Yes, Ubuntu is withholding security patches for some software
1–10 of 29 posts
Re: Yes, Ubuntu is withholding security patches for some software
#2Related ongoing thread:
Ubuntu Pro Shenanigans - https://news.ycombinator.com/item?id=38254040 - Nov 2023 (92 comments)
Re: Yes, Ubuntu is withholding security patches for some software
#3Debian is looking better and better.
Re: Yes, Ubuntu is withholding security patches for some software
#4I'm so confused.
When I install an LTS version with a Universe package like ffmpeg, does everything continue getting security patches for the full five-year LTS life?
Or do I now need Ubuntu Pro to get the full five years?
Re: Yes, Ubuntu is withholding security patches for some software
#5Debian is looking better and better.
[dead]
Re: Yes, Ubuntu is withholding security patches for some software
#6Debian is looking better and better.
It always has. You can only convince a billionaire to hate money for so long. Mark is going to rip the rug out on everyone soon enough.
Re: Yes, Ubuntu is withholding security patches for some software
#7I'm so confused. When I install an LTS version with a Universe package like ffmpeg, does everything continue getting security patches for the full five-year LTS life? Or do I now need Ubuntu Pro to get the full five years?
Universe packages are not supported by Ubuntu unless you activate Ubuntu Pro. Thus, if you install ffmpeg on Ubuntu without Pro, it will contain several active vulnerabilities. The full five years only applies packages in the main repo.
Re: Yes, Ubuntu is withholding security patches for some software
#8I'm so confused. When I install an LTS version with a Universe package like ffmpeg, does everything continue getting security patches for the full five-year LTS life? Or do I now need Ubuntu Pro to get the full five years?
Universe packages are not supported by Ubuntu unless you activate Ubuntu Pro. Thus, if you install ffmpeg on Ubuntu without Pro, it will contain several active vulnerabilities. The full five years only applies packages in the main repo.
That's absolutely terrible and not clear at all.
I've been tempted to go back to Arch and I think this can be a good motivator.
Re: Yes, Ubuntu is withholding security patches for some software
#9I'm so confused. When I install an LTS version with a Universe package like ffmpeg, does everything continue getting security patches for the full five-year LTS life? Or do I now need Ubuntu Pro to get the full five years?
Universe packages are not supported by Ubuntu unless you activate Ubuntu Pro. Thus, if you install ffmpeg on Ubuntu without Pro, it will contain several active vulnerabilities. The full five years only applies packages in the main repo.
Universe is supported on a "best effort" basis.
Re: Yes, Ubuntu is withholding security patches for some software
#10Earlier quoted context omitted.
Universe packages are not supported by Ubuntu unless you activate Ubuntu Pro. Thus, if you install ffmpeg on Ubuntu without Pro, it will contain several active vulnerabilities. The full five years only applies packages in the main repo.
That's absolutely terrible and not clear at all. I've been tempted to go back to Arch and I think this can be a good motivator.
Just to be clear, on Arch ffmpeg is outdated (6.0 vs 6.1.) This means it has three security vulnerabilities.