This Week in TUXEDO OS #49-2024 - TUXEDO Computers

Hello TUXEDO fans and open-source enthusiasts!

This week, there isn’t much new to report from the development of TUXEDO OS, as the current update is still occupying a significant amount of resources. Our developers are working on final optimizations. However, there are many exciting innovations in the pipeline for the coming year. In the meantime, we’d like to draw your attention to the annual fundraising campaign of the KDE Community. Over €38,000 has already been raised to support free software.

Enjoy reading,
The TUXEDO OS Team

Important News from the TUXEDO Editorial Team

• Support for TUXEDO OS 2 and 3 will end soon
• Upgrader for TUXEDO OS is Back Online

Support KDE: Strengthen Free Software Together

The KDE Community is calling for contributions through its annual fundraising campaign to support and further develop free software. The campaign aims to raise €50,000 – over €38,000 has already been achieved. However, many KDE apps, such as PartitionManager or AudioTube, are still looking for supporters to “adopt” and promote them.

Thanks to KDE and the Qt framework, developers can create applications that work across platforms – not only on Linux but also on Windows, macOS, and mobile platforms. This makes the advantages of free software accessible to a broader user base and promotes wider adoption in the long term.

At TUXEDO Computers, we value KDE’s advancements and believe it is the ideal desktop environment for TUXEDO OS.

With your support, the fundraising campaign contributes to maintaining KDE’s independence and advancing free software. Whether through a one-time donation, regular contributions, or the “adoption” of an app – every bit helps.

KDE App of the Week: The Calendar App Merkuro

Merkuro is a powerful calendar application that supports both local and numerous online calendar services, such as Nextcloud, Google Calendar, Outlook, and CalDav. It offers a central platform for managing appointments and tasks – flexibly and across devices.

Efficient Appointment Management in Various Views

Formerly known as Kalendar, Merkuro stands out with its variety of display modes, allowing easy organization of your schedule:

• Month View: Get a quick overview of the entire month.
• Week View: Plan your week with detailed hourly breakdowns.
• Agenda View: All upcoming appointments are listed compactly so you don’t miss anything.

Additionally, Merkuro offers a comprehensive task management system. The tree view helps you stay organized even in complex projects. Tasks and subtasks can be arranged flexibly and filtered based on individual criteria.

Optimized for Desktop and Mobile Devices

Merkuro has been designed from the ground up to be user-friendly on a variety of devices – from desktop PCs to smartphones. On laptops and desktops, the app is still available under its original name Kalendar, also as a Flatpak package.

Other KDE apps updated last week can be found in the column This Week in KDE Apps.

KDE Tips and Tricks: Zoom for Video Conferences

In KDE Plasma, there is a well-hidden but highly useful zoom function, especially beneficial for screen sharing in video conferences like Jitsi, Zoom, or Teams. It allows you to quickly enlarge specific desktop areas to highlight important content.

In a Wayland session, you can hold down Ctrl and Meta and scroll with the mouse wheel to zoom in or out. The screen section automatically follows the mouse pointer, allowing seamless interaction. Mouse clicks and text selections work as usual.

In an X11 session, you can zoom in with Ctrl++ or zoom out with Ctrl+-. Reset the zoom factor to 100% with Ctrl+0. If the function doesn’t work, check in System Settings under Apps & Windows » Window Management » Desktop Effects to ensure the Zoom effect is activated.

Security Updates for Ubuntu

The following Ubuntu security updates are directly incorporated into TUXEDO OS:

• USN-7139–1: Apache Shiro vulnerability: Apache Shiro could be made to run programs or expose sensitive information over the network.
  ID: CVE-2016–4437
  Affects: Ubuntu 16.04 ESM

• USN-7138–1: Ghostscript vulnerabilities: Several security issues were fixed in Ghostscript.
  ID: CVE-2024–46951, CVE-2024–46956, CVE-2024–46955, and 1 other
  Affects: Ubuntu 18.04 ESM, Ubuntu 16.04 ESM

• USN-7137–1: recutils vulnerabilities: recutils could be made to crash or run programs as a login user if a specially crafted file was opened.
  ID: CVE-2021–46021, CVE-2019–11637, CVE-2019–6456, and 10 others
  Affects: Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, Ubuntu 18.04 ESM, Ubuntu 16.04 ESM

• USN-7136–2: Django vulnerability: Several security issues were fixed in Django.
  ID: CVE-2024–53907
  Affects: Ubuntu 18.04 ESM, Ubuntu 16.04 ESM

• USN-7136–1: Django vulnerabilities: Several security issues were fixed in Django.
  ID: CVE-2024–53907, CVE-2024–53908
  Affects: Ubuntu 24.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS

• USN-7135–1: HAProxy vulnerability: HAProxy could allow unintended access to network services.
  ID: CVE-2023–25725
  Affects: Ubuntu 16.04 ESM

• USN-7134–1: Firefox vulnerabilities: Several security issues were fixed in Firefox.
  ID: CVE-2024–11692, CVE-2024–11695, CVE-2024–11701, and 8 others
  Affects: Ubuntu 20.04 LTS

• USN-7133–1: HAProxy vulnerability: HAProxy could be made to expose sensitive information over the network.
  ID: CVE-2024–53008
  Affects: Ubuntu 24.04 LTS

• USN-7132–1: PostgreSQL vulnerabilities: Several security issues were fixed in PostgreSQL.
  ID: CVE-2024–10978, CVE-2024–10979, CVE-2024–10977, and 1 other
  Affects: Ubuntu 24.10, Ubuntu 24.04 LTS, Ubuntu 22.04 LTS, Ubuntu 20.04 LTS

• USN-6846–2: Ansible regression: USN-6846–1 caused some regression in ansible.
  ID: Keine CVE-ID angegeben
  Affects: Ubuntu 18.04 ESM, Ubuntu 16.04 ESM