Dear Tumbleweed users and hackers,
This week saw the release of 5 snapshots (0731, 0802, 0803, 0804, and 0805).
A couple of long-standing hurdles in our staging projects have finally been cleared. Highlighting these deliveries is the official arrival of Podman 6.0.0 in snapshot 0802, bringing a major stack update that defaults rootless networking to pasta and removes legacy components like cgroups v1, slirp4netns, and CNI support. Hand-in-hand with toolchain progress, python-Sphinx 9.1.0 also successfully landed in snapshot 0802, resolving the python311 and python312 documentation build issues that had previously held it back.
Additionally, shadow 4.20.0 has landed with significant changes. In this version, several deprecated features have been removed entirely, including the PASS_MIN_DAYS setting and the associated -m or --mindays flags in chage and passwd, which are considered security vulnerabilities. As a result, scripts relying on these flags will now intentionally fail, so users and administrators should review their automated user management workflows.
In desktop environment updates, Plasma 6 Workspace has transitioned to defaulting SDDM to the Plasma Wayland session, no longer recommending the X11 session. Additionally, both Breeze6 and Plasma 6 integration have split their legacy Qt 5 components into separate optional packages.
This week also addressed multiple security issues across core system libraries. Highlights include libssh2_org incorporating fixes for several CVEs (including heap overflows and double-frees) and libvirt 12.6.0 resolving multiple vulnerabilities along with a virsh crash fix.
These 5 snapshots delivered the following updates:
- apparmor 5.0.2
- aws-lc 5.4.0
- glib2 2.88.3
- hwdata 0.410
- ImageMagick 7.1.2.29
- libvirt 12.6.0
- Linux Kernel 7.1.6
- Mesa 26.1.6
- Mozilla Firefox 153.0.3
- nano 9.2
- nghttp2 1.70.0
- PHP 8.5.9
- Podman 6.0.0
- python-Sphinx 9.1.0
- qemu 11.0.3
- Samba 4.24.5
- SDL3 3.4.14
- shadow 4.20.0
- unbound 1.26.0
- Xen 4.22.0
As we look to the horizon, the staging areas are dominated by one particularly massive system transition, alongside several notable packages currently undergoing integration testing.
- glibc 2.44: The transition is progressing well in its staging area with only four build failures observed so far, which are tracked under boo#1273584.
- KDE Plasma 6.7.4
- LibreOffice 20.2.5.2
- Linux Kernel 7.1.7
- Swig 4.5.0
- libnettle 4.0.0: Currently breaking libzypp’s test suite.
- icewm 4.0: Undergoing testing, but currently experiencing redraw issues in combination with the YaST installer.
Leave a Reply