Zorin OS Update Overview

DotWayton · January 22, 2026, 5:13am

Update to the Brave Browser has come through!

Release Notes v1.86.142 (Jan 21, 2026)

Re-added “brave-keyring” as a dependency of “brave-browser” on Linux. (#52057)
Removed “Web3” from the “Explorer” tab of Brave Wallet. (#50897)
Upgraded Chromium to 144.0.7559.97. (#52147) (Changelog for 144.0.7559.97)

It is what would be discerned as a pretty small update overall, in seeing this come through Brave does not provide change logs you have to manually navigate to their release notes portion on their website to find these logs as they do not appear through the software updater.

Part of this forum means that if a source does not provide changelogs I'll try seek them out to provide the community visibility on what changes are made incase anything breaks OR makes a great advancement after the fact so its not missed.

DotWayton · January 22, 2026, 7:20pm

Solid update today targeting the .NET frameworks

Technical description
Package: dotnet-runtime-9.0
The .NET runtime contains everything needed to run .NET applications. It includes a high performance Virtual Machine as well as the framework libraries used by .NET applications.
The .NET platform is a fast, lightweight and modular, enabling the creation of cross platform applications that work on GNU/Linux, macOS and Windows.
It particularly focuses on creating console applications, web applications, and micro-services.

Installed version: 9.0.12-0ubuntu1~24.04.1~ppa1
Available version: 9.0.12-0ubuntu1~24.04.1~ppa2

Version 9.0.113-9.0.12-0ubuntu1~24.04.1~ppa2: 

  * d/t/regular-tests/cgroup-limit/test.sh: fix autopkgtest regression in
    Ubuntu releases with rust-coreutils by comparing the cgroup filesystem ID
    instead of friendly name.

All packages being updated despite differing version numbers share the same changelog.

Technical description
Package: linux-objects-nvidia-580-6.14.0-37-generic
This package contains the Linux kernel nvidia modules for version 6.14.0-37.
You likely do not want to install this package directly. Instead, install the one of the linux-modules-nvidia-580-generic* meta-packages, which will ensure that upgrades work correctly, and that supporting packages are also installed.

Installed version: 6.14.0-37.37~24.04.1
Available version: 6.14.0-37.37~24.04.1+2

Version 6.14.0-37.37~24.04.1+2: 

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/dkms-versions -- update from kernel-versions
      (adhoc/s2025.10.13)

Technical description
Package: linux-signatures-nvidia-6.14.0-37-generic
This package contains the Linux kernel signatures nvidia modules for version 6.14.0-37-generic.
You likely do not want to install this package directly.

Installed version: 6.14.0-37.37~24.04.1
Available version: 6.14.0-37.37~24.04.1+2

Version 6.14.0-37.37~24.04.1+2: 

  * Packaging resync (LP: #1786013)
    - [Packaging] debian/dkms-versions -- update from kernel-versions
      (adhoc/s2025.10.13)

their is also a resync some smaller packages.
See you all next time.

DotWayton · January 23, 2026, 3:43am

Big set of Updates this afternoon rolling in.

** Starting with Security Section**

Technical description
Package: libxml2:i386
XML is a metalanguage to let you design your own markup language. A regular markup language defines a way to describe information in a certain class of documents (eg HTML). XML lets you define your own customized markup languages for many classes of document. It can do this because it's written in SGML, the international standard metalanguage for markup languages.
This package provides a library providing an extensive API to handle such XML data files.

Changes for libxml2:i386 versions:
Installed version: 2.9.14+dfsg-1.3ubuntu3.6
Available version: 2.9.14+dfsg-1.3ubuntu3.7

Version 2.9.14+dfsg-1.3ubuntu3.7:

SECURITY UPDATE: Infinite recursion with SGML catalogs.
- debian/patches/CVE-2025-8732.patch: Add catalog depth and checks in
  catalog.c. Add test files in result/catalogs/recursive and
  test/catalogs/recursive.sgml.
- CVE-2025-8732
SECURITY UPDATE: Infinite recursion when resolving include directives in
RelaxNG parser.
- debian/patches/CVE-2026-0989.patch: Add xmlRelaxParserSetIncLImit in
  include/libxml/relaxng.h. Add include limit and checks in relaxng.c. Add
  test and test files in runtest.c,
  test/relaxng/include/include-limit.rng,
  test/relaxng/include/include-limit_1.rng,
  test/relaxng/include/include-limit_2.rng, and
  test/relaxng/include/include-limit_3.rng.
- debian/libxml2.symbols: Add new xmlRelaxParserSetIncLImit symbol.
- CVE-2026-0989
SECURITY UPDATE: Infinite recursion in URI dereferencing.
- debian/patches/CVE-2026-0990.patch: Add MAX_CATAL_DEPTH and other checks
  in catalog.c.
- CVE-2026-0990
SECURITY UPDATE: Uncontrolled resource consumption in catalogs.
- debian/patches/CVE-2026-0992.patch: Add catalog duplication checks in
  catalog.c.
- CVE-2026-0992

Technical description
Package: libxml2-utils
XML is a metalanguage to let you design your own markup language. A regular markup language defines a way to describe information in a certain class of documents (eg HTML). XML lets you define your own customized markup languages for many classes of document. It can do this because it's written in SGML, the international standard metalanguage for markup languages.
This package provides xmllint, a tool for validating and reformatting XML documents, and xmlcatalog, a tool to parse and manipulate XML or SGML catalog files.

Changes for libxml2-utils versions:
Installed version: 2.9.14+dfsg-1.3ubuntu3.6
Available version: 2.9.14+dfsg-1.3ubuntu3.7

Version 2.9.14+dfsg-1.3ubuntu3.7:

SECURITY UPDATE: Infinite recursion with SGML catalogs.
- debian/patches/CVE-2025-8732.patch: Add catalog depth and checks in
  catalog.c. Add test files in result/catalogs/recursive and
  test/catalogs/recursive.sgml.
- CVE-2025-8732
SECURITY UPDATE: Infinite recursion when resolving include directives in
RelaxNG parser.
- debian/patches/CVE-2026-0989.patch: Add xmlRelaxParserSetIncLImit in
  include/libxml/relaxng.h. Add include limit and checks in relaxng.c. Add
  test and test files in runtest.c,
  test/relaxng/include/include-limit.rng,
  test/relaxng/include/include-limit_1.rng,
  test/relaxng/include/include-limit_2.rng, and
  test/relaxng/include/include-limit_3.rng.
- debian/libxml2.symbols: Add new xmlRelaxParserSetIncLImit symbol.
- CVE-2026-0989
SECURITY UPDATE: Infinite recursion in URI dereferencing.
- debian/patches/CVE-2026-0990.patch: Add MAX_CATAL_DEPTH and other checks
  in catalog.c.
- CVE-2026-0990
SECURITY UPDATE: Uncontrolled resource consumption in catalogs.
- debian/patches/CVE-2026-0992.patch: Add catalog duplication checks in
  catalog.c.
- CVE-2026-0992

Technical description
Package: libxml2
XML is a metalanguage to let you design your own markup language. A regular markup language defines a way to describe information in a certain class of documents (eg HTML). XML lets you define your own customized markup languages for many classes of document. It can do this because it's written in SGML, the international standard metalanguage for markup languages.
This package provides a library providing an extensive API to handle such XML data files.

Changes for libxml2 versions:
Installed version: 2.9.14+dfsg-1.3ubuntu3.6
Available version: 2.9.14+dfsg-1.3ubuntu3.7

Version 2.9.14+dfsg-1.3ubuntu3.7:

SECURITY UPDATE: Infinite recursion with SGML catalogs.
- debian/patches/CVE-2025-8732.patch: Add catalog depth and checks in
  catalog.c. Add test files in result/catalogs/recursive and
  test/catalogs/recursive.sgml.
- CVE-2025-8732
SECURITY UPDATE: Infinite recursion when resolving include directives in
RelaxNG parser.
- debian/patches/CVE-2026-0989.patch: Add xmlRelaxParserSetIncLImit in
  include/libxml/relaxng.h. Add include limit and checks in relaxng.c. Add
  test and test files in runtest.c,
  test/relaxng/include/include-limit.rng,
  test/relaxng/include/include-limit_1.rng,
  test/relaxng/include/include-limit_2.rng, and
  test/relaxng/include/include-limit_3.rng.
- debian/libxml2.symbols: Add new xmlRelaxParserSetIncLImit symbol.
- CVE-2026-0989
SECURITY UPDATE: Infinite recursion in URI dereferencing.
- debian/patches/CVE-2026-0990.patch: Add MAX_CATAL_DEPTH and other checks
  in catalog.c.
- CVE-2026-0990
SECURITY UPDATE: Uncontrolled resource consumption in catalogs.
- debian/patches/CVE-2026-0992.patch: Add catalog duplication checks in
  catalog.c.
- CVE-2026-0992

some NVIDIA and Video Encoding updates:

Technical description
Package: libnvidia-extra-580
This package provides an additional set of libraries to be used with the NVIDIA driver.

Changes for libnvidia-extra-580 versions:
Installed version: 580.95.05-0ubuntu0.24.04.3
Available version: 580.126.09-0ubuntu0.24.04.1