USN-8955-1 Fixes 5 Nginx CVEs. 24.04 Stays on 1.24.0. USN-8955-1 patches five Nginx security flaws across Ubuntu releases. Here is how to audit configs, apply package updates, and verify server stability. troubleshooting
20.04's PHP Is 7.4.3. Not 7.4.33. USN-8948-2 puts Ubuntu 20.04 php7.4 at 7.4.3-4ubuntu2.29+esm5. The 7.4.33 build is ondrej, and it is not published for 20.04. server-config
USN-8949-1 Names Two CVEs. The Roundup Says Three. USN-8949-1 names CVE-2026-101258 and CVE-2026-103226. LinuxSecurity's lede says three Ghostscript flaws. libgs10 is 24.04; libgs9 is 22.04. linux
USN-8948-1 Fixes PHP 8.3.6. The Expected Build Is 8.3.36. USN-8948-1 lists php8.3 8.3.6-0ubuntu0.24.04.13 as fixed. Beaumont's expected upstream build, which PHP had not confirmed, was 8.3.36. security
Ubuntu 26.10 Says Linux 7.3. The Package Is rc6. Phoronix and OMG Ubuntu say 26.10 ships Linux 7.3. Linuxiac and Heise say the kernel package is 7.3-rc6. Check uname before you trust the headline. linux
USN-8932-1 Lists curl Versions. The Blog Says Pending. USN-8932-1, dated 14 October 2026, lists fixed curl versions for 20.04, 22.04, and 24.04. Ubuntu's curl blog table still says those releases are update pending. security
USN-8933-1 Is RabbitMQ. The Go Fix Is Not. USN-8933-1 is rabbitmq-server, and the version changes with the release. USN-8883-2 is golang-1.23 on 22.04 only. Restart is a separate line. server-config
USN-8920-1 Is a 5.4 Kernel. The OEM Fix Is Not. USN-8920-1 is a 5.4 kernel for 20.04 and 18.04. The 6.17 OEM fix is USN-8911-1. The three October notices do not share a CVE. linux
NGINX Upgraded. The Brotli Module Did Not. A held Brotli module built for 1.29.8 fails nginx -t against 1.31.5. APT still upgrades NGINX if the ABI label froze at 1.25.0. server-config
Debian's 1,313 Kernel CVEs Are a Batch, Not 1,313 Fires Debian 13's Sept. 29 kernel update fixes 1,313 CVEs in 6.12.111-1. Ubuntu's USN-8816-4 is a 101-CVE GKE backlog. Reboot, then check freerdp. security
CVE-2026-80521: Check the Kernel, Not Docker CVE-2026-80521 is a host-kernel bug, CVSS 7.8, and Ubuntu has not shipped a fix for the vulnerable packages. Match the package name before you patch Docker. docker
Ubuntu 26.10 Snapshot 4: Linux 7.2, and cp Is Finally Rust Snapshot 4 ships Linux 7.2. Draft notes say uutils now covers cp, mv, and rm. Test it in a VM. Leave 26.04 LTS on GNU until backup scripts run. linux
Fragnesia Is a Host Breakout. If Your GKE Nodes Are Ubuntu, Read the Bulletin CVE-2026-46300 lets an unprivileged process inside a container reach root on the host. Google says Standard plus Ubuntu is in. COS, Autopilot, and GKE Sandbox are out. Patch versions are on GCP-2026-033. docker
Ubuntu 24.04.5 Ships Linux 7.0. rc2 of 7.3 Is Already Loud Canonical's fifth Noble point release puts Linux 7.0 on the install media. Torvalds called 7.3-rc2 unusually fat and joked about AI. Patch the LTS image you actually run. Do not confuse it with the mainline circus. linux
Automating Linux Server Hardening with CIS Benchmarks: Stop Doing This Manually The CIS benchmarks define over 200 security controls for a typical Linux server. Running through them manually takes hours and guarantees you'll miss something. Here's how to automate the entire process. server-config
Nginx HTTP/3 with QUIC on Ubuntu 24.04: Complete Configuration Guide Step-by-step guide to configuring Nginx with HTTP/3 and QUIC support on Ubuntu 24.04 LTS, including TLS 1.3, UDP listeners, and performance optimization. server-config
Risk-Based Patch Management on Ubuntu Servers: A Practical Guide for 2026 Configure automated patch management with risk-based prioritization on Ubuntu 26.04 LTS. Align with CISA BOD 26-04 and KEV catalog best practices. server-config
PostgreSQL Performance Tuning on Ubuntu: Configuration Parameters That Matter A hands-on guide covering configuration, troubleshooting, and best practices for postgresql performance tuning on ubuntu - configuration parameters that matter. server-config
Ubuntu 26.04 LTS Preview: What's New and Should You Upgrade? Ubuntu 26.04 LTS 'Noble Numbat' preview covering new features, kernel updates, performance improvements, and upgrade recommendations for server administrators. linux