Yes, Ubuntu is withholding security patches for some software (opens in new tab)

(flu0r1ne.net)

73 pointssvc02y ago27 comments

27 comments

dang2y ago

Related ongoing thread:

Ubuntu Pro Shenanigans - https://news.ycombinator.com/item?id=38254040 - Nov 2023 (92 comments)

wmf2y ago

Debian is looking better and better.

cycleslow2y ago

It always has. You can only convince a billionaire to hate money for so long. Mark is going to rip the rug out on everyone soon enough.

geokon2y ago

Except it doesn't really have PPAs ... which limits outside contribution and is a huge downside

gettodachoppa2y ago

What is the advantage of PPAs over an apt repo that users place in /etc/apt/sources.list.d/someexternalapp? Is it having a central site that users can search for packages? Basically a social portal?

1 more reply

apple4ever2y ago

Agreed. I'd love to switch to Debian, but the lack of PPAs makes it difficult.

Also Debian is always much further behind than Ubuntu on new packages.

extraduder_ire2y ago

IIRC, you can still add those repos. The PPA system just makes it a little easier to add them.

2 more replies

panarky2y ago

I'm so confused.

When I install an LTS version with a Universe package like ffmpeg, does everything continue getting security patches for the full five-year LTS life?

Or do I now need Ubuntu Pro to get the full five years?

svc0OP2y ago

Universe packages are not supported by Ubuntu unless you activate Ubuntu Pro. Thus, if you install ffmpeg on Ubuntu without Pro, it will contain several active vulnerabilities. The full five years only applies packages in the main repo.

xinayder2y ago

I wanted to find another reason to not use Ubuntu for servers (besides Snap being forced on everyone) and this was it.

At least, in Debian, most of the packages I use on my server are from their main repos. Occasionally there are a few from other sources but by the time a new Debian patch is released, those other packages are also updated.

isaacremuant2y ago

That's absolutely terrible and not clear at all.

I've been tempted to go back to Arch and I think this can be a good motivator.

2 more replies

charcircuit2y ago

Universe is supported on a "best effort" basis.

https://ubuntu.com/security/esm

cvccvroomvroom2y ago

Just stop using Ubuntu. It's bullshit with shit governance run by crazy people.

For servers, CentOS is reliable as fuck.

cvccvroomvroom2y ago

This is why I tell everyone to avoid the psychos at Canonical and use either CentOS 9 Stream, Fedora, or Debian.

spicyusername2y ago

I fear for the future of Red Hat products.

IBM isn't exactly the most trustworthy steward.

sonicanatidae2y ago

Didnt CentOS...go away or am I confusing it with another distro?

smegsicle2y ago

centos used to be 1:1 clone of rhel sans branding, ibm replaced it with rolling release 'centos stream' upstream of rhel

now we have 'rocky linux' taking the place of old downstream centos as 1:1 bug-for-bug rhel compatible (against ibm's wishes)

and 'almalinux' building a stable release on top of centos stream (ibm seems to be ok with)

1 more reply

j / k navigate · click thread line to collapse

27 comments

dang2y ago

Related ongoing thread:

Ubuntu Pro Shenanigans - https://news.ycombinator.com/item?id=38254040 - Nov 2023 (92 comments)

wmf2y ago

Debian is looking better and better.

cycleslow2y ago

It always has. You can only convince a billionaire to hate money for so long. Mark is going to rip the rug out on everyone soon enough.

geokon2y ago

Except it doesn't really have PPAs ... which limits outside contribution and is a huge downside

gettodachoppa2y ago

What is the advantage of PPAs over an apt repo that users place in /etc/apt/sources.list.d/someexternalapp? Is it having a central site that users can search for packages? Basically a social portal?

1 more reply

apple4ever2y ago

Agreed. I'd love to switch to Debian, but the lack of PPAs makes it difficult.

Also Debian is always much further behind than Ubuntu on new packages.

extraduder_ire2y ago

IIRC, you can still add those repos. The PPA system just makes it a little easier to add them.

2 more replies

panarky2y ago

I'm so confused.

When I install an LTS version with a Universe package like ffmpeg, does everything continue getting security patches for the full five-year LTS life?

Or do I now need Ubuntu Pro to get the full five years?

svc0OP2y ago

xinayder2y ago

I wanted to find another reason to not use Ubuntu for servers (besides Snap being forced on everyone) and this was it.

isaacremuant2y ago

That's absolutely terrible and not clear at all.

I've been tempted to go back to Arch and I think this can be a good motivator.

2 more replies

charcircuit2y ago

Universe is supported on a "best effort" basis.

https://ubuntu.com/security/esm

cvccvroomvroom2y ago

Just stop using Ubuntu. It's bullshit with shit governance run by crazy people.

For servers, CentOS is reliable as fuck.

cvccvroomvroom2y ago

This is why I tell everyone to avoid the psychos at Canonical and use either CentOS 9 Stream, Fedora, or Debian.

spicyusername2y ago

I fear for the future of Red Hat products.

IBM isn't exactly the most trustworthy steward.

sonicanatidae2y ago

Didnt CentOS...go away or am I confusing it with another distro?

smegsicle2y ago

centos used to be 1:1 clone of rhel sans branding, ibm replaced it with rolling release 'centos stream' upstream of rhel

now we have 'rocky linux' taking the place of old downstream centos as 1:1 bug-for-bug rhel compatible (against ibm's wishes)

and 'almalinux' building a stable release on top of centos stream (ibm seems to be ok with)

1 more reply

j / k navigate · click thread line to collapse