2026–11721, CVE-2026–11605, CVE-2026–10822, CVE-2026–12617 plus 4 others
  Affects: Ubuntu 24.04, Ubuntu 26.04, Ubuntu 22.04

• USN-8636–2: Linux kernel (Oracle) vulnerabilities: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects…
  IDs: CVE-2026–52924, CVE-2026–53176, CVE-2026–46331, CVE-2026–31414 plus 20 others
  Affects: Ubuntu 24.04

• USN-8629–3: Linux kernel (HWE) vulnerabilities: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects…
  IDs: CVE-2026–53131, CVE-2026–53247, CVE-2026–53224, CVE-2026–52924 plus 14 others
  Affects: Ubuntu 24.04

• USN-8643–1: Linux kernel vulnerabilities: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects…
  IDs: CVE-2026–53247, CVE-2026–53246, CVE-2026–53224, CVE-2026–64531
  Affects: Ubuntu 24.04, Ubuntu 22.04

• USN-8641–1: .NET vulnerabilities: Miha Zupan discovered that .NET did not properly interpret certain HTTP requests. An attacker could possibly use this issue to perform request…
  IDs: CVE-2026–62909, CVE-2026–62899, CVE-2026–62901, CVE-2026–62900
  Affects: Ubuntu 24.04, Ubuntu 26.04, Ubuntu 22.04

• USN-8642–1: c3p0 vulnerabilities: It was discovered that c3p0 was vulnerable to remote code execution via maliciously crafted serialized objects and JNDI references. An attacker could…
  IDs: CVE-2026–55223, CVE-2026–27830, CVE-2026–27727, CVE-2026–55153
  Affects: Ubuntu 24.04, Ubuntu 26.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04

• USN-8629–2: Linux kernel (AWS) vulnerabilities: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects…
  IDs: CVE-2026–53225, CVE-2026–53215, CVE-2026–53176, CVE-2026–53224 plus 14 others
  Affects: Ubuntu 24.04

Current BIOS/EC Versions

An EC/BIOS update affects key system components. Please ensure that you follow the instructions carefully and take your time. The process is usually completed quickly. If you have any doubts, our support team is happy to assist you. The following devices have BIOS/EC updates available:

Model	CPU	GPU	BIOS	EC
InfinityBook Pro 14/15 Gen9	Intel		N.1.15A24	1.18.00
InfinityBook Pro 14/15 Gen10	AMD Ryzen 7 255		N.1.10A12	1.37.00
InfinityBook Pro 14 Gen10	AMD Ryzen AI 7 350		N.1.10A12	1.37.00
InfinityBook Pro 14 Gen10	AMD Ryzen AI 9 365		N.1.10A12	1.37.00
InfinityBook Pro 14 Gen10	AMD Ryzen AI 9 HX 370		N.1.10A12	1.37.00
Stellaris 16 Intel Gen7	Intel	RTX 5070/80/90 Ti	N.1.33A25	2.11.00
Stellaris 16 Intel Gen7	Intel	RTX 5070/80/90 Ti (mLED)	N.1.33A25	2.11.00
Stellaris 16 Intel Gen7	AMD	RTX 5070 Ti/5080/5090	N.1.40A32	1.53.10
InfinityBook Pro 15 Gen10	AMD Ryzen AI 7 350		N.1.22A23	1.37.00
InfinityBook Pro 15 Gen10	AMD Ryzen AI 9 365		N.1.22A23	1.37.00
InfinityBook Pro 15 Gen10	AMD Ryzen AI 9 HX 370		N.1.22A23	1.37.00
InfinityBook Max 15/16 Gen10	AMD Ryzen AI 7 350	RTX 5060/70	N.1.22A23	1.37.00
InfinityBook Max 15/16 Gen10	AMD Ryzen AI 9 365	RTX 5060/70	N.1.22A23	1.37.00
InfinityBook Max 15/16 Gen10	AMD Ryzen AI 9 HX 370	RTX 5060/70	N.1.22A23	1.37.00
InfinityBook Max 16 Gen10	Intel Core Ultra 9 275HX	RTX 5060/70	N.1.33A25	2.11.00
InfinityBook Max 16 Gen10	Intel Core Ultra 9 275HX	RTX 5060/70 (OLED)	N.1.33A25	2.11.00