Please turn JavaScript on

Ubuntu blog

Want to keep yourself up to date with the latest news from Ubuntu blog?

Subscribe using the "Follow" button below and we provide you with customized updates, via topic or tag, that get delivered to your email address, your smartphone or on your dedicated news page on follow.it.

You can unsubscribe at any time painlessly.

Title of Ubuntu blog: " Enterprise Open Source and Linux | Ubuntu"

Is this your feed? Claim it!

Publisher:  Unclaimed!
Message frequency:  0.49 / day

Message History

Introduction

Max Justicz discovered and responsibly disclosed a vulnerability in APT, the package manager used in Debian, Ubuntu, and derivative Linux distributions. The vulnerability has been assigned the identifier CVE-2026-109518 and has a severity of High. An on-path atta...


Read full story

If you work with robots, perhaps you’ve come up against a common, but annoying situation: the one field run that mattered is the one nobody recorded. Or it was recorded but the ROS 2 bag (a recording of ROS 2 topics) is sitting in the robot’s storage, at a customer site, three time zones away.

This issue is commonly caused by manually starting ros2 bag record and using...


Read full story
Introduction

We have received several questions about CVE-2026-98432, a flaw in how the Linux kernel sets up IPv4 TCP connections, present in Linux kernel versions 4.4 and later.

The vulnerability has a CVSS 3.1 score of 9.8, corresponding to a severity of High. 

Our team is currently working on testing the fixes for CVE-2026-98432 for Ubuntu 22.04 LTS and newer...


Read full story
Introduction


Two critical security vulnerabilities affecting PHP have been identified that result in unauthenticated remote code execution (RCE) for any PHP application. The vulnerabilities have been assigned the CVE-2026-109618 and CVE-2026-109619 identifiers, but are also referred to using the php2shell nickname. Ubuntu has released fixes for the affected packages for...


Read full story
Introduction

The private keys of the eMudhra Certificate Authority (CA) have been demonstrated on 20 October 2026 to have been compromised. The Ubuntu Security Team has released updates to the system PKI (Public Key Infrastructure) root CA store in the ca-certificates package.

...

Read full story