LIVE · cybersecurity feed
Live wire
vulnerabilityhigh

Ubuntu 24.04.5 LTS release patches security bugs across ten flavors

Canonical has released Ubuntu 24.04.5 LTS, an update to its Noble Numbat long-term support distribution, which integrates security updates and stability fixes directly into new installation media. This point release aims to reduce the number of post-installation updates for new deployments.

ZeroDay News ·

Source: Help Net Security

Canonical has released Ubuntu 24.04.5 LTS, an update to its Noble Numbat long-term support distribution, which integrates security updates and stability fixes directly into new installation media. This point release aims to reduce the number of post-installation updates for new deployments.

The 24.04.5 release encompasses not only the standard desktop and server editions but also nine other official flavors, including Kubuntu, Xubuntu, Ubuntu MATE, Ubuntu Studio, and Edubuntu. Each of these flavors has its own specific release notes detailing flavor-specific changes alongside the core updates.

Canonical emphasized that the primary focus of this LTS point release is on security corrections and stability improvements, which are critical for a version designed for long-term deployment. Existing users of Ubuntu 22.04 LTS will be offered an automatic upgrade path to 24.04.5 through the Update Manager, which Canonical confirms will remain a free upgrade.

For those planning deployments, it is important to note that the support timelines are tied to the original 24.04 LTS release date, not this point release. Ubuntu Desktop, Ubuntu Server, Ubuntu Cloud, and Ubuntu Core are supported for five years from the initial 24.04 launch. The other flavors receive three years of maintenance. Users requiring support beyond these periods can opt for Expanded Security Maintenance.

Administrators considering whether to perform fresh installations with the 24.04.5 media or allow existing installations to update through their normal cycle should understand that the fixes will reach both paths. The main difference is that new installations using the 24.04.5 media will have these corrections pre-applied, saving a round of downloads immediately after setup.

The release notes for Ubuntu 24.04.5 do not explicitly list specific CVEs or bug IDs. Administrators needing to verify particular patches for compliance purposes are directed to consult the linked release notes for more detailed information.

vulnerabilitypatch
ShareXLinkedInWhatsAppFacebook

More News

view all →
security

Canadian cybersecurity executive arrested in federal extortion case

A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion,…

breach

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

AI SPERA, the company behind the cyber threat intelligence platform Criminal IP, has announced AITEM (AI-Powered Threat Exposure Management), an expansion of its Attack Surface Management (ASM) offerings. AITEM aims to move beyond traditional asset discovery to provide a more comprehensive approach to understanding, prioritizing, and responding to security exposures. The platform is scheduled…

ai

AI Is Getting Really Good at Messing With Cybercriminals

Anti-cybercrime initiatives are increasingly deploying artificial intelligence to disrupt scammers by engaging them with lifelike bots, which the criminals mistake for genuine victims. This strategy aims to waste scammers' time and resources while gathering intelligence on their operations.

ransomware

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

The Federal Bureau of Investigation (FBI) has reportedly arrested Edward Dubrovsky, a co-founder of the ransomware negotiation firm Cypfer and currently associated with CyberSteward. The arrest is said to be part of the ongoing ShinyHunters investigation, specifically in connection with an incident involving FBI job applicant data.

ai

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

A new report highlights a significant blind spot in enterprise security architectures concerning the proliferation of third-party AI agents. The forthcoming 2026 State of Agent Security Report indicates that current security models, often designed to protect AI systems directly chosen and deployed by an organization, frequently fail to account for AI capabilities embedded within third-party…

security

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

A former core infrastructure engineer has been sentenced to prison for an attempted cyber extortion plot against an industrial firm. The engineer reportedly deleted administrative accounts and reset hundreds of user passwords, subsequently demanding a ransom of 20 Bitcoin to prevent further disruption to the company's servers.