Ubuntu 6935 Published by Philipp Esselbach 0

The Linux kernel received fixes for several security issues that affected various Ubuntu releases and derivatives, such as Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, and others. The fixes address vulnerabilities in various subsystems, such as network drivers, device trees, open firmware drivers, SCSI subsystems, TTY drivers, and others that could potentially be used by attackers to compromise the system. Additionally, Ubuntu 16.04 LTS now has an Apache Subversion security update available.

[USN-7819-1] Linux kernel (Azure) vulnerabilities
[USN-7818-1] Apache Subversion vulnerability
[USN-7820-1] Linux kernel (Oracle) vulnerabilities
[USN-7796-4] Linux kernel (Azure FIPS) kernel vulnerabilities

Ubuntu 6935 Published by Philipp Esselbach 0

Multiple security vulnerabilities have been discovered in various Ubuntu packages, including ImageMagick, Vim, LibHTP, WebKitGTK, and DPDK. These vulnerabilities could potentially allow an attacker to cause a denial of service, obtain sensitive information, or execute arbitrary code. Updates are available for affected systems, and users are advised to update their systems as soon as possible.

[USN-7812-1] ImageMagick vulnerabilities
[USN-7815-1] Vim vulnerabilities
[USN-7814-1] LibHTP vulnerabilities
[USN-7817-1] WebKitGTK vulnerabilities
[USN-7816-1] DPDK vulnerability

Ubuntu 6935 Published by Philipp Esselbach 0

The final version of Ubuntu Linux 25.10, also known as "Questing Quokka," has been released with cutting-edge open-source technologies and improved accessibility features. The latest version includes GNOME 49, the Loupe image viewer, the Ptyxis terminal emulator, and enhanced security features such as Network Time Security (NTS) turned on by default. Ubuntu 25.10 is based on the strong Linux 6.17 kernel, which allows for virtual machine support within virtual machines on Arm processors and improved full disk encryption. 

Ubuntu 6935 Published by Philipp Esselbach 0

Multiple security issues have been discovered in various Linux kernel versions for different platforms, including Amazon Web Services (AWS), Microsoft Azure Cloud systems, Google Container Engine (GKE) systems, and others. The issues were fixed through updates to the respective kernel versions, which require a system reboot after installation. Additionally, a separate vulnerability was addressed in FORT Validator, an RPKI validator and RTR server, due to input validation issues that could lead to denial of service or arbitrary code execution. Ubuntu security notices (USNs) have been issued for each of these vulnerabilities, providing detailed information on the affected platforms, fixed versions, and update instructions.

[USN-7795-3] Linux kernel (AWS FIPS) vulnerabilities
[USN-7811-1] Linux kernel (NVIDIA Tegra IGX) vulnerabilities
[USN-7810-1] Linux kernel (Azure) vulnerabilities
[USN-7793-5] Linux kernel (GKE) vulnerabilities
[USN-7809-1] Linux kernel (Azure, N-Series) vulnerabilities
[USN-7808-1] Linux kernel (Azure) vulnerabilities
[USN-7792-3] Linux kernel (AWS) vulnerabilities
[USN-7789-2] Linux kernel (Raspberry Pi) vulnerabilities
[LSN-0115-1] Linux kernel vulnerability
[USN-7813-1] FORT Validator vulnerabilities

Ubuntu 6935 Published by Philipp Esselbach 0

Ubuntu Security Notice USN-7807-1 addresses vulnerabilities in GStreamer Base Plugins. Researchers Michael Randrianantenaina and Antonio Morales discovered multiple security issues that could potentially allow attackers to execute arbitrary code or cause denial-of-service conditions. The affected systems include Ubuntu 18.04 LTS and Ubuntu 16.04 LTS, for which updated versions of libgstreamer-plugins-base1.0-0 are available.

[USN-7807-1] GStreamer Base Plugins vulnerabilities

Ubuntu 6935 Published by Philipp Esselbach 0

Multiple security updates were released for various Ubuntu versions, including 20.04 LTS, 25.04, 24.04 LTS, and 22.04 LTS. The updates address vulnerabilities in MySQL, Squid, poppler, Linux kernels (including Oracle and NVIDIA Tegra IGX), PAM/U2F, and HAProxy. The fixes include new upstream versions to address security issues and also include bug fixes, new features, and possibly incompatible changes.

[USN-7691-2] MySQL vulnerabilities
[USN-7804-1] Squid vulnerability
[USN-7803-1] poppler vulnerability
[USN-7801-2] Linux kernel (Oracle) vulnerabilities
[USN-7791-3] Linux kernel vulnerabilities
[USN-7774-5] Linux kernel (NVIDIA Tegra IGX) vulnerabilities
[USN-7806-1] PAM/U2F vulnerability
[USN-7805-1] HAProxy vulnerability

Debian 10708 Ubuntu 6935 Arch Linux 920 Published by Philipp Esselbach 0

Steven Barrett has announced the release of Liquorix Linux Kernel 6.16-9, a custom kernel based on Linux Kernel 6.16.10, designed to optimize desktop, multimedia, and gaming workloads. This kernel boasts several key features, including Zen Interactive Tuning technology and various scheduling improvements that aim to improve system responsiveness and reduce latency. The kernel also includes extra performance-enhancing features such as High Resolution Scheduling, Budget Fair Queue, and TCP BBR2 Congestion Control, making it suitable for real-time systems and high-speed data transfer. 

Ubuntu 6935 Published by Philipp Esselbach 0

Ubuntu 6935 Published by Philipp Esselbach 0

Multiple security updates are available for Ubuntu Linux, including ones for various kernel vulnerabilities. These kernel vulnerabilities affect different versions and architectures of the Linux kernel, including Azure, Raspberry Pi, Oracle, KVM, and general kernel updates. Additionally, there are security updates available for other packages such as Libxslt, libmspack, and Django.

[USN-7775-3] Linux kernel (Azure) vulnerabilities
[USN-7790-1] Linux kernel (Raspberry Pi) vulnerabilities
[USN-7789-1] Linux kernel (Oracle) vulnerabilities
[USN-7774-4] Linux kernel (KVM) vulnerabilities
[USN-7793-1] Linux kernel vulnerabilities
[USN-7792-1] Linux kernel vulnerabilities
[USN-7791-1] Linux kernel vulnerabilities
[USN-7787-1] Libxslt vulnerabilities
[USN-7788-1] libmspack vulnerabilities
[USN-7794-1] Django vulnerabilities

Ubuntu 6935 Published by Philipp Esselbach 0

Ubuntu Security Notice USN-7786-1 addresses three vulnerabilities in OpenSSL, a secure cryptographic library. The issues were discovered by Stanislav Fort and affect multiple Ubuntu versions, including 25.04, 24.04 LTS, 22.04 LTS, and others. The vulnerabilities could lead to denial of service or arbitrary code execution (CVE-2025-9230) or private data exposure on ARM platforms (CVE-2025-9231).

[USN-7786-1] OpenSSL vulnerabilities

Ubuntu 6935 Published by Philipp Esselbach 0

Ubuntu Security Notices (USNs) have been issued for several vulnerabilities affecting various packages, including Python 2.7, Ghostscript, curl, Open VM Tools, Rack, and LibTIFF. These USNs were released on September 29, 2025, and affect Ubuntu versions ranging from 14.04 LTS to 25.04. The vulnerabilities include issues such as regressions, denial-of-service attacks, privilege escalation, and data exposure, which can be mitigated by updating the affected packages.

[USN-7280-3] Python 2.7 regression
[USN-7015-7] Python 2.7 regression
[USN-7782-1] Ghostscript vulnerabilities
[USN-5495-2] curl regression
[USN-7785-1] Open VM Tools vulnerability
[USN-7784-1] Rack vulnerability
[USN-7783-1] LibTIFF vulnerabilities

Ubuntu 6935 Published by Philipp Esselbach 0

Ubuntu Security Notice USN-7780-1 addresses vulnerabilities in Qt, affecting Ubuntu 22.04 LTS, 20.04 LTS, 18.04 LTS, and 16.04 LTS. The issues include incorrect handling of certain inputs, leading to potential denial of service or information disclosure. Updates are available for the affected systems, which can be applied through a standard system update. Similarly, Ubuntu Security Notice USN-7781-1 addresses vulnerabilities in Inetutils, affecting Ubuntu 20.04 LTS, 18.04 LTS, 16.04 LTS, and 14.04 LTS.

[USN-7780-1] Qt vulnerabilities
[USN-7781-1] Inetutils vulnerabilities

Ubuntu 6935 Published by Philipp Esselbach 0

Ubuntu Linux has released security updates to address several vulnerabilities in the Linux kernel. These vulnerabilities could potentially allow an attacker to compromise the system and affect various subsystems, including ARM32 and ARM64 architectures, GPU drivers, network drivers, and more. The update corrects flaws in 89 identified CVEs (Common Vulnerabilities and Exposures) across multiple components of the Linux kernel. Users are advised to apply these security updates to ensure their Ubuntu systems remain secure against potential attacks.

[USN-7775-2] Linux kernel (Azure) vulnerabilities
[USN-7769-3] Linux kernel vulnerabilities
[USN-7764-2] Linux kernel (HWE) vulnerabilities

Debian 10708 Ubuntu 6935 Arch Linux 920 Published by Philipp Esselbach 0

Steven Barrett has released the Liquorix Linux Kernel 6.16-8, a custom kernel designed to optimize desktop, multimedia, and gaming workloads by leveraging the performance capabilities of Linux Kernel 6.16. The kernel includes various upgrades aimed at making the system more responsive, lowering delays, and increasing data handling efficiency with tools like Zen Interactive Tuning technology and better scheduling. Liquorix kernel 6.16-8 also offers additional performance-enhancing features like High Resolution Scheduling, TCP BBR2 Congestion Control, and Compressed Swap to improve data transfer speed and reduce swap storage size.

Ubuntu 6935 Published by Philipp Esselbach 0

Several security updates have been released for Ubuntu to address vulnerabilities. The updates include fixes for Linux kernel vulnerabilities, affecting Azure FIPS, real-time, Oracle, and IBM versions. Additionally, vulnerabilities were found in Gnuplot, Eventlet, PCRE2, and sha.js, which also received security updates.

[USN-7775-1] Linux kernel (Azure FIPS) vulnerabilities
[USN-7774-3] Linux kernel (Real-time) vulnerabilities
[USN-7774-1] Linux kernel vulnerabilities
[USN-7773-1] Gnuplot vulnerabilities
[USN-7772-1] Eventlet vulnerability
[USN-7776-1] Linux kernel (Oracle) vulnerabilities
[USN-7767-2] Linux kernel (Real-time) vulnerabilities
[USN-7779-1] Linux kernel (IBM) vulnerabilities
[USN-7777-1] PCRE2 vulnerability
[USN-7778-1] sha.js vulnerability

Ubuntu 6935 Published by Philipp Esselbach 0

There are multiple security updates available for Ubuntu Linux. The updates address various vulnerabilities in the Linux kernel, affecting different versions and configurations, such as AWS FIPS, NVIDIA, Real-time, OEM, and Azure. Additionally, there is a separate update addressing a vulnerability in dpkg.

[USN-7755-3] Linux kernel (AWS FIPS) vulnerabilities
[USN-7766-1] Linux kernel vulnerabilities
[USN-7765-1] Linux kernel (NVIDIA) vulnerabilities
[USN-7764-1] Linux kernel vulnerabilities
[USN-7767-1] Linux kernel (Real-time) vulnerabilities
[USN-7771-1] Linux kernel (OEM) vulnerabilities
[USN-7770-1] Linux kernel (Azure) vulnerabilities
[USN-7769-1] Linux kernel vulnerabilities
[USN-7769-2] Linux kernel (Real-time) vulnerabilities
[USN-7768-1] dpkg vulnerability

Ubuntu 6935 Published by Philipp Esselbach 0

Three Ubuntu Security Notices (USNs) were released to address vulnerabilities in various packages. The first USN (USN-7762-1) fixes multiple security issues in the pip package installer, including exposure of sensitive information due to incorrect handling of proxy headers and URLs. The second USN (USN-7763-1) addresses a vulnerability in RabbitMQ Server that allows local attackers to obtain sensitive information by logging authorization headers. The third USN (USN-7759-1) fixes a denial-of-service vulnerability in the Kea DHCP package, which can be exploited by sending specially crafted network traffic.

[USN-7762-1] pip vulnerabilities
[USN-7763-1] RabbitMQ Server vulnerability
[USN-7759-1] Kea DHCP vulnerabilities

Ubuntu 6935 Published by Philipp Esselbach 0

Ubuntu has released two security notices: USN-7761-1 and USN-7760-1, addressing vulnerabilities in PAM (Pluggable Authentication Modules) and GNU C Library. The PAM vulnerability could allow an attacker to spoof hostnames and bypass access restrictions, while the GNU C Library issue could cause applications to crash or run arbitrary code. To resolve these issues, users are advised to update their systems to the latest package versions: libpam-modules 1.5.3-7ubuntu4.4 for Ubuntu 25.04, libpam-modules 1.5.3-5ubuntu5.5 for Ubuntu 24.04 LTS, and libc6 versions ranging from 2.35 to 2.41 for various Ubuntu releases.

[USN-7761-1] PAM vulnerability
[USN-7760-1] GNU C Library vulnerability

Debian 10708 Ubuntu 6935 Arch Linux 920 Published by Philipp Esselbach 0

Steven Barrett has announced the release of Liquorix Linux Kernel 6.16-7, a custom kernel designed to optimize desktop, multimedia, and gaming workloads by leveraging the performance capabilities of Linux Kernel 6.16.8. This kernel replacement boasts various enhancements, including Zen Interactive Tuning, scheduling improvements, and additional features such as High Resolution Scheduling and Compressed Swap. Liquorix kernel 6.16-7 supports a wide range of hardware and is designed to be used as a drop-in replacement for standard distribution kernels, with binary builds available for popular Debian-based distributions and Ubuntu. 

Ubuntu 6935 Published by Philipp Esselbach 0

A series of security vulnerabilities have been discovered in various Linux kernel versions, including Ubuntu 22.04 LTS and 24.04 LTS, affecting systems such as Oracle Cloud, Amazon Web Services (AWS), Google Cloud Platform (GCP), and Raspberry Pi. The vulnerabilities let attackers disrupt services or run unwanted code by taking advantage of a use-after-free issue in how AF_UNIX sockets handle memory cleanup. To resolve these issues, users are advised to update their system to the latest package versions, which can be found on the Ubuntu website, and reboot their computer after the update. Additionally, due to an ABI change, third-party kernel modules may need to be recompiled and reinstalled.

[USN-7758-4] Linux kernel (Oracle) vulnerability
[USN-7758-3] Linux kernel (Real-time) vulnerability
[USN-7758-2] Linux kernel vulnerability
[USN-7758-1] Linux kernel vulnerability