This Week in TUXEDO OS #42-2024 - TUXEDO Computers

Hello TUXEDO Fans and Open-Source Enthusiasts!

The update to TUXEDO OS based on Ubuntu 24.04 begins

We know that many of you have been waiting for the update of TUXEDO OS based on Ubuntu 24.04. This week, those of you who wish to install TUXEDO OS via WebFAI can get excited. Additionally, we’d like to highlight KleverNotes, the Markdown-based note-taking app from the KDE project, which brings many improvements with its new version 1.1.

Enjoy reading
The TUXEDO OS Team

TUXEDO OS Updates

Firefox 131.0.3

• [Fix] Some users were unable to access their bank’s website to pay bills.
• [Fix] VR180 and 360 videos were not rendered correctly on YouTube.
• [Fix] Windows users with Avast or AVG security software experienced crashes when visiting certain websites.
• [Fix] The „List All Tabs“ button could not be moved or removed from the toolbar.

WebFAI 1.4.2

• TUXEDO OS for WebFAI switched to Ubuntu 24.04 base
• i8042 fix for the FAI kernel for TUXEDO Gemini Gen3

Starting with WebFAI version 1.4.2, users will now install TUXEDO OS based on Ubuntu 24.04.1. If you prefer to use an ISO image for installation, you will need to wait a little longer until we switch to 24.04.1 there as well.

tuxedo-drivers 4.9.0 (Link)

• [New] Add power profiles support for IBP Gen9
• [New] Stellaris Slim Gen6 TDP support
• [Fix] TDP set for Stellaris Gen6 devices

App of the Week

KleverNotes

KleverNotes, the Markdown-based note-taking app from the KDE project, has established itself as a flexible and customizable tool for creating and managing notes. The app allows users to write notes in Markdown, customize the preview using CSS themes, and organize notes into categories and groups. With the ability to print notes, add small sketches, and create tasks, KleverNotes stands out from other applications, while also supporting useful plugins like code highlighting and note linking.

The new version 1.1 introduces significant improvements that further enhance the user experience. The switch to the new Markdown parser md4qt has greatly improved the app’s performance, as this parser is not only faster and more reliable but also supports important GitHub extensions such as tables, footnotes, and to-do lists. This makes working with Markdown much more convenient, especially thanks to the improved toolbar, which is now more precise when adding and removing tags. Additionally, a separate thread for parsing ensures that large notes are processed without delay.

Another highlight of KleverNotes 1.1 is the introduction of a WYSIWYG-like editor that allows users to see Markdown formatting directly within the note. Bold or italic text is immediately visually highlighted, while Markdown tags are reduced in size to improve readability. This feature offers an enhanced writing experience, without replacing the classic preview option – as for many, this remains the preferred way to view Markdown documents.

What Else Has Happened?

Plasma 6.2.1 Released

Last week, we already mentioned the release of KDE Plasma 6.2. We are well on our way to integrating the update into TUXEDO OS. In the meantime, the KDE developers continue refining Plasma. KDE Plasma 6.2.1, the first bugfix release, is now available.

Ubuntu Security Updates

The following Ubuntu security updates are directly incorporated into TUXEDO OS:

• USN-7066–1: Thunderbird Security Vulnerability: Thunderbird could be made to crash or execute programs if it opens a specially crafted file.
  Identifier: CVE-2024–9680
  Affects: Ubuntu 22.04 LTS, Ubuntu 20.04 LTS

• USN-7065–1: Firefox Vulnerability: Firefox could be made to execute programs as your login if it opens a malicious website.
  Identifier: CVE-2024–9680
  Affects: Ubuntu 20.04 LTS

• USN-7070–1: libarchive Vulnerabilities: Several security issues have been fixed in libarchive.
  Identifier: CVE-2024–48958, CVE-2024–48957, CVE-2022–36227
  Affects: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 ESM, Ubuntu 16.04 ESM, Ubuntu 14.04 ESM

• USN-7038–2: APR Vulnerability: The system could be made to leak sensitive information.
  Identifier: CVE-2023–49582
  Affects: Ubuntu 14.04 ESM

• USN-7069–1: Linux Kernel Vulnerabilities: Several security issues have been fixed in the Linux kernel.
  Identifier: CVE-2024–38602, CVE-2024–38621, CVE-2024–42223, and 32 others
  Affects: Ubuntu 18.04 ESM, Ubuntu 16.04 ESM

• USN-7064–1: nano Vulnerability: nano could be made to give users administrative rights.
  Identifier: CVE-2024–5742
  Affects: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 ESM, Ubuntu 16.04 ESM

• USN-7068–1: ImageMagick Vulnerabilities: Several security issues have been fixed in ImageMagick.
  Identifier: CVE-2019–7398, CVE-2020–27767, CVE-2020–27770, and 30 others
  Affects: Ubuntu 16.04 ESM, Ubuntu 14.04 ESM

• USN-7040–2: ConfigObj Vulnerability: ConfigObj could be made to crash when receiving specially crafted input.
  Identifier: CVE-2023–26112
  Affects: Ubuntu 14.04 ESM

• USN-7014–3: nginx Vulnerability: nginx could be made to crash when receiving specially crafted network traffic.
  Identifier: CVE-2024–7347
  Affects: Ubuntu 14.04 ESM

• USN-6968–3: PostgreSQL Vulnerability: PostgreSQL could execute arbitrary SQL functions as a superuser when receiving specially prepared SQL objects.
  Identifier: CVE-2024–7348
  Affects: Ubuntu 18.04 ESM, Ubuntu 14.04 ESM

• USN-7015–4: Python Vulnerability: Python could be made to bypass certain restrictions when receiving specially crafted input.
  Identifier: CVE-2023–27043
  Affects: Ubuntu 14.04 ESM

• USN-7067–1: HAProxy Vulnerability: HAProxy could be made to crash when receiving specially crafted network traffic.
  Identifier: CVE-2023–44487
  Affects: Ubuntu 18.04 ESM

• USN-7069–2: Linux Kernel Vulnerabilities (Azure): Several security issues have been fixed in the Linux kernel.
  Identifier: CVE-2024–38621, CVE-2024–26960, CVE-2024–39487, and 32 others
  Affects: Ubuntu 16.04 ESM, Ubuntu 14.04 ESM

• USN-7028–2: Linux Kernel Vulnerabilities (Azure): Several security issues have been fixed in the Linux kernel.
  Identifier: CVE-2024–42154, CVE-2024–26851, CVE-2024–38583, and 19 others
  Affects: Ubuntu 14.04 ESM

• USN-7076–1: Linux Kernel Vulnerabilities (Azure): Several security issues have been fixed in the Linux kernel.
  Identifier: CVE-2024–45001, CVE-2024–27397, CVE-2024–45016, and 1 other
  Affects: Ubuntu 22.04 LTS, Ubuntu 20.04 LTS

• USN-7059–2: OATH Toolkit Vulnerability: OATH Toolkit could be made to overwrite files as an administrator.
  Identifier: CVE-2024–47191
  Affects: Ubuntu 24.10

• USN-7073–2: Linux Kernel Vulnerabilities (Azure): Several security issues have been fixed in the Linux kernel.
  Identifier: CVE-2024–27397, CVE-2024–45016, CVE-2024–26960, and 1 other
  Affects: Ubuntu 20.04 LTS, Ubuntu 18.04 ESM

• USN-7074–1: Linux Kernel Vulnerabilities (Azure): Several security issues have been fixed in the Linux kernel.
  Identifier: CVE-2024–45001, CVE-2024–45016
  Affects: Ubuntu 24.04 LTS

• USN-7073–1: Linux Kernel Vulnerabilities: Several security issues have been fixed in the Linux kernel.
  Identifier: CVE-2024–27397, CVE-2024–45016, CVE-2024–26960, and 1 other
  Affects: Ubuntu 20.04 LTS, Ubuntu 18.04 ESM

• USN-7072–1: Linux Kernel Vulnerabilities: Several security issues have been fixed in the Linux kernel.
  Identifier: CVE-2024–27397, CVE-2024–45016, CVE-2024–38630
  Affects: Ubuntu 22.04 LTS, Ubuntu 20.04 LTS

• USN-7071–1: Linux Kernel Vulnerability: The system could be compromised under certain conditions.
  Identifier: CVE-2024–45016
  Affects: Ubuntu 24.04 LTS, Ubuntu 22.04 LTS

• USN-7048–2: Vim Vulnerability: Vim could be made to crash when receiving specially crafted input.
  Identifier: CVE-2024–43802
  Affects: Ubuntu 14.04 ESM