Dear Tumbleweed users and hackers,
This week saw the release of 4 snapshots (0806, 0809, 0811, and 0812).
Notable updates include the release of KDE Plasma 6.7.4 in snapshot 0809, delivering the latest bugfix release. In the same snapshot, GDM 50.2 was delivered to address security concerns, including a path traversal vulnerability where a compromised greeter could load arbitrary .desktop files via SelectSession, and an autologin bypass.
For system libraries and services, Mesa 26.2.0 was delivered in snapshot 0812. OpenSSH 10.5p1 also arrived in 0812, which now requires ECC (Elliptic Curve Cryptography) support in libcrypto for its portable build. Meanwhile, snapshot 0811 delivered OpenVPN 2.7.5 with multiple security fixes and built-in Data Channel Offload (DCO) support.
Several other critical security fixes were integrated this week. Dracut was updated to version 112+suse.29.gc0c5e1d to patch a root code execution vulnerability (CVE-2026-15816) in the emergency hook script path. Python-cryptography 50.0.0 also landed in snapshot 0806 to resolve an RSA decryption vulnerability (CVE-2026-69247). Additionally, the toolchain was updated with GCC 16.2.0, and the Linux kernel moved from 7.1.7 in snapshot 0809 to 7.1.8 in snapshot 0812.
These 4 snapshots delivered the following updates:
- aws-lc 5.5.0
- dracut 112+suse.29.gc0c5e1d
- gcc16 16.2.0
- gdm 50.2
- gnome-control-center 50.4
- gnome-shell 50.4
- gstreamer 1.28.6
- harfbuzz 14.3.0
- KDE Plasma 6.7.4
- libadwaita 1.9.3
- libostree 2026.3
- libpsl 0.23.2
- LibreOffice 26.2.5.2
- Linux kernel 7.1.7 & 7.1.8
- Mesa 26.2.0
- mutter 50.4
- ncurses 6.6.20260808
- openssh 10.5p1
- openvpn 2.7.5
- python-anyio 4.14.2
- python-charset-normalizer 3.4.9
- python-cryptography 50.0.0
- python-pyOpenSSL 26.4.0
- shadow 4.20.2
- suitesparse 7.13.0
- udisks2 2.11.2
- usbredir 0.15.0
Looking beyond these releases, here is what is currently working its way through our staging areas as we look to the next week:
- glibc 2.44: Still progressing in staging with integration issues like rpmlint test failures (boo#1273686) and python-scipy build issues (boo#1273688) under active investigation.
- libnettle 4.0.0: Currently breaking libzypp’s test suite.
- Swig 4.5.0
- icewm 4.0: Undergoing testing, but currently experiencing redraw issues in combination with the YaST installer.
Leave a Reply