canonical

Discussion of Canonical's response times to CVE vulnerability disclosures, highlighting concerns about patching speed for Ubuntu and related packages.

Ubuntu is criticized for failing to patch CVE-2026-98432, a critical CVSS 9.8 Linux kernel TCP bug with a working root exploit, more than two weeks after Debian and other distros shipped fixes, prompting the author to migrate servers off Ubuntu.

Canonical announces Zephyr 26.04 LTS, an enterprise-ready RTOS distribution with up to 15 years of support to address EU Cyber Resilience Act compliance and developer experience challenges.

Gergely Orosz highlights Ubuntu's AI-focused strategy and the growing use of Ubuntu via WSL on Windows, based on Pragmatic Engineer's deep dive into how AI is changing operating systems.

At Google I/O 2026, Google announced that Canonical will take over as the lead maintainer and strategic steward of Flutter desktop for Windows, macOS, and Linux, marking a shift in governance. The move leverages Canonical's deep technical expertise, having already made Flutter its default for Ubuntu desktop apps.

bijou64 is a new variable-length integer encoding that ensures canonical representation, solving signature-verification bugs, and also runs several times faster than the common LEB128 encoding.

A DDoS attack temporarily disrupted Canonical's public infrastructure after attackers used a stresser service explicitly marketed to bypass Cloudflare. The incident has sparked debate over Cloudflare's dual role in hosting both the attackers' commercial operations and Canonical's protected systems, raising questions about potential conflicts of interest.