This Week in TUXEDO OS #41-2024 - TUXEDO Computers

Hello TUXEDO fans and open-source enthusiasts!

There’s important news again! Due to a security vulnerability in Firefox, we have placed version 131.0.2 directly into the repository. We recommend that you install the update as soon as possible to stay safe. Of course, there are also exciting updates around KDE Plasma and the latest TUXEDO OS updates. Take a look; it’s worth it!

Enjoy reading, Your TUXEDO OS Team

TUXEDO OS Updates

Repository and ISO image updated

• TUXEDO OS has been updated with Frameworks 6.6.0 and Gear 24.08.1.

News

Release of KDE Plasma 6.2

On Tuesday, Plasma 6.2 was released as scheduled by the KDE developers. This version is the third in the Plasma 6 cycle and primarily focuses on fixing bugs that are inevitable when transitioning to a new major version. Additionally, the desktop’s appearance has been refined, and the overall user experience has been optimized.

At TUXEDO, we are already testing the new version. However, before we release Plasma 6.2 to you, we will upgrade TUXEDO OS to the base of Ubuntu 24.04 LTS. To avoid potential problems during the update, we will deliver the new features in two separate updates.

What to consider for support inquiries to TUXEDO?

At TUXEDO, we offer support via email or phone through our support team in Augsburg. In advance, you have the option to get answers to simpler questions through social media, which can be resolved quickly without involving the support team.

As a questioner, you might not know what information we need to process your inquiry, so here’s a brief overview of the relevant details:

• The exact model name of the affected device (e.g., InfinityBook Pro 14 - Gen 9).
• The manufacturer of the CPU (if there are different versions like Intel and AMD).
• The model of the dGPU (if applicable).
• The installed operating system (e.g., TUXEDO OS, Ubuntu 22.04.5, Fedora 40).
• X11 or Wayland? Please also test the other session type to see if the problem occurs there as well.
• Describe your issue as precisely as possible.
• What have you already done to resolve the issue (if applicable)?

Please also let us know if you have already contacted our support team with your concern. If so, please provide us with the ticket number.

KDE App of the Week

KDE-Itinerary

KDE-Itinerary is an innovative digital travel assistant that stands out due to its strong focus on privacy. The app consolidates all relevant travel information into a clear timeline view and automatically organizes various bookings. It supports not only train, bus, and flight travel but also hotel, restaurant, and car rental reservations. Managing boarding and travel tickets, even for group travel, is straightforward, while the extraction of booking data from different formats occurs locally on the device to protect user privacy.

Real-time updates on delays and platform changes are among the standout features of KDE-Itinerary. If connecting trains are missed, the app offers alternative connections. Additionally, users receive weather forecasts for the entire travel route and can access detailed maps of train stations and airports based on OpenStreetMap. Navigation between different travel segments and the display of available rental bikes are also convenient features. The ability to view the train car layout allows for even more precise planning while maintaining control over online activities.

The integration of KDE-Itinerary with tools like KMail, KDE Connect, Nextcloud Hub, and DavDroid ensures a seamless workflow. The latest update has added new extractors for providers such as BlablaBus, Deutsche Bahn, and United Airlines. Moreover, improvements for using dark mode on Android and fixes for accessing public transport data and user-friendliness on mobile devices have been made.

You can find an overview of other KDE apps that have been updated in the past week in the column This Week in KDE Apps.

Security updates Ubuntu

The security updates listed here flow directly into TUXEDO OS.

• USN-7061–1: Go vulnerabilities: Multiple security issues have been fixed in Go.
  Identifier: CVE-2023–29405, CVE-2023–29406, CVE-2024–24785, and 8 more.
  Affects: Ubuntu 22.04 LTS

• USN-7062–1: libgsf vulnerabilities: libgsf could be made to execute programs as your login when opening a specially crafted file.
  Identifier: CVE-2024–36474, CVE-2024–42415.
  Affects: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS

• USN-7022–3: Linux kernel vulnerabilities: Multiple security issues have been fixed in the Linux kernel.
  Identifier: CVE-2024–42160, CVE-2024–26787, CVE-2024–38570, and 7 others.
  Affects: Ubuntu 18.04 ESM

• USN-7060–1: EDK II vulnerabilities: Multiple security issues have been fixed in EDK II.
  Identifier: CVE-2021–38578, CVE-2021–28210, CVE-2019–0161, and 3 others.
  Affects: Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 ESM, Ubuntu 16.04 ESM

• USN-7059–1: OATH Toolkit vulnerability: Oath Toolkit could be made to overwrite files as an administrator.
  Identifier: CVE-2024–47191.
  Affects: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS

• USN-7043–4: cups-filters vulnerabilities: cups-filters could be made to execute programs when it receives specially crafted network traffic.
  Identifier: CVE-2024–47176, CVE-2024–47076.
  Affects: Ubuntu 22.04 LTS, Ubuntu 20.04 LTS

• USN-7042–2: cups-browsed vulnerability: cups-browsed could be made to execute programs when it receives specially crafted network traffic.
  Identifier: CVE-2024–47176.
  Affects: Ubuntu 24.04 LTS

• USN-7058–1: .NET vulnerabilities: Multiple security issues have been fixed in dotnet6 and dotnet8.
  Identifier: CVE-2024–43485, CVE-2024–38229, CVE-2024–43483, and 1 other.
  Affects: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS

• USN-7014–2: nginx vulnerability: nginx could be made to crash when receiving specially crafted network traffic.
  Identifier: CVE-2024–7347.
  Affects: Ubuntu 18.04 ESM, Ubuntu 16.04 ESM

• USN-7057–1: WEBrick vulnerability: WEBrick could allow an HTTP request smuggling attack.
  Identifier: CVE-2024–47220.
  Affects: Ubuntu 22.04 LTS, 24.04 LTS

• USN-7043–3: cups-filters vulnerability: cups-filters could be made to execute programs when it receives specially crafted network traffic.
  Identifier: CVE-2024–47176.
  Affects: Ubuntu 16.04 ESM

• USN-7041–3: CUPS vulnerability: CUPS could be made to crash or execute programs when it receives specially crafted network traffic.
  Identifier: CVE-2024–47175.
  Affects: Ubuntu 16.04 ESM

• USN-7056–1: Firefox vulnerabilities: Multiple security issues have been fixed in Firefox.
  Identifier: CVE-2024–9394, CVE-2024–9399, CVE-2024–9400, and 8 others.
  Affects: Ubuntu 20.04 LTS

BIOS / EC Updates

There are new BIOS versions for:

• Stellaris Slim 15 - Gen6 (AMD; GeForce RTX 4060/4070)