Ubuntu blog
- 3posts a week
- 6 Novlast post
- #10in Linux
Ubuntu blog feed
Subscribe
Latest posts
Ubuntu Summit 26.10: Less than a week away!
Here in London, the long summer has stepped aside for cooler nights and damp, misty mornings. The trees are turning amber and the sunlight is low on the horizon, which can only mean one thing: the next Ubuntu Summit is just around the corner. In fact…
The missing piece: bringing up to 15 years of support to Zephyr for microcontroller-based ECUs
We recently announced the launch of Zephyr 26.04 LTS, bringing up to 15 years of security maintenance per LTS and enterprise lifecycle management to microcontroller-grade devices. While central high-performance computer ECUs capture most of the industry spotlight in software-defined vehicle (SDV)…
Ubuntu Pro is now available on AWS Deep Learning Amazon Machine Images (DLAMI)
In September 2026, Amazon Web Services (AWS) published its first DLAMIs built on Ubuntu Pro in the Base GPU family. By choosing Ubuntu Pro, enterprises launching DLAMIs gain a stronger security maintenance posture at launch thanks to Expanded Security Maintenance (ESM). What are the DLAMIs? The…
CVE-2026-109518 APT vulnerability fixes available
Fixes are available in Ubuntu for the CVE-2026-109518 vulnerability affecting APT.
Never lose robot data again: automatic ROS 2 bag recording and upload
If you work with robots, perhaps you’ve come up against a common, but annoying situation: the one field run that mattered is the one nobody recorded. Or it was recorded but the ROS 2 bag (a recording of ROS 2 topics) is sitting in the robot’s storage, at a customer site, three time zones away. […]
Fixes available in -proposed pocket for CVE-2026-98432
Fixes for the CVE-2026-98432 Linux kernel vulnerability are available for Ubuntu.
php2shell (CVE-2026-109618 and CVE-2026-109619) – PHP critical vulnerability fixes available
Introduction Two critical security vulnerabilities affecting PHP have been identified that result in unauthenticated remote code execution (RCE) for any PHP application. The vulnerabilities have been assigned the CVE-2026-109618 and CVE-2026-109619 identifiers, but are also referred to using the…
eMudhra CA compromise fixes available
This blog post was updated with additional information related to libnss3 and Java applications on October 22, 2026. Introduction The private keys of the eMudhra Certificate Authority (CA) have been demonstrated on 20 October 2026 to have been compromised. The Ubuntu Security Team has released…
From personas to archetypes: a living, shared understanding of the people we build for (Part 1 of 2)
Personas are easy to create but often ignored. This is the first of two posts about how we developed archetypes to keep our personas fresh at Canonical. These are shared, machine-readable descriptions of our users that multiple teams and their agents can use.
How to lower Android™ development costs by removing hardware from the critical path
As an Android developer, you’ll almost always have access to a device. However, when handling hardware, the device that you actually need often happens to be already in use, set up incorrectly, stored in another lab, or simply waiting to be reset. That’s when Android development costs start to…
Canonical releases Ubuntu 26.10 Stonking Stingray
The latest interim release of Ubuntu previews privacy conscious speech-to-text, enables post-quantum package signing, completes the rollout of Rust coreutils, and improves enterprise identity integration. October 15, 2026 Today Canonical announced the release of Ubuntu 26.10, codenamed “Stonking…
Fixes available for CVE-2026-92392 and other curl vulnerabilities
Introduction On 7 October 2026, Daniel Stenberg published a blog post describing a plan to release a new version of curl on 14 October 2026 in order to address 22 known security vulnerabilities. These vulnerabilities have varying severities, with a single vulnerability assessed as high…
Myna speech-to-text is now available as a technology preview
A few months ago, we introduced Myna, our project to bring private, local speech-to-text dictation to Ubuntu Desktop. Named after the speech-mimicking myna bird, Myna is an optional Ubuntu 26.10 feature that offers real-time visual feedback during speech recognition. Since then, Myna has grown into…
What’s new in security for Ubuntu 26.10?
Ubuntu 26.10 “Stonking Stingray” arrives at a time when AI tools are accelerating vulnerability discovery. Patching faster is essential, but the resilience of the underlying operating system must also limit what an attacker can achieve before a fix is available. To respond to this new threat…
Devpack for Rust: Zero to Rust in seconds
One of the best things about Rust is how easy it is to get started. It takes just a second to snap install rustup; rustup default stable, and from there you have a whole toolchain ready to compile Rust code. But with this ease of use comes a giant ecosystem, and with this giant ecosystem […]
Securing open source software dependencies in the public cloud
Building stable and secure software requires understanding build systems and having a plan for vulnerabilities in your software dependencies.
Confidential computing in the real world: finding your use case
Confidential computing is essential when an organization needs to process sensitive data on infrastructure where the operators should not have access to it. You might have seen this requirement before: it appears commonly in public cloud deployments (where organizations want to prevent the cloud…
Android™ belongs in your CI/CD pipeline
How on-demand Android environments turn validation into a repeatable pipeline stage In the first article, we looked at automation: how Android environments can be created and managed programmatically. In the second, we looked at scaling: how shared infrastructure can make those environments…
Realtime transaction fraud detection – with an LLM?
Conversational AI with a chatbot is great for drafting emails or debugging code, but it’s less ideal for real-time application middleware. If you’re trying to inspect a financial transaction for potential fraud in the middle of a checkout loop, you don’t need an LLM to write you an essay about why…
In the directory since 25 Sept 2026 · last checked 9 Nov 2026 · RSS