{"id":2349,"date":"2026-09-19T15:47:07","date_gmt":"2026-09-19T14:47:07","guid":{"rendered":"https:\/\/dominique.leuenberger.net\/blog\/?p=2349"},"modified":"2026-09-19T15:47:07","modified_gmt":"2026-09-19T14:47:07","slug":"tumbleweed-review-of-the-week-2026-38","status":"publish","type":"post","link":"https:\/\/dominique.leuenberger.net\/blog\/2026\/09\/tumbleweed-review-of-the-week-2026-38\/","title":{"rendered":"Tumbleweed \u2013 Review of the week 2026\/38"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Dear Tumbleweed users and hackers,<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This week saw the release of 6 snapshots (0910, 0911, 0912, 0914, 0915, and 0916).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The star of this week&#8217;s show was undoubtedly KDE, which delivered a stellar triple-header across consecutive releases: KDE Plasma 6.7.5 landed in snapshot 0910, KDE Frameworks 6.30 followed in 0911, and KDE Gear 26.08.1 completed the desktop suite&#8217;s major updates in 0912. Beyond the graphical interface, core system integrity was a major focus. Snapshot 0915 brought a crucial security-hardening round, delivering backported glibc CVE fixes alongside security updates for cups, alsa, and gvfs. Snapshot 0916 followed up with further CVE mitigations in freeipmi, 7zip, and xz (fixing a critical invalid memory access bug in the lzma decoders).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Under the hood, snapshot 0915 brought exciting architectural enhancements to Mesa, including enabling the &#8216;rocket&#8217; Gallium driver for Rockchip NPUs on AArch64 and shipping the &#8216;Teflon&#8217; TensorFlow Lite delegate in a new subpackage. OpenCV also expanded its media capabilities, enabling native support for both JPEG XL and AVIF, while the Linux Kernel progressed to version 7.2.5 in snapshot 0914.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These 6 snapshots delivered the following updates:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>389-ds 3.3.1+8c2711bd6<\/li>\n\n\n\n<li>7zip 26.03<\/li>\n\n\n\n<li>bash-completion 2.17.0<\/li>\n\n\n\n<li>container-selinux 2.251.0<\/li>\n\n\n\n<li>freeipmi 1.6.19<\/li>\n\n\n\n<li>fuse3 3.18.3<\/li>\n\n\n\n<li>gimp 3.2.6<\/li>\n\n\n\n<li>gnome-maps 50.5<\/li>\n\n\n\n<li>gnome-software 50.4<\/li>\n\n\n\n<li>gstreamer 1.28.7<\/li>\n\n\n\n<li>gtk4 4.22.5<\/li>\n\n\n\n<li>gvfs 1.60.3<\/li>\n\n\n\n<li>kbd 2.10.0<\/li>\n\n\n\n<li>KDE Frameworks 6.30<\/li>\n\n\n\n<li>KDE Gear 26.08.1<\/li>\n\n\n\n<li>KDE Plasma 6.7.5<\/li>\n\n\n\n<li>libgcrypt 1.12.4<\/li>\n\n\n\n<li>libpcap 1.10.7<\/li>\n\n\n\n<li>libstorage-ng 4.5.352 &amp; 4.5.353<\/li>\n\n\n\n<li>Linux Kernel 7.2.5<\/li>\n\n\n\n<li>llvm23 23.1.1<\/li>\n\n\n\n<li>openblas 0.3.34<\/li>\n\n\n\n<li>poppler 26.09.0<\/li>\n\n\n\n<li>postfix 3.11.7<\/li>\n\n\n\n<li>python-pip 26.2.1<\/li>\n\n\n\n<li>selinux-policy 20260910 &amp; 20260914<\/li>\n\n\n\n<li>shotwell 33.0<\/li>\n\n\n\n<li>simdutf 9.1.2<\/li>\n\n\n\n<li>timezone 2026d<\/li>\n\n\n\n<li>xz 5.8.4<\/li>\n\n\n\n<li>yast2-python-bindings 5.0.3<\/li>\n\n\n\n<li>yast2-samba-client 5.0.5<\/li>\n\n\n\n<li>zchunk 1.5.4<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">With these updates successfully rolled out, it is time to turn our gaze forward and see what the staging areas are cooking up for the near future:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Swig 4.5.0: Progress is being made with compatibility updates applied to other packages, such as yast2-python-bindings, but integration issues remain tracked under boo#1275515.<\/li>\n\n\n\n<li>fontconfig 2.18.3: Still held up as it breaks the AppStream test suite.<\/li>\n\n\n\n<li>libnettle 4.0.0: Remains explicitly excluded from main staging runs while developers work on resolving test suite breakages in libzypp.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Dear Tumbleweed users and hackers, This week saw the release of 6 snapshots (0910, 0911, 0912, 0914, 0915, and 0916). The star of this week&#8217;s show was undoubtedly KDE, which delivered a stellar triple-header across consecutive releases: KDE Plasma 6.7.5 landed in snapshot 0910, KDE Frameworks 6.30 followed in 0911, and KDE Gear 26.08.1 completed [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2349","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/dominique.leuenberger.net\/blog\/wp-json\/wp\/v2\/posts\/2349","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dominique.leuenberger.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dominique.leuenberger.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dominique.leuenberger.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dominique.leuenberger.net\/blog\/wp-json\/wp\/v2\/comments?post=2349"}],"version-history":[{"count":1,"href":"https:\/\/dominique.leuenberger.net\/blog\/wp-json\/wp\/v2\/posts\/2349\/revisions"}],"predecessor-version":[{"id":2350,"href":"https:\/\/dominique.leuenberger.net\/blog\/wp-json\/wp\/v2\/posts\/2349\/revisions\/2350"}],"wp:attachment":[{"href":"https:\/\/dominique.leuenberger.net\/blog\/wp-json\/wp\/v2\/media?parent=2349"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dominique.leuenberger.net\/blog\/wp-json\/wp\/v2\/categories?post=2349"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dominique.leuenberger.net\/blog\/wp-json\/wp\/v2\/tags?post=2349"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}