The patch for a Linux root exploit called Dirty Frag turned out to hide a second one. Fragnesia was found by an AI auditing tool — a clean illustration of why the page-cache-write bug class keeps outrunning the people patching it.
Three things hit Ubuntu in nine days: a root-level Linux kernel exploit dropped without coordinated patches, a pro-Iran DDoS that knocked Canonical's web infrastructure offline, and the 26.04 LTS release landing in the middle of both. Here's what it means for whatever you use Ubuntu for.
Canonical released Ubuntu 26.04 LTS — codenamed Resolute Raccoon for Steve Langasek — on April 23. It is the first Ubuntu LTS without an Xorg session, ships GNOME 50 on Linux 7.0, and replaces GNU coreutils with a Rust implementation by default.
France's digital agency DINUM is migrating its own workstations to Linux and has ordered every government ministry to submit plans to eliminate extra-European software dependencies by autumn 2026 — the most concrete digital sovereignty mandate any EU state has issued.