AppArmor (Application Armor) is a Linux kernel security module that restricts program capabilities using per-program profiles. It is enabled by default on Ubuntu and provides Mandatory Access Control (MAC) to contain the blast radius of exploited applications. This guide manages AppArmor profiles on Ubuntu 26.04 LTS. Tested and valid on: Ubuntu 26.04 LTS Prerequisites Ubuntu […]
The ELK Stack (Elasticsearch, Logstash, Kibana) is a powerful log management and analytics platform. Elasticsearch stores and indexes logs, Logstash collects and transforms them, and Kibana provides visualisation dashboards. This guide installs the ELK stack on Ubuntu 26.04 LTS. Tested and valid on: Ubuntu 26.04 LTS Prerequisites Ubuntu 26.04 LTS with at least 4 GB […]
🟠 High ⏱ 15–60 min Last verified: 7 June 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7953-1 Related CVEs: CVE-2025-14178 CVE-2025-14180 CVE-2025-14177 CVE-2025-1220 CVE-2025-1735 CVE-2025-6491 CVE-2024-11235 CVE-2025-1217 +12 more Upstream summary: It was discovered that PHP incorrectly handled memory while reading images in multi-chunk mode. An […]
🟢 Low ⏱ 5–15 min Last verified: 7 June 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8133-1 Related CVEs: CVE-2026-32597 Upstream summary: It was discovered that PyJWT did not validate the critical header parameter, contrary to the RFC specification expectations. A remote attacker could possibly use […]
🟠 High ⏱ 15–60 min Last verified: 7 June 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8130-1 Related CVEs: CVE-2026-2921 CVE-2025-47808 CVE-2025-47807 CVE-2025-47806 CVE-2024-47538 CVE-2024-47541 CVE-2024-47542 CVE-2024-47600 +4 more Upstream summary: It was discovered that GStreamer Base Plugins incorrectly handled certain AVI media files. A remote […]
🟠 High ⏱ 15–60 min Last verified: 7 June 2026 Affected versions: Ubuntu 22.04 (jammy) 📖 ~4 min read • Source: Ubuntu Security Notice USN-7958-1 Related CVEs: CVE-2024-8372 CVE-2019-14863 CVE-2025-0716 CVE-2023-26117 CVE-2024-8373 CVE-2025-2336 CVE-2024-21490 CVE-2023-26116 +2 more Upstream summary: It was discovered that AngularJS did not properly sanitize certain `xlink:href` attributes. A remote attacker […]
🟠 High ⏱ 15–60 min Last verified: 7 June 2026 Affected versions: Ubuntu 20.04 (focal) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8280-2 Related CVEs: CVE-2026-31431 CVE-2026-31504 CVE-2026-31533 CVE-2026-43033 CVE-2026-43077 CVE-2026-43078 CVE-2024-50304 CVE-2026-23112 +12 more Upstream summary: It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic […]
🟠 High ⏱ 5–30 min Last verified: 7 June 2026 Affected versions: Ubuntu 26.04 LTS 📖 ~1 min read Table of contents Symptom & Impact Environment & Reproduction Root Cause Analysis Quick Triage Step-by-Step Diagnosis Solution – Primary Fix Solution – Alternative Approaches Verification & Acceptance Criteria Rollback Plan Prevention & Hardening Related Errors […]
Deno 2 is a secure runtime for JavaScript and TypeScript built on V8 and Rust. Unlike Node.js, Deno has built-in TypeScript support, a permission-based security model, and a standard library without npm being required. Deno 2 introduces npm compatibility and improved backwards compatibility. This guide installs Deno 2 on Ubuntu 26.04 LTS. Tested and valid […]
🟡 Medium ⏱ 10–30 min Last verified: 6 June 2026 Affected versions: Ubuntu 24.04 (noble) 📖 ~4 min read • Source: Ubuntu Security Notice USN-8019-1 Related CVEs: CVE-2026-1767 CVE-2026-1764 CVE-2026-1766 CVE-2026-1765 Upstream summary: Fatih Çelik discovered that tracker-miners incorrectly handled certain malformed MP3 files. An attacker could use this issue to cause tracker-miners to […]
