UWN Issue 952 July 5-11, 2026.

Welcome to the Ubuntu Weekly Newsletter, Issue 952 for the week of July 5 - 11, 2026.

In this Issue

  • Ubuntu 25.10 (“Questing Quokka”) reached End of Life on 9 July 2026
  • Public Exploit Turns 15-Year Linux Kernel Flaw Into 5-Second Root Attack
  • Google pays $250K for Linux vulnerability allowing guest VM escapes
  • Welcome New Members and Developers
  • Ubuntu Stats
  • Hot in Support
  • Other Meeting Reports
  • Upcoming Meetings and Events
  • Ubuntu Circles! (LoCo) News
  • Ubuntu @ KDE Akademy 2026
  • UbuCon Latin America 2026
  • OpenPrinting News: Opportunity Open Source 4.0 - Call for Proposals extended to end of July
  • Ubuntu Circles! (LoCo) Events
  • Workshop 0.9.3 has been released
  • Run Workshop actions in a CI pipeline
  • The 2026.06.22 SRU Cycle is started
  • Call for testing: ubuntu-lint
  • What Say You
  • Lubuntu is officially in my .iso roster.
  • Canonical News
  • In the Press
  • In the Blogosphere
  • In Other News
  • Featured Audio and Video
  • Updates and Security for Ubuntu 22.04, 24.04, 25.10, and 26.04
  • And much more!

General Community News

Ubuntu 25.10 (“Questing Quokka”) reached End of Life on 9 July 2026

Utkarsh Gupta of the Ubuntu Release team has announced the End of Life for Ubuntu 25.10: July 9, 2026. We’re reminded of some facts of this release including when it was released, how to upgrade to Ubuntu 26.04 LTS, and more.

https://discourse.ubuntu.com/t/ubuntu-25-10-questing-quokka-reached-end-of-life-on-9-july-2026/85017

Public Exploit Turns 15-Year Linux Kernel Flaw Into 5-Second Root Attack

John Bright tells us of a ‘working exploit’ that has existed since 2011, and is now referred to as GhostLock; CVE-2026-43499. We’re told it was discovered by Nebula Security’s VEGA team, given a link to the write up, and told of Google’s kernelCTL bug bounty award for the submission. We’re told a fix has been made, and is slowly rolling out to distributions. A decent discussion of the flaw and its potential risk to our systems is provided, and finally a FAQ.

https://www.techtimes.com/articles/319914/20260708/public-exploit-turns-15-year-linux-kernel-flaw-5-second-root-attack.htm

Google pays $250K for Linux vulnerability allowing guest VM escapes

Dan Goodlin talks about two vulnerabilities, namely CVE-2026-53359 (Januscape) and CVE-2026-43499 [GhostLock, see prior article too]. Dan discusses the vulnerabilities and how they can be used to attack our system, Google’s award for discoverers (Hyunwoo Kim & Nebula Security VEGA team), and ends telling us the Linux kernel has been patched, so check our distributions for fixes to apply.

https://arstechnica.com/security/2026/07/high-severity-guest-vm-escape-is-1-of-2-linux-vulnerabilities-to-surface-this-week/

Welcome New Members and Developers

Congratulations to these contributors!

Ubuntu Stats

Bug Stats

  • Open: 136893 (+63)
  • Critical: 305 (+1)
  • Unconfirmed: 72670 (+15)

As always, the Bug Squad needs more help. If you want to get started, please see: https://wiki.ubuntu.com/BugSquad

Translations

  • Swedish: 99.99% (35/1465)
  • Albanian: 98.85% (4035/6)
  • Ukrainian: 89.37% (37343/1703)
  • German: 87.16% (45099/348)
  • French: 85.78% (49949/6406)

Hot in Support

Ubuntu Community Discourse Trending Top 5 Threads

Find more support at: https://discourse.ubuntu.com/c/support-and-help/306

Ask Ubuntu Top 5 Questions

Ask (and answer!) questions at: https://askubuntu.com/

Other Meeting Reports

Upcoming Meetings and Events

Times shown are UTC unless otherwise specified. For more details and further dates please visit: https://ubuntu.com/community | https://discourse.ubuntu.com/upcoming-events

Ubuntu Circles! (LoCo) News

Ubuntu @ KDE Akademy 2026

Mauro Gaspari has posted a KDE Akademy event record which gives us details of the Akademy; which is happening this 30th year of the KDE project. Date, location, links, and brief details are provided.

https://discourse.ubuntu.com/t/ubuntu-kde-akademy-2026/84871

UbuCon Latin America 2026

Mauro Gaspari has posted a UbuCon Latin America event record which gives us details of the UbuCon Latin America 2026 conference. We’re shown a poster, given details; Mauro includes the date, location, and more.

https://discourse.ubuntu.com/t/ubucon-latin-america-2026/84874

OpenPrinting News: Opportunity Open Source 4.0 - Call for Proposals extended to end of July

Till Kamppeter gives us the latest OpenPrinting News, which includes an extension for the Call for Proposals for Opportunity Open Source 4.0. We’re reminded about what is wanted in the call for proposals, and given numerous links for more information.

https://openprinting.github.io/OpenPrinting-News-Opportunity-Open-Source-4.0-Call-for-Proposals-extended-to-end-of-July | https://events.canonical.com/event/154/abstracts/

Ubuntu Circles! (LoCo) Events

The following LoCo team events are currently scheduled in the next two weeks:

Looking beyond the next two weeks? Visit the respective Circles!/LoCo Team calendar to browse upcoming events.

Please also see:

The Hub

Workshop 0.9.3 has been released

Dmitry Lyfar gives us details of the release of Workshop 0.9.3. It includes a list of the new features, listing for SDKcraft, Workshop GitHub Action changes and Reference SDKs, with links provided.

https://discourse.ubuntu.com/t/workshop-0-9-3-has-been-released/84875

Run Workshop actions in a CI pipeline

Artem Konev briefly reminds us of the purpose of Workshop, and moves to using CI to build a second copy of that environment, mentioning that over time these copies can ‘drift’ apart. This post tells us of the creation of a “small repo” used to prove how it works, with this post giving us details on what is found. This can help us better understand the launch-workshop action, which may save us time. Finally we’re given a list of further pages where we can learn more, too.

https://discourse.ubuntu.com/t/run-workshop-actions-in-a-ci-pipeline/84876

The 2026.06.22 SRU Cycle is started

Mehmet Basaran in posting the SRU Cycle 2026-06-22 post gives us details of the SRU Cycle which covers 22-June through 19-July 2026.

https://discourse.ubuntu.com/t/the-2026-06-22-sru-cycle-is-started/84927

Call for testing: ubuntu-lint

Nick Rosbrook (enr0n) tells us about a new ubuntu-lint tool which will help Ubuntu upload quality and developer experience within existing conventions. We’re given some details, and told how to install it if running Ubuntu 26.10 or Ubuntu 24.04 LTS. We’re also briefly told how it can be used, either interactively or in an integrated manner. We’re finally asked to consider installing and using it in our workflows, and provide feedback or bug reports and feature requests on the provided GitHub link.

https://discourse.ubuntu.com/t/call-for-testing-ubuntu-lint/85006

What Say You

Lubuntu is officially in my .iso roster.

“I admit LubuntuOfficial Lubuntu kinda knocked my socks off today. I’ve been trying to find something I like for a certain 01/2015 low-end semi-refurb HP15 and the ‘tiny’ and ‘pi’ OSes weren’t what I was digging but the XFCE of Zorin Lite and Mint XFCE were almost too ‘heavy’, but LXQt & Lubuntu = usability and speed wo sacrifice. I don’t know why I dug my heels in this long. It isn’t a daily driver, it’s a special-purpose computer, but Lubuntu is officially in my .iso roster.” - C!

https://ubuntu.social/@SlangC5326@mastodon.social/116880309595621080

Canonical News

In the Press

Canonical Managed Kubeflow lands on Azure

Rob Gibbon, the Product Manager of AI & Analytics at Canonical, has written this partner content. Rob discusses why platform teams are swapping DIY Kubeflow for Canonical’s managed service. This post touches on management issues, including the somewhat constant upstream changes, security patches, and considerations for an organizations own needs. This can be more complex due to Kubeflow’s structural roots, which can make Canonical’s managed options an ‘escape valve’.

https://www.theregister.com/paas-and-iaas/2026/07/09/canonical-managed-kubeflow-lands-on-azure/5268626

In the Blogosphere

KDE Plasma 6.6.6 Released with Numerous Bug Fixes and Various Improvements

Marcus Nestor informs us that the KDE Project has released KDE Plasma 6.6.6 as the last maintenance release of the KDE Plasma 6.6 series. We’re given some details of crashes/bugs now fixed, some of what is now possible, and a link to the full changelog.

https://9to5linux.com/kde-plasma-6-6-6-released-with-numerous-bug-fixes-and-various-improvements

Proton 11 Officially Released with Support for More Games Running on Linux

Marcus Nestor tells us of Valve’s release of Proton 11, based on Wine 11. We’re given a list of “newly supported games” and told of some improvements in Proton 11 too. A link to the release notes at GitHub is provided if we need more.

https://9to5linux.com/proton-11-officially-released-with-support-for-more-games-running-on-linux

XWayland 24.1.13 Released To Fix Two More Security Issues In The X.Org Codebase

Michael Larabel tells us of two now public issues in X.Org Server (and XWayland). The vulnerabilities (CVE-2026-55999 and CVE-2026-56000) were discovered by Trend Micro Zero Day Initiative, with us also told they are now solved upstream.

https://www.phoronix.com/news/XWayland-24.1.13-Released

Ubuntu 26.10 retires dbus-daemon after 22 year run as default

Joey Sneddon tells us that Ubuntu 26.10 will replace its d-bus implementation which has been with us since Ubuntu 4.10 (2004). He briefly reminds us what the dbus message bus does. We’re told that dbus-daemon could drop messages when the system is heavily loaded, which shouldn’t happen with the much newer dbus-broker which replaces it. Joey also explains why this wasn’t done before now, with the older dbus-daemon package being moved to universe so they’re still available for packages that require it. Joey also includes some commands that will let us try it out.

https://www.omgubuntu.co.uk/2026/07/ubuntu-26-10-dbus-broker

In Other News

Strengthening Rust Infrastructure Security with Ubuntu Pro

Marco Ieni talks of the Rust project’s broad set of infrastructure, using modern practices, with some [legacy] ‘pets’. We’re then told the Rust project has adopted Ubuntu Pro, and given the reasons why. Also discussed is why automatic updates are of benefit to the Rust project infrastructure.

https://rustfoundation.org/media/strengthening-rust-infrastructure-security-with-ubuntu-pro/

Featured Audio and Video

Linux Matters: Episode 85 - Clearing the Decks

“Alan reports back from the Ubuntu Summit, Martin updates Jivetalking, and Mark is a fun guy.”

https://linuxmatters.sh/85/

Updates and Security for Ubuntu 22.04, 24.04, 25.10, and 26.04

Security Updates

Ubuntu 22.04 Updates

End of Standard Support: April 2027

Ubuntu 24.04 Updates

End of standard support: April 2029

Ubuntu 25.10 Updates

END OF LIFE: July 9, 2026

Ubuntu 26.04 Updates

End of Standard Support: April 2031

Subscribe

Get your copy of the Ubuntu Weekly Newsletter delivered each week to you via email at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-news

Or follow us via our various social media presences:

Archives

For recent issues of the Ubuntu Weekly Newsletter Issue 786 & later please visit our Discourse page: or our Portal page: that is easier to read. The older WIKI issues (809 and earlier) are available at: UbuntuWeeklyNewsletter/Archive.

Further News

As always you can find more Ubuntu news and announcements at:

Conclusion

Thank you for reading the Ubuntu Weekly Newsletter.

See you next week!

Credits

The Ubuntu Weekly Newsletter is brought to you by:

  • Krytarik Raido
  • Bashing-om
  • Chris Guiver
  • Wild Man
  • irihapeti
  • And many others

Glossary of Terms

Other acronyms can be found at: https://discourse.ubuntu.com/t/glossary-uwn/42405

Get Involved

The Ubuntu community consists of individuals and teams, working on different aspects of the distribution, giving advice and technical support, and helping to promote Ubuntu to a wider audience. No contribution is too small, and anyone can help. It’s your chance to get in on all the community fun associated with developing and promoting Ubuntu. More on this at: https://community.ubuntu.com/contribute/

Or get involved with the Ubuntu Weekly Newsletter team! We always need summary writers and editors, if you’re interested, learn more at: https://discourse.ubuntu.com/t/joining-the-ubuntu-weekly-newsletter-team/40929

Feedback

This document is maintained by the Ubuntu Weekly News Team. If you have a story idea or suggestions for the Weekly Newsletter, join the Ubuntu News Team mailing list at https://lists.ubuntu.com/mailman/listinfo/Ubuntu-news-team and submit it. Ideas can also be added to the wiki at https://discourse.ubuntu.com/t/ubuntu-weekly-newsletter-ideas/40053/ . If you’d like to contribute to a future issue of the Ubuntu Weekly Newsletter, please feel free to edit the appropriate wiki page. If you have any technical support questions, please check https://community.ubuntu.com/help-information/ for more information on where to get help.

Except where otherwise noted, this issue of the Ubuntu Weekly Newsletter is licensed under a Creative Commons Attribution ShareAlike 3.0 License.

CCL

Help improve this document in the forum.