Hello TUXEDO Fans and Open-Source Enthusiasts!
Happy birthday, KDE! On October 14, 1996 , Matthias Ettrich, then a student in Tübingen, announced a new project in a Usenet group: the „Kool Desktop Environment“. The cool K has long since become a trademark, and the desktop has grown into a community that maintains hundreds of programs. Do the math and you arrive at KDE 3.0 – this time in years of age, since the version of the same name already came out in 2002. Among other things, the anniversary was celebrated with the premiere of the documentary The Story of Free Software Underdogs .
The birthday child brought its own present: Plasma 6.8 arrived right on the anniversary as the „30th Anniversary Edition“. We already reported in the last issue that X11 is no longer invited to the party. Apart from that, the release unpacks quite a bit: a so-called dwell clicker triggers a mouse click as soon as the pointer stops moving, Spectacle records system audio and microphone input in screen recordings, and Plasma starts faster and uses less memory. The new design system Union now also dresses up Dolphin, Kate, and Konsole, but it is still a beta and not enabled by default.
Fittingly for the anniversary, our KDE App of the Week is Drawy, one of the youngest members of the KDE family: a whiteboard with an infinite canvas. In the tip of the week, we show how to trace in the terminal what APT has installed and removed – and how TUXEDO OS „Continuous Debian“ will even let you undo such changes in the future. You can find everything else that has happened around TUXEDO OS in the updates overview.
Enjoy reading,
The TUXEDO OS Team
Note: With the TWIX series, we keep you up to date with the latest developments around TUXEDO OS. We also introduce interesting applications and share practical tips and tricks for the KDE desktop and TUXEDO OS. At the same time, TWIX thrives on your feedback. We always welcome your suggestions, topic ideas, and proposals for improvement. Feel free to join the discussion in our TWIX thread on Reddit , where you can reach us directly. Of course, you are also welcome to contact us via any of our other social media channels.
Updates in TUXEDO OS
firefox 2:158.0~tux1
Update to Firefox 158.0: The browser now displays images in the JPEG XL format, and PDFs that you save or print on Linux are more accessible and render mathematical symbols cleanly.
The New Tab page keeps your own wallpapers, and the translation feature now also supports Albanian, Belarusian, and Filipino.
Fixed: With Ubuntu’s default theme, favicons in the address bar suggestions were hard to see. In addition, Firefox no longer crashes while loading favicons.
TUXEDO adjustments: On first start, Firefox no longer offers to import data from another browser, and the Support Firefox entry is gone from the settings menu. Both apply to new profiles only.
More information in the release notes for Firefox 158.0 .
thunderbird 3:153.5.0esr~tux1
The Attach File dialog opens again when the most recently used folder is no longer available.
Archived inbox folders now appear with their localized names instead of „INBOX“.
When forwarding inline as plain text, signatures below the quoted text are no longer left out.
More information in the release notes for Thunderbird 153.5.0esr .
nextcloud-desktop 35.0.0~tux1
A new user menu with a search dialog replaces the previous window in the system tray. You now find the options to log out and to remove an account in the settings.
Unified search is back, and features of the Nextcloud Assistant have been added.
On Linux, the client supports virtual files through an OpenVFS plugin.
Syncing is more robust: failed requests are retried, and the client detects conflicts during uploads more reliably.
The client no longer requires QtWebEngine. More information in the changelog for version 35.0.0 .
linux v7.0.0–113038.38~24.04.4tux1
Kernel with current security fixes
Fix for the microphone of the TUXEDO Nano Pro Gen15
Important Security Updates
firefox 2:158.0~tux1
Firefox 158.0 closes 77 security vulnerabilities, 30 of them rated high. Mozilla rates none of them as critical.
Details in the security advisory MFSA 2026–106 .
thunderbird 3:153.5.0esr~tux1
linux v7.0.0–113038.38~24.04.4tux1
Updated kernel for TUXEDO OS based on Ubuntu 24.04 with current security fixes.
KDE App of the Week: Drawy – A Canvas for Your Ideas
Some ideas are easier to draw than to put into words. Whether it is a flowchart, a quick sketch, or a branching train of thought: on a digital whiteboard, you can organize your thoughts and make connections visible.
That is exactly what Drawy is for, a whiteboard application that only joined KDE in May. Instead of an extensive toolbox, it relies on a tidy interface and a workspace with practically no limits.
Its role model is the web-based open-source whiteboard Excalidraw . Drawy takes a different approach, however: the application is written entirely in C++ and Qt and runs natively on the desktop. It needs neither a browser nor an online service and fits into KDE Plasma.
Drawy on TUXEDO OS: on the left, you adjust color, stroke style, thickness, and opacity of the selected object. The app is installed via Discover.
Turning Thoughts into Graphics
The heart of Drawy is the infinite canvas. Unlike in a conventional drawing program, you do not have to commit to a page size or paper format in advance. If you need more space, simply move the visible section or change the zoom level. This way, even extensive collections of ideas and branching diagrams grow on a single surface without you having to create new documents or pages.
The toolbar at the top provides everything essential. You combine freehand drawings with rectangles, ellipses, lines, and arrows, plus text boxes and inserted images. The sidebar on the left shows the properties of the selected object: color, stroke style, fill, thickness, and opacity. Objects can be moved, scaled, and rotated. You can also group several elements, align them with each other, or change their order.
Drawy sets text boxes in a font that looks handwritten. Several objects can be selected together and aligned with each other via the sidebar.
Anyone working with a graphics tablet or touchscreen benefits in particular: Drawy evaluates the pressure sensitivity of the stylus, which makes handwritten notes and drawings look more natural. Version 1.0.2 from June 2026 improved the freehand tools. Since then, you can adjust the pressure sensitivity and the smoothing of drawn lines, among other things.
You save your drawings locally and continue editing them later. For use outside the application, Drawy exports to image formats, including PNG and SVG. You can also switch between a light and a dark color scheme.
Born Out of Personal Need
Like many open-source applications, Drawy grew out of the needs of a single developer. In early 2025, Prayag Jain was looking for an application for his digital study notes and brainstorming sessions. Excalidraw met his requirements, but he wanted a native application that works without a browser.
With its acceptance into the KDE project, Drawy gained access to KDE’s infrastructure and frameworks. Since then, other developers have added freely assignable keyboard shortcuts, an extension system, and additional functions for editing objects, among other things.
Installation
On TUXEDO OS, Drawy is currently only available as a Flatpak. You install it via Discover or directly from Flathub . On TUXEDO OS „Continuous Debian“, Drawy will also be available as a native Debian package in the future.
Info: Are you interested in the development of KDE Plasma and want to know which new features are planned and which programs have recently been updated? You can find a detailed overview in the weekly column This week in Plasma by KDE developer Nate Graham.
TUXEDO OS Tips & Tricks: Reading the APT Package History and Undoing Changes
After an update, a program no longer starts, or a package that was there yesterday is missing. At the latest, the question arises: what has actually changed on the system in the last few days? The answer is in the log of the APT package manager. It records every installation, upgrade, and removal with date, command, and package version. With the switch of TUXEDO OS to Debian, this log also gets its own commands that let you undo individual changes.
Reading the History on TUXEDO OS
APT writes its history to the file /var/log/apt/history.log . Once a month, the system compresses the file and starts a new one, keeping the last twelve months. The file can be read without root privileges. The following command shows all operations of the past year in chronological order, each with the date and the command that was run:
zcat -f $(ls -tr /var/log/apt/history.log*) | grep -E "^(Start-Date|Commandline)"
(out)Start-Date: 2026-10-15 10:23:39
(out)Commandline: apt install btop
(out)Start-Date: 2026-10-15 10:23:42
(out)Commandline: apt remove btop
The complete entry reveals exactly which packages an operation changed. You open the current file with less /var/log/apt/history.log , older months with zless /var/log/apt/history.log.1.gz , and so on. Next to the command, every affected package is listed with its version. This also lets you spot dependencies that a program brought along unnoticed:
less /var/log/apt/history.log
(out)Start-Date: 2026-10-15 10:23:42
(out)Commandline: apt remove btop
(out)Remove: btop:amd64 (1.3.0-1)
(out)End-Date: 2026-10-15 10:23:42
Once you have found the culprit, you undo the change on TUXEDO OS by hand: you reinstall an accidentally removed package with sudo apt install packagename , and you remove an unwanted one with sudo apt purge packagename . Unlike remove , purge also deletes the package’s system-wide configuration files. Settings and hidden configuration files in your home directory, however, have to be removed by hand.
Undoing Changes with APT 3
Since version 3.2, APT evaluates the history itself and can undo or repeat operations. This version is not available on TUXEDO OS based on Ubuntu 24.04, where apt history-list merely reports Invalid operation history-list . TUXEDO OS „Continuous Debian“, on the other hand, already ships APT 3.3.3 on the basis of Debian Testing. There, apt history-list shows all operations as a numbered list:
apt history-list
(out)ID Command line Date and Time Action Changes
(out)
(out)0 install cowsay 2026-10-15 10:23:23 Install 8
(out)1 install btop 2026-10-15 10:23:27 Install 1
(out)2 remove cowsay 2026-10-15 10:23:29 Remove 1
You use the number in the first column for the other commands. For example, apt history-info 2 shows which packages were affected when cowsay was removed. With sudo apt history-undo 2 , you get the package back. APT first shows what it intends to install or remove and asks for confirmation. The undo then appears as a new entry in the history itself, so this step can be reversed as well.
The APT history in the open beta of TUXEDO OS: entry 14 removed fzf, and entry 15 reverts that with history-undo.
Command
Effect
apt history-list
Lists all operations with number, date, and command
apt history-info number
Shows details and all affected packages of an operation
sudo apt history-undo number
Undoes a single operation
sudo apt history-redo number
Runs an undone operation again
sudo apt history-rollback number
Undoes all operations that came after this number
Limitations
The history works exclusively at the package level. It does not restore changed configuration files, user data, or settings, so it is no substitute for a system snapshot. TUXEDO OS „Continuous Debian“ closes this gap: using Snapper, the system automatically creates a Btrfs snapshot before and after every APT operation, which you can select in the boot menu.
Programs that you installed as Flatpaks via Discover do not appear in the APT history. To undo an update, APT also needs the older version of the package. It must still be available in the package sources or in the package cache under /var/cache/apt/archives .
Before running history-rollback , check with apt history-info what will be affected: depending on the number, the command can undo many operations at once. In our tests, history-rollback only accepted options such as -y after the number. It’s FOSS has tried out the new APT features in more detail.
Ubuntu Security Updates
The Ubuntu security updates listed here are generally incorporated directly into TUXEDO OS. Some updates are only available from Ubuntu for a fee and are therefore not made available to the community until a later date. Unfortunately, we have no control over this:
USN-8933–1: RabbitMQ Server vulnerabilities : It was discovered that RabbitMQ Server incorrectly handled the CORS wildcard origin configuration. An attacker could exploit this issue…
IDs: CVE-2026–67404, CVE-2026–67231, CVE-2026–67237, CVE-2026–66070 and 8 others
Affects: Ubuntu 24.04, Ubuntu 26.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04, Ubuntu 16.04
USN-8932–1: Curl vulnerabilities : Stanislav Fort discovered that Curl did not properly clear the AWS SigV4 authentication state when CURLOPT_AWS_SIGV4 was set to NULL…
IDs: CVE-2026–92388, CVE-2026–92389, CVE-2026–87864, CVE-2026–87862 and 5 others
Affects: Ubuntu 24.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04, Ubuntu 16.04, Ubuntu 14.04
USN-8931–1: Apache HTTP Server vulnerabilities : Researchers discovered that Apache HTTP Server exposed WebDAV property information. A remote attacker could exploit this…
IDs: CVE-2026–73637, CVE-2026–63292, CVE-2026–93546, CVE-2026–63686 and 5 others
Affects: Ubuntu 24.04, Ubuntu 26.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04, Ubuntu 16.04, Ubuntu 14.04
USN-8930–1: U-Boot vulnerabilities : Shahriyar Jalayeri and Mehrun P. Hunter discovered that U-Boot incorrectly handled certain NFS READ and NFS READLINK responses. An attacker…
IDs: CVE-2026–74222, CVE-2026–74225, CVE-2026–74221, CVE-2026–74220
Affects: Ubuntu 24.04, Ubuntu 26.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04, Ubuntu 16.04
USN-8929–1: Bind vulnerabilities : Zuyao Xu and Xiang Li discovered that Bind incorrectly handled certain malformed DNSKEY records. A remote attacker could exploit this issue…
IDs: CVE-2026–19033, CVE-2026–81736, CVE-2026–13321, CVE-2026–78301 and 20 others
Affects: Ubuntu 24.04, Ubuntu 26.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04, Ubuntu 16.04, Ubuntu 14.04
USN-8928–1: OpenSSH vulnerabilities : It was discovered that the OpenSSH SFTP client incorrectly handled paths returned by the server during a recursive copy operation…
IDs: CVE-2026–106552, CVE-2026–106553, CVE-2026–106585, CVE-2026–106583 and 5 others
Affects: Ubuntu 24.04, Ubuntu 26.04, Ubuntu 22.04
USN-8926–1: urllib3 vulnerabilities : Yu-Fu Fu, Seth Larson, and Yonatan Magier discovered that urllib3 did not correctly handle certain certificate validations. An attacker could…
IDs: CVE-2026–97688, CVE-2026–97687, CVE-2026–97689
Affects: Ubuntu 24.04, Ubuntu 26.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04
USN-8925–1: YAML-LibYAML vulnerabilities : Dominique Dumont discovered that YAML-LibYAML did not correctly handle certain reflection operations. If a user or system were tricked into…
IDs: CVE-2026–63676, CVE-2019–25777, CVE-2017–20285
Affects: Ubuntu 24.04, Ubuntu 26.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04, Ubuntu 16.04
USN-8908–2: BlueZ regression : USN-8908–1 fixed vulnerabilities in BlueZ. Unfortunately, this update introduced a regression in the A2DP profile: Cached…
IDs: CVE-2026–19774
Affects: Ubuntu 24.04, Ubuntu 26.04, Ubuntu 22.04, Ubuntu 20.04
USN-8918–1: Linux kernel (Azure) vulnerabilities : It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU was…
IDs: CVE-2026–72197, CVE-2026–64463, CVE-2026–64330, CVE-2026–74345 and 1045 others
Affects: Ubuntu 24.04
USN-8917–1: Linux kernel vulnerabilities : It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU was…
IDs: CVE-2026–72213, CVE-2026–68260, CVE-2026–64336, CVE-2026–64500 and 1046 others
Affects: Ubuntu 24.04
USN-8916–1: PyJWT vulnerabilities : YuSung Han discovered that PyJWT did not properly validate certain JWK keys during HMAC verification. An attacker could exploit this…
IDs: CVE-2026–102267, CVE-2026–102268, CVE-2026–102271, CVE-2026–102266 and 2 others
Affects: Ubuntu 24.04, Ubuntu 26.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04, Ubuntu 16.04
USN-8915–1: FFmpeg vulnerabilities : Momoko Shiraishi discovered that FFmpeg did not correctly handle certain memory operations. An attacker could potentially exploit this issue…
IDs: CVE-2026–38350, CVE-2026–75147, CVE-2026–38348, CVE-2026–38346 and 4 others
Affects: Ubuntu 24.04, Ubuntu 26.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04, Ubuntu 16.04
USN-8913–1: libx11 vulnerabilities : Adam Bedard discovered that libx11 incorrectly handled certain XKB keyboard layout responses. If a user were tricked into…
IDs: CVE-2026–94283, CVE-2026–94284, CVE-2026–88806, CVE-2026–94285
Affects: Ubuntu 24.04, Ubuntu 26.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04, Ubuntu 16.04, Ubuntu 14.04
USN-8912–1: Perl DBI module vulnerabilities : Harsh Raj Singhania discovered that the Perl DBI module did not correctly validate certain attributes. An attacker could exploit this issue…
IDs: CVE-2026–88816, CVE-2026–78030
Affects: Ubuntu 24.04, Ubuntu 26.04, Ubuntu 22.04, Ubuntu 20.04, Ubuntu 18.04, Ubuntu 16.04, Ubuntu 14.04
USN-8911–1: Linux kernel (OEM) vulnerabilities : Several security issues were discovered in the Linux kernel. An attacker could potentially exploit these to compromise the system…
IDs: CVE-2026–68372, CVE-2026–53045, CVE-2026–52958, CVE-2026–52993 and 25 others
Affects: Ubuntu 24.04
USN-8887–3: Linux kernel vulnerabilities : It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU was…
IDs: CVE-2026–68133, CVE-2026–68400, CVE-2026–68211, CVE-2026–72197 and 1046 others
Affects: Ubuntu 24.04
USN-8903–2: Linux kernel vulnerabilities : Several security issues were discovered in the Linux kernel. An attacker could potentially exploit these to compromise the system…
IDs: CVE-2026–63949, CVE-2026–63957, CVE-2026–64014, CVE-2026–53349 and 228 others
Affects: Ubuntu 24.04, Ubuntu 22.04
USN-8905–2: Linux kernel (GCP) vulnerabilities : Several security issues were discovered in the Linux kernel. An attacker could potentially exploit these to compromise the system…
IDs: CVE-2026–63971, CVE-2026–63980, CVE-2026–53264, CVE-2026–53156 and 229 others
Affects: Ubuntu 24.04