U
CVE-2026-109518 APT vulnerability fixes available
Fixes are available in Ubuntu for the CVE-2026-109518 vulnerability affecting APT.
U
Never lose robot data again: automatic ROS 2 bag recording and upload
If you work with robots, perhaps you’ve come up against a common, but annoying situation: the one field run that mattered is the one nobody recorded. Or it was recorded but the ROS 2 bag (a recording of ROS 2 topics) is sitting in the robot’s storage, at a customer site, three time zones away. […]
U
Fixes available in -proposed pocket for CVE-2026-98432
Fixes for the CVE-2026-98432 Linux kernel vulnerability are available for Ubuntu.
U
php2shell (CVE-2026-109618 and CVE-2026-109619) – PHP critical vulnerability fixes available
Introduction Two critical security vulnerabilities affecting PHP have been identified that result in unauthenticated remote code execution (RCE) for any PHP application. The vulnerabilities have been assigned the CVE-2026-109618 and CVE-2026-109619 identifiers, but are also referred to using the php2shell nickname. Ubuntu has released fixes for the affected packages for all supported releases. The…
U
eMudhra CA compromise fixes available
Introduction The private keys of the eMudhra Certificate Authority (CA) have been demonstrated on 20 October 2026 to have been compromised. The Ubuntu Security Team has released updates to the system PKI (Public Key Infrastructure) root CA store in the ca-certificates package. While the eMudhra CA is not directly trusted as a root on Ubuntu, […]
U
From personas to archetypes: a living, shared understanding of the people we build for (Part 1 of 2)
Personas are easy to create but often ignored. This is the first of two posts about how we developed archetypes to keep our personas fresh at Canonical. These are shared, machine-readable descriptions of our users that multiple teams and their agents can use.
U
How to lower Android™ development costs by removing hardware from the critical path
As an Android developer, you’ll almost always have access to a device. However, when handling hardware, the device that you actually need often happens to be already in use, set up incorrectly, stored in another lab, or simply waiting to be reset. That’s when Android development costs start to increase. Because it’s not just the […]
U
Canonical releases Ubuntu 26.10 Stonking Stingray
The latest interim release of Ubuntu previews privacy conscious speech-to-text, enables post-quantum package signing, completes the rollout of Rust coreutils, and improves enterprise identity integration. October 15, 2026 Today Canonical announced the release of Ubuntu 26.10, codenamed “Stonking Stingray,” available to download and install from ubuntu.com/download. Building on previous releases, U…
U
Fixes available for CVE-2026-92392 and other curl vulnerabilities
Introduction On 7 October 2026, Daniel Stenberg published a blog post describing a plan to release a new version of curl on 14 October 2026 in order to address 22 known security vulnerabilities. These vulnerabilities have varying severities, with a single vulnerability assessed as high (CVE-2026-92392), while the others have a low or medium severity. […]
U
Myna speech-to-text is now available as a technology preview
A few months ago, we introduced Myna, our project to bring private, local speech-to-text dictation to Ubuntu Desktop. Named after the speech-mimicking myna bird, Myna is an optional Ubuntu 26.10 feature that offers real-time visual feedback during speech recognition. Since then, Myna has grown into something you can install and use on your desktop. Today, […]
U
What’s new in security for Ubuntu 26.10?
Ubuntu 26.10 “Stonking Stingray” arrives at a time when AI tools are accelerating vulnerability discovery. Patching faster is essential, but the resilience of the underlying operating system must also limit what an attacker can achieve before a fix is available. To respond to this new threat landscape, Ubuntu 26.10 continues the work of previous releases […]
U
Devpack for Rust: Zero to Rust in seconds
One of the best things about Rust is how easy it is to get started. It takes just a second to snap install rustup; rustup default stable, and from there you have a whole toolchain ready to compile Rust code. But with this ease of use comes a giant ecosystem, and with this giant ecosystem […]
U
Securing open source software dependencies in the public cloud
Building stable and secure software requires understanding build systems and having a plan for vulnerabilities in your software dependencies.
U
Confidential computing in the real world: finding your use case
Confidential computing is essential when an organization needs to process sensitive data on infrastructure where the operators should not have access to it. You might have seen this requirement before: it appears commonly in public cloud deployments (where organizations want to prevent the cloud vendor seeing data), but also when hospitals evaluate proprietary AI models […]
U
Android™ belongs in your CI/CD pipeline
How on-demand Android environments turn validation into a repeatable pipeline stage In the first article, we looked at automation: how Android environments can be created and managed programmatically. In the second, we looked at scaling: how shared infrastructure can make those environments available to more developers, tests, and workloads. This third article looks at the […]
U
Realtime transaction fraud detection – with an LLM?
Conversational AI with a chatbot is great for drafting emails or debugging code, but it’s less ideal for real-time application middleware. If you’re trying to inspect a financial transaction for potential fraud in the middle of a checkout loop, you don’t need an LLM to write you an essay about why a credit card transaction […]
U
Upgrade your desktop: Ubuntu 26.04.1 LTS is now available
Whether you’re a first-time Linux user, experienced developer, academic researcher, or enterprise administrator, Ubuntu 26.04 LTS Resolute Raccoon is the best way to benefit from the latest advancements in the Linux ecosystem on a stable foundation. As with all LTS releases of Ubuntu, Ubuntu 26.04.1 LTS represents the consolidation of fixes and improvements identified during […]
U
Creating a private 5G network
As private 5G evolves from experimentation into production readiness, its success hinges on a fundamental architectural shift: replacing heavyweight, legacy virtualization stacks with agile, softwarized infrastructure that reduces operational expenditure (OpEx) and accelerates service delivery.
U
How a missing kernel flag broke FIPS-certified containers in managed Kubernetes
A customer building a FedRAMP-compliant deployment found that Ubuntu Pro 22.04 FIPS container images were silently failing on standard, mainline Linux kernels, the kind used by managed Kubernetes environments such as AWS EKS and Fargate. The fix required a patch that preserved FIPS compliance without triggering months of recertification. This post explains what happened, why […]
U
Fine tune your own custom LLM with Canonical Charmed Kubeflow and Feast
So you want your own pet LLM huh? Knowing where to start can be quite tricky, so luckily for you I’ve put together this end-to-end guide. It’ll get you not just started; you’ll end with a fully working chatbot that you’ve fine tuned on the dataset `nampdn-ai/tiny-webtext`, which is a training dataset designed to improve […]
U
Scaling Android™ development without scaling hardware
How shared Android capacity helps engineering teams move beyond fixed device labs In the first blog of this series, we discussed how programmable Android environments can replace manual device preparation with a repeatable lifecycle. A workflow requests an environment with a predefined configuration, executes the required task, collects the results, and releases the resources once […]
U
Attach an Ubuntu Pro subscription to your AWS Image Builder image
We are pleased to announce that you can now attach an Ubuntu Pro subscription directly to any base image in AWS Image Builder, allowing you to create enterprise-grade custom images from the get go.
U
Beyond the 10-year mark: Extending Ubuntu Pro 16.04 LTS security coverage
A decade ago, Canonical launched Ubuntu 16.04 LTS (codenamed “Xenial Xerus”). As a Long-Term Support (LTS) release, it comes with 5 years of standard security coverage, which is doubled to a total of 10 years through Expanded Security Maintenance (ESM) for users with an Ubuntu Pro subscription.
U
Android™ development shouldn’t start with a physical device
How on-demand Android environments lay the foundation for Android engineering Software engineering has evolved dramatically over the last decade. Development environments that once depended on dedicated hardware have become resources that can be provisioned, configured, and removed on demand. Infrastructure is now expected to be reproducible, automated, and integrated into continuous development w…
U
Bring Zenoh to ROS 2 with snaps
ROS 2 gives robotics developers the freedom to choose the middleware that fits their system. As a communication protocol for ROS, Zenoh has gained strong traction. It delivers proven performance and stability while giving developers explicit control over node discovery. Zenoh is a lightweight, high-performance communication protocol designed for robotics and distributed systems. Supporting publish…
U
Evolution of the RISC-V ISA. What next after RVA23?
Introduction Releasing the RVA23 specification was a major milestone for the RISC-V community. While it provides an excellent baseline for deployment at scale, innovation continues to take place and we will see further extensions and profiles over the coming years. Upcoming innovations fall into a couple of key areas In this blog, we’ll look at […]
U
Cut bloat, not features
Accelerating software delivery with minimal OCI images For Independent Software Vendors (ISVs), delivering containerized applications to enterprise clients often means navigating a difficult trade-off between minimal image size and accurate security visibility. Traditional approaches can leave development teams battling severe CVE noise or, conversely, missing critical vulnerabilities entirely due…
U
Ubuntu now certified on Qualcomm Dragonwing™ IQ-8275
Sep 8, 2026 – Canonical and Qualcomm Technologies, Inc. announce the general availability of certified Ubuntu 24.04 LTS images for the Qualcomm Dragonwing™ IQ-8275 Evaluation Kit (EVK). Offering industrial-grade efficiency, this release provides production-ready software designed for building high-performance edge AI applications. For developers, system integrators, and OEMs, Qualcomm Dragonwing I…
U
Grace on the currents: Stonking Stingray
When the codename for Ubuntu 26.10 was announced, I suspect there was a measurable surge in users searching for the definition of “stonking” across search engines and the various popular AI chatbots. As it so happens, the rather silly sounding word is actually a bit of British slang that denotes “something of considerable size, or […]
U
How we create a Canonical Academy exam
Open source provides the world with access to cutting-edge software, and the learning that comes with it. But how do you validate someone’s skills in an open ecosystem? Canonical Academy is a highly rigorous, job-focused qualification platform designed to empower individuals and enterprises with industry-recognized credentials. The platform addresses a critical gap in tech: validating […]