The stack of libraries that underpins KDE Plasma and the wider KDE application suite has had its monthly refresh, and the image-handling code is where the most consequential work landed. KDE Frameworks 6.27.0 tightens the KImageFormats module against malformed files: EXR images with dimensions beyond 300,000 by 300,000 pixels are now rejected outright, the AVIF, HEIF, and RAW plugins gained stricter size limits, and a memory allocation barrier was added to the JPEG XR decoder. Fuzzing runs through OSS-Fuzz now cap image allocation at 2,000 MiB. For anyone running KDE apps on a low-memory single-board computer or mini PC, these guards reduce the chance that a hostile thumbnail or attachment can balloon into runaway memory use.
The same module also picked up new format support, with read-only Farbfeld decoding, DEEP image handling for the IFF format, and HEIF image transformation support. Developers get a batch of additions in Syntax Highlighting, which now recognizes Slint UI files along with BNF and ABNF grammar notation, refreshes its fish shell and Raku definitions, and ships gemtext fixes. KWidgetsAddons updated its KCharSelect data to Unicode 17.0, and KConfig saw broad cleanup around its compiler and CMake dependency handling.
A scattering of smaller user-facing touches round out the release. Breeze Icons replaced the bundled Adobe Acrobat branding with Okular iconography and dropped several proprietary logo icons, KIO added Flathub as a built-in search provider, and Solid now labels disks using the storage size units configured globally in the system rather than a fixed convention. KHolidays added Bolivian holidays and fixed entries that appeared twice in January, while the Android side of the stack improved notification icon handling and added Sentry crash-reporting integration in KCrash.
Frameworks 6.27.0 requires Qt 6.9.0. Distribution packages are the recommended route on Linux, as outlined on the Get KDE Software on Your Linux Distro page, and the complete source can be freely downloaded for those building from the Frameworks git repositories with kde-builder.
