Ubuntu 7041 Published by Philipp Esselbach 0

New advisories warns Ubuntu users about critical vulnerabilities found across various software packages and system kernels that require attention. Vulnerabilities found in tools like Flask and Exiv2 allow remote attackers to leak sensitive information or trigger denial of service conditions on affected systems, while other updates prevent privilege escalation. The detailed instructions provide necessary package updates to correct these issues as well as regressions previously introduced during the initial security patching cycle for snapd and roundcube.

[USN-8104-1] Flask vulnerability
[USN-8102-2] snapd regression
[USN-8106-1] Valkey vulnerabilities
[USN-8098-3] Linux kernel vulnerabilities
[USN-8107-1] Linux kernel (AWS FIPS) vulnerabilities
[USN-8103-1] Exiv2 vulnerabilities
[USN-8097-2] roundcube regression
[USN-8108-1] Bouncy Castle vulnerabilities
[USN-8105-1] FreeRDP vulnerabilities

Ubuntu 7041 Published by Philipp Esselbach 0

Ubuntu Security Notices detail critical vulnerabilities affecting core system software. The majority of these notifications concern kernel vulnerabilities where attackers could manipulate AppArmor profiles or exploit network drivers to escalate privileges on cloud instances. Other affected packages like Vim, libssh, and snapd also contain bugs that allow privilege escalation or denial of service attacks if exploited by local attackers. System administrators must apply the specific package updates listed in the notices immediately to patch these security holes and maintain overall system stability.

[USN-8098-2] Linux kernel (GCP) vulnerabilities
[USN-8093-1] libssh vulnerability
[USN-8101-1] Vim vulnerabilities
[USN-8095-3] Linux kernel (Real-time) vulnerabilities
[USN-8094-2] Linux kernel vulnerabilities
[USN-8096-4] Linux kernel (Real-time) vulnerabilities
[USN-8096-3] Linux kernel vulnerabilities
[USN-8102-1] snapd vulnerability

Ubuntu 7041 Published by Philipp Esselbach 0

Ubuntu released several security advisoriesto patch kernel vulnerabilities affecting AppArmor modules and numerous subsystems across multiple LTS releases. Affected systems require a system reboot following installation because these fixes address critical flaws allowing unprivileged users to escape containers or leak sensitive memory. One advisory reverses a regression in python-cryptography while another fixes cross-site scripting risks found in the Roundcube Webmail interface for multiple Ubuntu versions. Finally, older distributions must upgrade the curl package to prevent credential reuse issues during authentication processes for HTTPS requests.

[USN-8098-1] Linux kernel vulnerabilities
[USN-8087-2] python-cryptography regression
[USN-8097-1] Roundcube Webmail vulnerabilities
[USN-8095-2] Linux kernel (FIPS) vulnerabilities
[USN-8100-1] Linux kernel (NVIDIA) vulnerabilities
[USN-8096-2] Linux kernel (FIPS) vulnerabilities
[USN-8099-1] curl vulnerabilities

Ubuntu 7041 Published by Philipp Esselbach 0

Three separate Ubuntu security notices were published to fix critical vulnerabilities in the Linux Kernel. These updates address hardware drivers and file systems for both newer editions alongside older long term support releases. Security researchers identified that unprivileged local attackers could exploit the AppArmor Linux kernel Security Module to potentially gain elevated privileges or access sensitive data on affected systems. System administrators must update their package versions immediately and reboot because an unavoidable ABI change requires recompiling third party kernel modules you might have installed previously.

[USN-8094-1] Linux kernel vulnerabilities
[USN-8095-1] Linux kernel vulnerabilities
[USN-8096-1] Linux kernel vulnerabilities

Debian 10851 Ubuntu 7041 Published by Philipp Esselbach 0

XanMod has released new kernel versions 6.19.8 and 6.18.18 LTS tailored for Debian-based distributions that need a performance boost over stock builds. These custom kernels feature advanced optimizations like LLVM ThinLTO and Google's BBRv3 TCP congestion control to handle heavy workloads with greater efficiency. While installation is straightforward via APT, users should expect potential DKMS breakages with proprietary drivers like NVIDIA or VirtualBox before rebooting the system. It remains a viable option for enthusiasts willing to troubleshoot module compatibility in exchange for smoother multitasking and improved network throughput.

Debian 10851 Ubuntu 7041 Arch Linux 949 Published by Philipp Esselbach 0

The Liquorix Kernel 6.19-3 release based on Linux Kernel 6.19.8 targets enthusiasts who demand uncompromised responsiveness for interactive systems and low latency compute. It implements major performance tuning changes including Zen Interactive Tuning and optimized disk I/O schedulers to reduce frame time deviations in gaming and A/V production workflows. Users on Debian, Ubuntu, or Arch Linux can install this kernel variant easily through a one-line script that automatically configures dependencies without manual intervention. This update prioritizes system reaction times over maximum throughput or power usage by enabling hard kernel preemption and aggressive CPUFreq optimizations for responsive task scheduling.

Ubuntu 7041 Published by Philipp Esselbach 0

Several security issues were fixed in various software packages on Ubuntu systems, including libpng, GIMP, .NET, python-cryptography, FreeType, util-linux, OpenSSH, Sudo, Go Networking, and go-git. The vulnerabilities could potentially be used by attackers to cause a denial of service, execute arbitrary code, or leak sensitive information.

[USN-8081-1] libpng vulnerabilities
[USN-8082-1] GIMP vulnerabilities
[USN-8085-1] .NET vulnerabilities
[USN-8087-1] python-cryptography vulnerability
[USN-8086-1] FreeType vulnerability
[USN-8091-1] util-linux vulnerability
[USN-8090-2] OpenSSH vulnerabilities
[USN-8092-1] Sudo vulnerability
[USN-8090-1] OpenSSH vulnerabilities
[USN-8089-1] Go Networking vulnerabilities
[USN-8088-1] go-git vulnerabilities

Debian 10851 Ubuntu 7041 Published by Philipp Esselbach 0

XanMod has released kernel versions 6.19.7 and 6.18.17, built with LLVM ThinLTO and enhanced scheduling that can lower CPU usage and improve latency for heavy workloads. Installing the kernel is as easy as adding a signed repository line to APT, updating the package list, and running sudo apt install linux-xanmod-x64v3. Users with NVIDIA, OpenZFS, VirtualBox, or VMware modules should verify driver compatibility first, since some proprietary modules lag behind the new thinlto patches and can cause panics. For those who need guaranteed support for cutting‑edge hardware or legacy systems, the distribution’s stock kernel remains a reliable fallback.

Ubuntu 7041 Published by Philipp Esselbach 0

Ubuntu has released two security notices, USN-8083-1 and USN-8084-1, to address vulnerabilities in GeoPandas and curl packages respectively. The GeoPandas vulnerability allows for SQL injection attacks due to incorrect input handling, while the curl vulnerabilities include issues with connection reuse, OAuth2 bearer token leakage, HTTP proxy credentials reuse, and denial of service or arbitrary code execution. To fix these issues, users should update their system to the latest package versions, which can be found in the provided references. The updates will make all necessary changes to address the security issues.

[USN-8083-1] GeoPandas vulnerability
[USN-8084-1] curl vulnerabilities

Ubuntu 7041 Published by Philipp Esselbach 0

Ubuntu released two security notices, USN-8059-8 and USN-8060-7, to address vulnerabilities in the Linux kernel for NVIDIA systems. The first notice affects Ubuntu 24.04 LTS and 22.04 LTS, while the second one only affects Ubuntu 22.04 LTS. Both notices fix several security issues that could allow an attacker to compromise the system. To correct these issues, users need to update their system to specific package versions and reboot after a standard system update.

[USN-8059-8] Linux kernel (NVIDIA) vulnerabilities
[USN-8060-7] Linux kernel (NVIDIA) vulnerabilities

Ubuntu 7041 Published by Philipp Esselbach 0

Three Ubuntu Security Notices (USN) were released, addressing vulnerabilities in YARA, Apache HTTP Server, and Python. USN-8080-1 fixes several security issues in YARA that could have resulted in denial-of-service attacks or arbitrary code execution for users of Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Meanwhile, USN-7968-2 addresses a regression introduced by the previous update for Apache HTTP Server on Ubuntu 25.10, Ubuntu 24.04 LTS, and Ubuntu 22.04 LTS, which caused a denial-of-service issue with OCSP. Finally, USN-8018-2 fixes regressions in Python that were introduced by the previous update, affecting users of various versions of Ubuntu including 14.04 LTS, 16.04 LTS, 18.04 LTS, 20.04 LTS, and more.

[USN-8080-1] YARA vulnerabilities
[USN-7968-2] Apache HTTP Server regression
[USN-8018-2] Python regression

Ubuntu 7041 Published by Philipp Esselbach 0

Multiple security issues have been discovered affecting various Ubuntu releases. These include vulnerabilities in NSS, Zutty, less, Qt, and Bleach, which could allow attackers to cause denial of service or execute arbitrary code. Updates are available for each affected release, including Ubuntu 14.04 LTS, 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS, through standard system updates.

[USN-8071-2] NSS vulnerability
[USN-8078-1] Zutty vulnerability
[USN-8079-1] less vulnerability
[USN-8076-1] Qt vulnerabilities
[USN-8077-1] Bleach vulnerabilities

Debian 10851 Ubuntu 7041 Arch Linux 949 Published by Philipp Esselbach 0

Liquorix Kernel 6.19-1 has been released, offering a smoother gaming and AV experience by tweaking scheduler parameters and disabling performance-dragging features. Users who tested the previous 6.18 release reported less "jitter" in video editing timelines and improved frame rates while playing competitive titles. The new build includes bug fixes from earlier iterations and can be installed on Debian, Ubuntu, or Arch using a single-liner installer that pulls the package from the Liquorix repository.

Debian 10851 Ubuntu 7041 Arch Linux 949 Published by Philipp Esselbach 0

The latest release of Liquorix Kernel, version 6.18-19, has been made available for Debian, Ubuntu, and Arch Linux distributions, offering improved performance and efficiency through tweaks like Kyber and BFQ schedulers. These changes result in faster UI wake-ups when copying large files or rendering video frames, as well as snappier mouse movement and lower frame-time jitter in fast-paced games. While Liquorix may not be necessary for users with office boxes that rarely leave the desk, those who engage in competitive gaming or audio/video production are likely to notice a significant difference. To install Liquorix on any of these distributions, simply run an installation script provided by the project, which will automatically add the repository and update GRUB.

Debian 10851 Ubuntu 7041 Published by Philipp Esselbach 0

XanMod has released two new kernels, 6.19.6 and 6.18.16 LTS, which offer significant performance improvements for tasks like number crunching and high-resolution video streaming. To install these kernels on Debian or Ubuntu systems, you'll need to add a PGP key and register the XanMod repository; this process involves running two commands in the terminal. After installing the kernel, be sure to reboot your system and verify that it's working correctly by checking the version number in /proc/version; if everything went smoothly, the output should contain "xanmod" followed by the exact version number. Upgrading to XanMod kernels can provide noticeable speed and responsiveness gains for desktops and servers alike, making them a worthwhile upgrade for anyone looking to boost their system's performance.

Ubuntu 7041 Published by Philipp Esselbach 0

Ubuntu Linux has released several security updates, including fixes for the Linux kernel and various other packages. The updates address vulnerabilities in Linux kernels, such as those related to AWS FIPS, Azure FIPS, and regular FIPS configurations. Other affected packages include ImageMagick, PostgreSQL, NSS, QEMU, and GIMP, which have all been updated to patch security issues.

[USN-8070-1] Linux kernel vulnerabilities
[USN-8060-6] Linux kernel (AWS FIPS) vulnerabilities
[USN-8060-5] Linux kernel vulnerabilities
[USN-8070-3] Linux kernel (FIPS) vulnerabilities
[USN-8070-2] Linux kernel vulnerabilities
[USN-8069-1] ImageMagick vulnerabilities
[USN-8074-2] Linux kernel (Azure FIPS) vulnerabilities
[USN-8074-1] Linux kernel (Azure) vulnerabilities
[USN-8059-7] Linux kernel (AWS FIPS) vulnerabilities
[USN-8072-1] PostgreSQL vulnerabilities
[USN-8071-1] NSS vulnerability
[USN-8073-1] QEMU vulnerabilities
[USN-8075-1] GIMP vulnerabilities

Ubuntu 7041 Published by Philipp Esselbach 0

Three Ubuntu Security Notices were issued: USN-7990-6 for Linux kernel (Raspberry Pi) vulnerabilities, USN-8062-2 for curl vulnerabilities, and USN-8068-1 for an Intel Microcode vulnerability. The notices affect various versions of Ubuntu, including Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, and others. To address the vulnerabilities, users need to update their systems to specific package versions, which can be found in the security notices, and then reboot their computers. Additionally, third-party kernel modules may require recompilation and reinstalling after the updates.

[USN-7990-6] Linux kernel (Raspberry Pi) vulnerabilities
[USN-8062-2] curl vulnerabilities
[USN-8068-1] Intel Microcode vulnerability

Ubuntu 7041 Published by Philipp Esselbach 0

Ubuntu has issued security notices for vulnerabilities in Mailman and Git. A vulnerability in Mailman, discovered in 2021, allowed remote list members or moderators to potentially set new admin passwords or make other changes, which has been fixed by updating to version 1:2.1.29-1ubuntu3.1+esm2 on Ubuntu 20.04 LTS and version 1:2.1.20-1ubuntu0.6+esm3 on Ubuntu 16.04 LTS. Another notice addressed a regression in Git introduced by a previous update, which allowed an attacker to run arbitrary commands; this has been fixed by updating to version 1:2.17.1-1ubuntu0.18+esm8 on Ubuntu 18.04 LTS. These updates are available through a standard system update and can also be found with Ubuntu Pro

[USN-8067-1] Mailman vulnerability
[USN-5376-6] Git regression

Debian 10851 Ubuntu 7041 Arch Linux 949 Published by Philipp Esselbach 0

The new Liquorix Kernel 6.18-17 brings together the upstream Linux 6.18.15 tree with tweaks aimed at improving responsiveness and gaming performance, while sacrificing some throughput and power efficiency. This community-maintained kernel keeps classic Zen patches and adds preemptible RCU implementation, resulting in faster mouse clicks, smoother video rendering, and steadier game frames under mixed workloads. The release also includes key tuning changes such as shrinking scheduling timeslice to 2 ms, adjusting CPU-frequency governor settings, and enabling background hugepage reclamation. For those looking for low jitter and fast wake-ups, Liquorix Kernel 6.18-17 is a solid choice, but users prioritizing battery life or stability under exotic hardware may want to stick with the distro kernel.

Debian 10851 Ubuntu 7041 Published by Philipp Esselbach 0

The XanMod kernel release 6.8.15 brings several improvements, including ThinLTO, better block I/O handling, and a built-in BBRv3 TCP congestion controller. To get this new kernel running on Debian or Ubuntu while keeping graphics working, you need to trust the upstream signing key and add the XanMod repository to your system. The process involves updating the package index, installing the main XanMod package, and installing any required external modules or drivers like NVIDIA. After installation, a quick sanity check can be performed by reading /proc/version to confirm that the new kernel is running, and troubleshooting may involve verifying GRUB's default entry and rebuilding custom packages like OpenZFS DKMS.