Ubuntu Wiki

Security updates

Announcements

• Official Ubuntu Security Announcements

• Unofficial translations of Ubuntu Security Announcements:

  • French

Media coverage

Importantly, Ubuntu users should apply all security updates to their systems to be sure that their systems are secure. Sometimes vulnerabilities are highlighted by the media, so we've provided information on these vulnerabilities as part of our KnowledgeBase:

• GHOST (CVE-2015-0235)

Vulnerability Resources

• Ubuntu CVE tracker

• Ubuntu CVE Tracker (web view)

• Common Vulnerabilities and Exposures (CVEs)

• National Vulnerabilities Database

• Open Source Software Security

Update processes

• Security Update Procedures

• StableReleaseUpdates/MicroReleaseExceptions

• StableReleaseUpdates (SRU)

• Backport Requests

Update techniques

• How to prepare an updated package

• How to handle backporting security updates

  • schroot/sbuild setup

  • virtual machine setup

• How to test the update

  • QA Regression Testing

  • Proof of Concept (PoC)
  • Build test suites (eg, 'make check')
• ABI compatibility (eg, check-symbols, nm)
• Checklists

Policies

• Ubuntu Security Policies

• Creating enforcing AppArmor profiles policy

Features

• Feature Matrix (for all releases since Dapper, see the Historical Feature Matrix.)

• Security Hardening Compiler Flags

• AppArmor Profiles

• Applications Built with PIE

• AppArmor docs

• SELinux docs

Process

• Bug Triage

• Release Cycle Actions

Problems

• DebuggingSecurity for bug reports

• DebuggingApparmor for bug reports dealing with AppArmor profiles

CategorySecurityTeam