Register for Ubuntu Summit 26.10

Live on Nov 12-13. Join us in celebrating the world of open source. Learn more ›

UWN Issue 967 October 18-24 2026.

Welcome to the Ubuntu Weekly Newsletter, Issue 967 for the week of October 19 - 24, 2026.

In this Issue

  • eMudhra CA compromise fixes available
  • php2shell (CVE-2026-109618 and CVE-2026-109619) – PHP critical vulnerability fixes available
  • Ubuntu Summit 26.10 Timetable
  • Ubuntu Stats
  • Hot in Support
  • Other Meeting Reports
  • Upcoming Meetings and Events
  • Ubuntu Circles! (LoCo) Events
  • Ubuntu Discourse
  • Checkbox 8.1.0 stable release
  • Multipass 1.17.0 released: Local cloud simulation, more Linux distributions, and new platform drivers
  • Protect your Launchpad API tokens with a security key
  • Bug Tracking for PPAs Is Now Available in Launchpad
  • Workshop 0.9.9 has been released
  • Consider dropping rsyslog from ubuntu-minimal?
  • Imagecraft v1.1 released
  • Canonical News
  • In the Press
  • In the Blogosphere
  • Security and Updates for Ubuntu 22.04, 24.04, 26.04, and 26.10
  • And much more!

General Community News

eMudhra CA compromise fixes available

Luci Stanescu tells us the “private keys of the eMudhra Certificate Authority (CA) have been .. compromised” which has caused the Ubuntu Security Team to act. We’re given some details around this change & other companies’ (Oracle) actions. We’re told that “OpenJDK distributed by Ubuntu is not affected”; having been modified to use a system root CA store - details are provided. This notice tells us of impacted releases, the packages which need to be installed for our systems to deal with this, how to check we’re not impacted, and more.

https://ubuntu.com/blog/emudhra-ca-compromise-fixes-available

php2shell (CVE-2026-109618 and CVE-2026-109619) – PHP critical vulnerability fixes available

Luci Stanescu alerts us this time of the two critical security vulnerabilities affecting PHP, giving us CVE numbers and some details. We’re given a list of affected Ubuntu releases, and package versions which contain the important fixes, details on applying fixes, and more.

https://ubuntu.com//blog/php2shell-vulnerability-fixes-available

Ubuntu Summit 26.10 Timetable

Mauro Gaspari has posted the Ubuntu Summit 26.10 Timetable for both days: November 12-13, 2026, with times showing in local timezones.

https://discourse.ubuntu.com/t/ubuntu-summit-26-10-timetable/90216

Ubuntu Stats

Bug Stats

  • Open: 137761 (+23)
  • Critical: 295 (-1)
  • Unconfirmed: 73620 (+189)

As always, the Bug Squad needs more help. If you want to get started, please see: https://wiki.ubuntu.com/BugSquad

Translations

  • Swedish: 100.00% (0/3771)
  • Albanian: 98.30% (6471/0)
  • Ukrainian: 89.14% (41402/1120)
  • German: 87.01% (49511/375)
  • French: 86.00% (53386/6517)

Hot in Support

Ubuntu Community Discourse Trending Top 5 Threads

Find more support at: https://discourse.ubuntu.com/c/support-and-help/306

Ask Ubuntu Top Questions

Ask (and answer!) questions at: https://askubuntu.com/

Other Meeting Reports

Upcoming Meetings and Events

Times shown are UTC unless otherwise specified. For more details and further dates please visit: https://ubuntu.com/community | https://discourse.ubuntu.com/upcoming-events

Ubuntu Circles! (LoCo) Events

The following LoCo team events are currently scheduled in the next two weeks:

Looking beyond the next two weeks? Visit the respective Circles!/LoCo Team calendar to browse upcoming events.

Please also see:

Ubuntu Discourse

Checkbox 8.1.0 stable release

Massimiliano Girardi tells us a “new version of Checkbox is now available as a Debian package (in the Stable PPA ) and as Snaps (in the stable channel)”. We’re reminded that testing sessions cannot be resumed so finish all sessions before updating. Commands to update are provided, a list of new features, plus bugfixes we’ll find in this update.

https://discourse.ubuntu.com/t/checkbox-8-1-0-stable-release/89878

Multipass 1.17.0 released: Local cloud simulation, more Linux distributions, and new platform drivers

Christoph Niederberger, in announcing Multipass 1.17, tells us it’s a “major feature release” and gives us details as to why. We’re reminded it runs on Ubuntu, Microsoft Windows, and macOS. How you can simulate cloud environments is covered as “Availability Zones” ( a highlight in this release) before moving to Debian and Fedora cloud images, and the new Windows Host Compute System (HCS) APIs also being supported, and more too. This is a rather extensive report, with links to the full Multipass 1.17.0 Release notes for more.

https://discourse.ubuntu.com/t/multipass-1-17-0-released-local-cloud-simulation-more-linux-distributions-and-new-platform-drivers/89871

Protect your Launchpad API tokens with a security key

Jürgen Gmach reminds us that “attacks that harvest developer credentials are on the rise” giving us an example, and that our API could be at risk. We’re then told that “Launchpad now supports hardware-bound API tokens” allowing us to tie our access to a USB FIDO2 security key. We’re told how this works, that the design is very usable, and what it protects and what it doesn’t. We’re asked to try it and told how, and asked to submit feedback if we start using it.

https://discourse.ubuntu.com/t/protect-your-launchpad-api-tokens-with-a-security-key/89920

Bug Tracking for PPAs Is Now Available in Launchpad

İlker Emre Koç informs us that Launchpad now supports bug tracking for PPAs. We’re told why this feature is beneficial and he gives us an example, before some details of how it works. This description includes some example Launchpad pages, notes for PPA maintainers, and more.

https://discourse.ubuntu.com/t/bug-tracking-for-ppas-is-now-available-in-launchpad/90034/

Workshop 0.9.9 has been released

Dmitry Lyfar informs us that Workshop 0.9.9 has been released, with this post covering much of what is new that we’ll find in the release. We’re told this is the “last update for the VM runtime support” and gives details as to why, a list of specific changes, and more.

https://discourse.ubuntu.com/t/workshop-0-9-9-has-been-released/90072

Consider dropping rsyslog from ubuntu-minimal?

Bryan Quigley has noticed that Debian installs no longer include rsyslog by default, and thus discusses its support in Ubuntu. A list of reasons to keep or drop as default install in Ubuntu is provided. Brian gives us a link to a prior discussion thread on the topic, before asking if Ubuntu should drop rsyslog from the ubuntu-minimal recommends.

https://discourse.ubuntu.com/t/consider-dropping-rsyslog-from-ubuntu-minimal/90089

Imagecraft v1.1 released

Dmitry Malykhanov tells us of the Imagecraft version 1.1 release, before listing and then briefly describing some of its’ interesting features. We’re given links should we need more, too.

https://discourse.ubuntu.com/t/imagecraft-v1-1-released/90120

Canonical News

In the Press

APT 3.3.4 Adds SHA3 Support, Strengthens Download Verification

Bobby Borisov blogs about the update of APT to version 3.3.4. We’re told it includes SHA3-256 and SHA3-512 support; though is still disabled by default. Bobby tells us that it “tightens download verification” with details. Also covered are autocompletion improvements, improved Portuguese manual translations, and more. We are also provided a link to the changelog.

https://linuxiac.com/apt-3-3-4-adds-sha3-support-strengthens-download-verification/

In the Blogosphere

GNOME 51.1 Improves Drag and Drop Between Wayland and Xwayland Clients

Marcus Nestor tells us of the release of GNOME 51.1 by the GNOME project. We’re given some details of improvements included in this release, including Mutter 51.1, which has improved drag and drop for Xwayland clients, and more. We’re given a link to the release announcement should we need more, before Marcus moves to briefly covering the release of GNOME 50.6.

https://9to5linux.com/gnome-51-1-improves-drag-and-drop-between-wayland-and-xwayland-clients

Latest Steam Client Update Improves Support for Vulkan Games on Linux

Marcus Nestor this time informs us of Valve releasing a new stable Steam Client which will “improve the Vulkan game experience on Linux”. Along with details of some fixes, numerous links to other articles Marcus has written gives us more information. We’re also given a link to the release notes. Marcus then reminds us how we can apply this update to our Steam clients.

https://9to5linux.com/latest-steam-client-update-improves-support-for-vulkan-games-on-linux

Security and Updates for Ubuntu 22.04, 24.04, 26.04, and 26.10

Security Updates

Ubuntu 22.04 Updates

Maintenance Activity: The jammy-changes October 2026 Archive by thread

End of Standard Support: April 2027

Ubuntu 24.04 Updates

Maintenance Activity: The noble-changes October 2026 Archive by thread

End of standard support: April 2029

Ubuntu 26.04 Updates

Maintenance Activity: The Resolute-changes October 2026 Archive by thread

End of Standard Support: April 2031

Ubuntu 26.10 Updates

Maintenance Activity: The Stonking-changes October 2026 Archive by thread
End of Life: July 2027

[The Release Update Listings] have become unwieldy so we’re providing links.

Subscribe

Get your copy of the Ubuntu Weekly Newsletter delivered each week to you via email at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-news

Or follow us via our various social media presences:

Archives

For recent issues of the Ubuntu Weekly Newsletter Issue 786 & later please visit our Discourse page: or our Portal page: that is easier to read. The older WIKI issues (809 and earlier) are available at: UbuntuWeeklyNewsletter/Archive.

Further News

As always you can find more Ubuntu news and announcements at:

Conclusion

Thank you for reading the Ubuntu Weekly Newsletter.

See you next week!

Credits

The Ubuntu Weekly Newsletter is brought to you by:

  • Krytarik Raido
  • Bashing-om
  • Chris Guiver
  • Wild Man
  • irihapeti
  • And many others

Glossary of Terms

Other acronyms can be found at: Glossary (UWN)

Get Involved

The Ubuntu community consists of individuals and teams, working on different aspects of the distribution, giving advice and technical support, and helping to promote Ubuntu to a wider audience. No contribution is too small, and anyone can help. It’s your chance to get in on all the community fun associated with developing and promoting Ubuntu. More on this at: https://community.ubuntu.com/contribute/

Or get involved with the Ubuntu Weekly Newsletter team! We always need summary writers and editors, if you’re interested, learn more at: Joining the Ubuntu Weekly Newsletter Team

Feedback

This document is maintained by the Ubuntu Weekly News Team. If you have a story idea or suggestions for the Weekly Newsletter, join the Ubuntu News Team mailing list at ubuntu-news-team Info Page and submit it. Ideas can also be added to the wiki at Ubuntu Weekly Newsletter Ideas . If you’d like to contribute to a future issue of the Ubuntu Weekly Newsletter, please feel free to edit the appropriate wiki page. If you have any technical support questions, please check Help and Information - Ubuntu Discourse for more information on where to get help.

Except where otherwise noted, this issue of the Ubuntu Weekly Newsletter is licensed under a Creative Commons Attribution ShareAlike 3.0 License.

CCL

Help improve this document in the forum.