Skip to content
NewA calmer, faster ZeroHour

Ubuntu kernel CVE fixes are moving to a weekly release schedule

Help Net Securityby Anamarija Pogorelec ()2 min read1 · 1 read
AI summary · grok-4.7Summaries by Vani AI

Canonical will ship Ubuntu kernel updates weekly by overlapping two-week cycles, with uncertified -proposed builds for faster CVE fixes.

Canonical is merging Ubuntu's four-week Stable Release Update cycle and its two-week security cycle into overlapping two-week cycles, so a kernel build is published every week. After a cutoff, the first week covers kernel builds and smoke tests that land in the -proposed pocket, and the second week covers certification before the kernels are released. Admins who cannot wait may install those uncertified release candidates and own any regression risk. Where a safe workaround exists, Canonical still aims to publish it within 24 to 48 hours of public disclosure.

Key facts
  • Overlapping two-week cycles produce a weekly Ubuntu kernel release.
  • Uncertified -proposed builds are the path to fixes within a week.
  • Certification still runs; skipping it leaves regressions to the adopter.
  • Safe workarounds are targeted within 24 to 48 hours of disclosure.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

2 min read at helpnetsecurity.com

Ubuntu kernels will ship every week under a new release schedule from Canonical, which is merging its four-week cycle for regular Stable Release Updates (SRUs) and its two-week cycle for security fixes into a single two-week cycle. The cycles overlap, each starting a week after the one before, which is what produces a weekly release.

Help Net Security

By Anamarija Pogorelec · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.