Ubuntu Is Down (and It Doesn’t Look Like a DDoS, Yet) - FIXED

As I’m writing this, it’s 7:08 AM PST on November 11, 2026, and a big chunk of Ubuntu’s and Canonical’s sites are down. Canonical’s own status page, status.canonical.com, shows the incident started at 3:06 AM PST, so this has been going on for about four hours.

So far, I’m not seeing any reports of a DoS or DDoS attack. Most of the outages on the status page are marked “Acknowledged,” and that’s it. No “Investigating,” no “Identified,” no explanation. Just “Acknowledged” and “Down.”

The security services that are down:

• Ubuntu Security API: CVEs
• Ubuntu Security API: Notices
• Livepatch API
• Landscape
• keyserver.ubuntu.com (and port 11371)
• ppa.launchpad.net
• launchpad.net
• contracts.canonical.com
• DNS

Without these, a lot of people aren’t getting their security updates the way they normally do. Livepatch can’t push kernel patches, Landscape can’t manage updates across a fleet of machines, and the Security API that tells you which CVEs affect you is down too. Not good.

Everything else that’s down:

• ubuntu.com
• canonical.com
• login.ubuntu.com
• portal.canonical.com
• blog.ubuntu.com
• developer.ubuntu.com
• academy.canonical.com
• assets.ubuntu.com
• lists.ubuntu.com
• ubuntu-archive-team.ubuntu.com
• cloud-images.ubuntu.com
• streams.canonical.com (HTTPS)
• maas.io
• images.maas.io
• jaas.ai
• gopkg.in

What’s still working:

• archive.ubuntu.com
• Ubuntu ESM
• Azure archive mirrors
• Livepatch Auth
• Launchpad Git
• Launchpad Bazaar
• Ubuntu Matrix Server
• Email delivery

The most recent updates on the status page, all from this morning:

• 6:24 AM: streams.canonical.com (HTTPS) is down
• 6:26 AM: DNS is down
• 6:26 AM: Ubuntu Security API (Notices) is down
• 6:28 AM: cloud-images.ubuntu.com is down
• 6:30 AM: jaas.ai is down

DNS being on that list is interesting, but I’m not going to guess at a cause until Canonical says something.

If you’re running Ubuntu servers and something is failing this morning, PPAs, the keyserver, Livepatch, or cloud images, it’s probably not you. Check status.canonical.com before you start tearing your config apart.

9:23 AM PST - Update

Update, 9:24 AM PST: Things are starting to come back, but it’s not over yet.

Around 8:37 AM, services started switching from “Acknowledged” to “Observing” and showing as Operational again. Canonical still hasn’t posted a cause.

Back up:

• Ubuntu Security API: CVEs (8:54 AM)
• Ubuntu Security API: Notices (8:59 AM)
• keyserver.ubuntu.com (8:55 AM) and port 11371 (8:58 AM)
• ppa.launchpad.net (8:57 AM)
• cloud-images.ubuntu.com (8:54 AM)
• streams.canonical.com (HTTPS) (8:59 AM)
• jaas.ai (8:56 AM)
• images.maas.io (9:10 AM)

Going up and down:

• DNS: back at 8:58 AM, down again at 9:13 AM, back at 9:19 AM
• ubuntu-archive-team.ubuntu.com: back at 8:37 AM, down at 8:59 AM, back at 9:14 AM
• ubuntu.com: back at 8:55 AM, down again at 9:01 AM
• blog.ubuntu.com: back at 8:54 AM, down again at 8:58 AM
• lists.ubuntu.com: back at 9:04 AM, down again at 9:11 AM

Still down, with no recovery posted yet:

• launchpad.net (down since 3:06 AM, the first thing to go)
• Livepatch API (since 3:58 AM)
• Landscape (since 4:10 AM)
• contracts.canonical.com (since 4:08 AM)
• login.ubuntu.com (since 4:07 AM)
• canonical.com (since 4:19 AM)
• portal.canonical.com (since 5:36 AM)
• assets.ubuntu.com (since 4:43 AM)
• developer.ubuntu.com (since 4:27 AM)
• academy.canonical.com (since 4:32 AM)
• maas.io (since 4:20 AM)
• gopkg.in (since 4:07 AM)

The good news is that the Security API, the keyserver, and PPAs are back. The bad news is that Livepatch and Landscape, the two services a lot of people use to push security patches across their machines, are still down more than five hours in.