Three separate Ubuntu security notices were published to fix critical vulnerabilities in the Linux Kernel. These updates address hardware drivers and file systems for both newer editions alongside older long term support releases. Security researchers identified that unprivileged local attackers could exploit the AppArmor Linux kernel Security Module to potentially gain elevated privileges or access sensitive data on affected systems. System administrators must update their package versions immediately and reboot because an unavoidable ABI change requires recompiling third party kernel modules you might have installed previously.
[USN-8094-1] Linux kernel vulnerabilities
[USN-8095-1] Linux kernel vulnerabilities
[USN-8096-1] Linux kernel vulnerabilities
XanMod has released new kernel versions 6.19.8 and 6.18.18 LTS tailored for Debian-based distributions that need a performance boost over stock builds. These custom kernels feature advanced optimizations like LLVM ThinLTO and Google's BBRv3 TCP congestion control to handle heavy workloads with greater efficiency. While installation is straightforward via APT, users should expect potential DKMS breakages with proprietary drivers like NVIDIA or VirtualBox before rebooting the system. It remains a viable option for enthusiasts willing to troubleshoot module compatibility in exchange for smoother multitasking and improved network throughput.
The Liquorix Kernel 6.19-3 release based on Linux Kernel 6.19.8 targets enthusiasts who demand uncompromised responsiveness for interactive systems and low latency compute. It implements major performance tuning changes including Zen Interactive Tuning and optimized disk I/O schedulers to reduce frame time deviations in gaming and A/V production workflows. Users on Debian, Ubuntu, or Arch Linux can install this kernel variant easily through a one-line script that automatically configures dependencies without manual intervention. This update prioritizes system reaction times over maximum throughput or power usage by enabling hard kernel preemption and aggressive CPUFreq optimizations for responsive task scheduling.
Several security issues were fixed in various software packages on Ubuntu systems, including libpng, GIMP, .NET, python-cryptography, FreeType, util-linux, OpenSSH, Sudo, Go Networking, and go-git. The vulnerabilities could potentially be used by attackers to cause a denial of service, execute arbitrary code, or leak sensitive information.
[USN-8081-1] libpng vulnerabilities
[USN-8082-1] GIMP vulnerabilities
[USN-8085-1] .NET vulnerabilities
[USN-8087-1] python-cryptography vulnerability
[USN-8086-1] FreeType vulnerability
[USN-8091-1] util-linux vulnerability
[USN-8090-2] OpenSSH vulnerabilities
[USN-8092-1] Sudo vulnerability
[USN-8090-1] OpenSSH vulnerabilities
[USN-8089-1] Go Networking vulnerabilities
[USN-8088-1] go-git vulnerabilities
XanMod has released kernel versions 6.19.7 and 6.18.17, built with LLVM ThinLTO and enhanced scheduling that can lower CPU usage and improve latency for heavy workloads. Installing the kernel is as easy as adding a signed repository line to APT, updating the package list, and running sudo apt install linux-xanmod-x64v3. Users with NVIDIA, OpenZFS, VirtualBox, or VMware modules should verify driver compatibility first, since some proprietary modules lag behind the new thinlto patches and can cause panics. For those who need guaranteed support for cutting‑edge hardware or legacy systems, the distribution’s stock kernel remains a reliable fallback.
Ubuntu has released two security notices, USN-8083-1 and USN-8084-1, to address vulnerabilities in GeoPandas and curl packages respectively. The GeoPandas vulnerability allows for SQL injection attacks due to incorrect input handling, while the curl vulnerabilities include issues with connection reuse, OAuth2 bearer token leakage, HTTP proxy credentials reuse, and denial of service or arbitrary code execution. To fix these issues, users should update their system to the latest package versions, which can be found in the provided references. The updates will make all necessary changes to address the security issues.
[USN-8083-1] GeoPandas vulnerability
[USN-8084-1] curl vulnerabilities
Ubuntu released two security notices, USN-8059-8 and USN-8060-7, to address vulnerabilities in the Linux kernel for NVIDIA systems. The first notice affects Ubuntu 24.04 LTS and 22.04 LTS, while the second one only affects Ubuntu 22.04 LTS. Both notices fix several security issues that could allow an attacker to compromise the system. To correct these issues, users need to update their system to specific package versions and reboot after a standard system update.
[USN-8059-8] Linux kernel (NVIDIA) vulnerabilities
[USN-8060-7] Linux kernel (NVIDIA) vulnerabilities
Three Ubuntu Security Notices (USN) were released, addressing vulnerabilities in YARA, Apache HTTP Server, and Python. USN-8080-1 fixes several security issues in YARA that could have resulted in denial-of-service attacks or arbitrary code execution for users of Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Meanwhile, USN-7968-2 addresses a regression introduced by the previous update for Apache HTTP Server on Ubuntu 25.10, Ubuntu 24.04 LTS, and Ubuntu 22.04 LTS, which caused a denial-of-service issue with OCSP. Finally, USN-8018-2 fixes regressions in Python that were introduced by the previous update, affecting users of various versions of Ubuntu including 14.04 LTS, 16.04 LTS, 18.04 LTS, 20.04 LTS, and more.
[USN-8080-1] YARA vulnerabilities
[USN-7968-2] Apache HTTP Server regression
[USN-8018-2] Python regression
Multiple security issues have been discovered affecting various Ubuntu releases. These include vulnerabilities in NSS, Zutty, less, Qt, and Bleach, which could allow attackers to cause denial of service or execute arbitrary code. Updates are available for each affected release, including Ubuntu 14.04 LTS, 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, and 24.04 LTS, through standard system updates.
[USN-8071-2] NSS vulnerability
[USN-8078-1] Zutty vulnerability
[USN-8079-1] less vulnerability
[USN-8076-1] Qt vulnerabilities
[USN-8077-1] Bleach vulnerabilities
Liquorix Kernel 6.19-1 has been released, offering a smoother gaming and AV experience by tweaking scheduler parameters and disabling performance-dragging features. Users who tested the previous 6.18 release reported less "jitter" in video editing timelines and improved frame rates while playing competitive titles. The new build includes bug fixes from earlier iterations and can be installed on Debian, Ubuntu, or Arch using a single-liner installer that pulls the package from the Liquorix repository.
The latest release of Liquorix Kernel, version 6.18-19, has been made available for Debian, Ubuntu, and Arch Linux distributions, offering improved performance and efficiency through tweaks like Kyber and BFQ schedulers. These changes result in faster UI wake-ups when copying large files or rendering video frames, as well as snappier mouse movement and lower frame-time jitter in fast-paced games. While Liquorix may not be necessary for users with office boxes that rarely leave the desk, those who engage in competitive gaming or audio/video production are likely to notice a significant difference. To install Liquorix on any of these distributions, simply run an installation script provided by the project, which will automatically add the repository and update GRUB.
XanMod has released two new kernels, 6.19.6 and 6.18.16 LTS, which offer significant performance improvements for tasks like number crunching and high-resolution video streaming. To install these kernels on Debian or Ubuntu systems, you'll need to add a PGP key and register the XanMod repository; this process involves running two commands in the terminal. After installing the kernel, be sure to reboot your system and verify that it's working correctly by checking the version number in /proc/version; if everything went smoothly, the output should contain "xanmod" followed by the exact version number. Upgrading to XanMod kernels can provide noticeable speed and responsiveness gains for desktops and servers alike, making them a worthwhile upgrade for anyone looking to boost their system's performance.
Three Ubuntu Security Notices were issued: USN-7990-6 for Linux kernel (Raspberry Pi) vulnerabilities, USN-8062-2 for curl vulnerabilities, and USN-8068-1 for an Intel Microcode vulnerability. The notices affect various versions of Ubuntu, including Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, and others. To address the vulnerabilities, users need to update their systems to specific package versions, which can be found in the security notices, and then reboot their computers. Additionally, third-party kernel modules may require recompilation and reinstalling after the updates.
[USN-7990-6] Linux kernel (Raspberry Pi) vulnerabilities
[USN-8062-2] curl vulnerabilities
[USN-8068-1] Intel Microcode vulnerability
Ubuntu has issued security notices for vulnerabilities in Mailman and Git. A vulnerability in Mailman, discovered in 2021, allowed remote list members or moderators to potentially set new admin passwords or make other changes, which has been fixed by updating to version 1:2.1.29-1ubuntu3.1+esm2 on Ubuntu 20.04 LTS and version 1:2.1.20-1ubuntu0.6+esm3 on Ubuntu 16.04 LTS. Another notice addressed a regression in Git introduced by a previous update, which allowed an attacker to run arbitrary commands; this has been fixed by updating to version 1:2.17.1-1ubuntu0.18+esm8 on Ubuntu 18.04 LTS. These updates are available through a standard system update and can also be found with Ubuntu Pro
[USN-8067-1] Mailman vulnerability
[USN-5376-6] Git regression
The new Liquorix Kernel 6.18-17 brings together the upstream Linux 6.18.15 tree with tweaks aimed at improving responsiveness and gaming performance, while sacrificing some throughput and power efficiency. This community-maintained kernel keeps classic Zen patches and adds preemptible RCU implementation, resulting in faster mouse clicks, smoother video rendering, and steadier game frames under mixed workloads. The release also includes key tuning changes such as shrinking scheduling timeslice to 2 ms, adjusting CPU-frequency governor settings, and enabling background hugepage reclamation. For those looking for low jitter and fast wake-ups, Liquorix Kernel 6.18-17 is a solid choice, but users prioritizing battery life or stability under exotic hardware may want to stick with the distro kernel.
The XanMod kernel release 6.8.15 brings several improvements, including ThinLTO, better block I/O handling, and a built-in BBRv3 TCP congestion controller. To get this new kernel running on Debian or Ubuntu while keeping graphics working, you need to trust the upstream signing key and add the XanMod repository to your system. The process involves updating the package index, installing the main XanMod package, and installing any required external modules or drivers like NVIDIA. After installation, a quick sanity check can be performed by reading /proc/version to confirm that the new kernel is running, and troubleshooting may involve verifying GRUB's default entry and rebuilding custom packages like OpenZFS DKMS.
A security issue affecting Git has been identified in Ubuntu 22.04 LTS and 20.04 LTS. The problem arose from a regression introduced by USN-5376-4, which incorrectly handled certain repository paths in platforms with multiple users support. An attacker could potentially exploit this vulnerability to run arbitrary commands. To correct the issue, update your system to the latest package versions: Ubuntu 22.04 LTS should have git version 1:2.34.1-1ubuntu1.17 and Ubuntu 20.04 LTS should have git version 1:2.25.1-1ubuntu3.14+esm5.
[USN-5376-4] Git regression
[USN-5376-5] Git regression
XanMod has released its latest kernel, version 6.19.4, which brings improvements such as LLVM ThinLTO and aggressive CPU-level tweaks that can enhance download speeds and overall system performance. The new build also includes an all-new BBRv3 congestion engine and a scx scheduler extension for handling heavy CPU loads more efficiently. However, users who rely on NVIDIA's proprietary driver or other specific software may experience issues with the latest kernel, requiring them to run certain commands after booting to confirm module loading. To install XanMod 6.19.4, users can follow the provided instructions, which involve adding a repository, refreshing APT, and rebooting into the new kernel.
Multiple Ubuntu security notices were issued, addressing vulnerabilities in various packages, including rlottie, Authlib, Linux kernel, and Rack. The notices affect several Ubuntu releases, including 25.10, 24.04 LTS, 22.04 LTS, and 20.04 LTS, and provide instructions for updating to the latest package versions to fix the issues. The vulnerabilities range from denial-of-service attacks and arbitrary code execution to authentication bypass and privilege escalation. Users are advised to update their systems as soon as possible to prevent potential security risks.
[USN-8058-1] rlottie vulnerabilities
[USN-8065-1] Authlib vulnerabilities
[USN-8059-6] Linux kernel vulnerabilities
[USN-8066-1] Rack vulnerabilities
