• TheFool@infosec.pub
    link
    fedilink
    arrow-up
    2
    ·
    7 months ago

    Dear Tumbleweed users and hackers,

    Last week, there was a public holiday on Thursday in some parts of the world (Ascension Day). Unsurprisingly, many devs, including myself and Ana, took Friday off to enjoy a longer weekend (and I can tell you: the weather was fantastic). As a result, I have to span two weeks of changes to Tumbleweed here once again. We have published 12 snapshots since my last review (0502…0515, snapshots 0504 and 0513 were not built due to weekends)

    The most relevant changes delivered as part of those snapshots were:

    • Mozilla Firefox 125.0.3
    • LibreOffice 24.2.3.2
    • GNOME 46.1
    • GIMP 2.10.38
    • LLVM 18.1.5
    • GCC 14.1
    • KDE Frameworks 6.2.0
    • PHP 8.3.7
    • PostgreSQL 16.3
    • Systemd 255.5 & 255.6
    • Linux kernel 6.8.9 (with linux-glibc-devel already prepared at 6.9)
    • Ruby 3.3.1
    • QEmu 8.2.3
    • util-linux 2.40.1

    Snapshot 0515 contained an openssh update, that mistakenly recommended installation of the subpackage openssh-server-config-rootlogin; this package has existed since the default configuration of openSSH was changed to not permit root login anymore, so admins could easily switch it back on. Due to an error, this had been triggered for automatic installation. This has since been corrected and a version of openssh-server was published to the update channel, which is NOT recommended. Please check your installation and remove the package again, should it be installed and you don’t need it (we can’t auto-remove it without breaking users that explicitly wanted it)

    The following things are known to be worked on at the moment and are reaching you in some upcoming snapshot: