News
NewsUSN-8880-1: FreeRDP flaws, update on Ubuntu 24.04 and 26.04 LTS
Ubuntu fixes multiple vulnerabilities in FreeRDP: risk of data leaks, crashes or code execution. Update to freerdp3 3.32.1.
NewsUSN-8881-1: DoS flaw in FreeType, update libfreetype6 on Ubuntu
A malicious font file can cause FreeType to consume excessive CPU and memory. Ubuntu has released patches for 22.04, 24.04 and 26.04 LTS.
NewsUSN-8882-1: ten Tesseract flaws, some allow code execution
Ubuntu fixes ten CVEs in Tesseract linked to malicious .traineddata files: some allow arbitrary code execution.
NewsUSN-8869-1: RabbitMQ Server flaw, denial of service risk via HTTP/2
Ubuntu fixes a flaw in RabbitMQ Server (CVE-2026-59248) that allows denial of service via malformed HTTP/2 headers. A service restart is required.
NewsUSN-8876-1: dozens of flaws in linux-azure-fde kernel, reboot required
Ubuntu fixes dozens of CVEs in the linux-azure-fde kernel for Azure CVM machines on 22.04 LTS. Reboot and recompilation of third-party modules required.
NewsUSN-8877-1: dozens of linux-gcp kernel flaws, reboot and module rebuild required
Ubuntu fixes dozens of CVEs in the Google Cloud Platform kernel for 22.04 LTS. ABI bump: a reboot and rebuilding of third-party modules is required.
NewsUSN-8879-1: dozens of flaws in the linux-oracle kernel on Ubuntu 20.04 LTS
Ubuntu fixes numerous vulnerabilities in the linux-oracle 5.15 kernel for Ubuntu 20.04 LTS. Reboot required, along with recompilation of third-party modules.
NewsUSN-8875-1: Multiple Linux Kernel Flaws, ABI Bump and Mandatory Reboot
Ubuntu fixes multiple vulnerabilities in the Linux kernel for 22.04 and 20.04 LTS. ABI change: a reboot is required, along with recompilation of third-party modules.
NewsUSN-8873-1: Two Unbound Flaws, Update to Patched Versions
Ubuntu fixes two vulnerabilities in Unbound (CVE-2026-81642, CVE-2026-82717) that allow DoS or arbitrary code execution.
NewsUSN-8870-1: authorisation flaw in OpenStack Aodh and Watcher on Ubuntu
Ubuntu fixes CVE-2026-76878: missing project scoping in Aodh and missing authorisation in the Watcher webhook. Update and restart the services.
NewsCloudflare's Birthday Week 2026 Round-up: 46 Announcements in Five Days
Cloudflare wraps up its 16th birthday with 46 announcements: a public CA in the works, new Traces, unified observability and continued progress on enterprise parity.
NewsFrom RDS to EC2: migrating a 500 GB MariaDB database with 10 minutes of downtime
luroConnect documents the migration of a MariaDB database for a Magento store from Amazon RDS to EC2, cutting the bill by over 80% with guaranteed rollback.
NewsUSN-8865-1: four CVEs in EDK II, OVMF patch for all Ubuntu LTS releases
Canonical has published USN-8865-1: four vulnerabilities in EDK II (UEFI firmware for VMs) fixed with new versions of ovmf and qemu-efi across all Ubuntu LTS releases.
NewsUSN-8867-1: Ceph RGW vulnerability patched for Ubuntu 18.04-26.04 LTS
Canonical has published USN-8867-1: a bug in Ceph's S3 gateway allowed unsigned x-amz- headers to be forced through. Patches are available for all LTS releases.
NewsUSN-8868-1: Eight CVEs in LibreOffice, Patches for Ubuntu 22.04, 24.04 and 26.04 LTS
Ubuntu has published USN-8868-1: eight vulnerabilities in LibreOffice, some carrying a risk of arbitrary code execution. An update is available for 22.04, 24.04 and 26.04 LTS.
NewsUSN-8851-3: linux-azure 5.4 kernel patch for Ubuntu 18.04 LTS, reboot required
Canonical fixes three CVEs in the linux-azure 5.4 kernel for Ubuntu 18.04 LTS: a reboot and rebuild of third-party modules are required.
NewsUSN-8871-1: Ubuntu kernel patch for Raspberry Pi, requires reboot and module recompilation
Canonical fixes around twenty CVEs in the linux-raspi kernel for Ubuntu 22.04 LTS. A reboot and recompilation of third-party modules are required.
NewsBTR (CVE-2026-64507, CVE-2026-64508): Spectre v2 kernel flaw, CloudLinux patch status
CloudLinux confirms: all versions except CL7 are exposed to BTR, a Spectre v2 variant that reads kernel memory. No mitigation available, fix not yet released.
NewsWhat's changed: licensing, patches and pricing this week
Monday round-up: January's WebPros price hike is still causing a stir, Workers Logs pricing changes on 1 December, and PHP 8.2 reaches EOL on 31 December.
NewsCloudflare unifies logs and traces: new usage-based pricing from 1 December 2026
Cloudflare brings logs, traces, analytics and Logpush together into a single platform with per-GB pricing, effective from 1 December 2026.