66
submitted 3 months ago by [email protected] to c/[email protected]

Ubuntu's current LTS version (24.04) contains ffmpeg version 7:6.1.1-3ubuntu5 which has this buffer overflow vulnerability:

https://trac.ffmpeg.org/ticket/10952

https://ubuntu.com/security/CVE-2024-32230

On my only Ubuntu computer, my update widget says that I need to upgrade to ffmpeg version 7:6.1.1-3ubuntu5+esm2 but can only only do so with Ubuntu Pro. I'm not eligible for Ubuntu Pro.

Ubuntu claims that 24.04 is currently fully supported, and should have complete security updates. However, they seem to have paywalled this security update.

What should I do?

you are viewing a single comment's thread
view the rest of the comments
[-] [email protected] 49 points 3 months ago

Yes. Ubuntu has two main repos, main and universe.

main is relatively small and includes everything that comes with Ubuntu by default. Canonical secures this repo with security fixes for everyone.

universe is not officially supported by Canonical. It's updates are done by community members. However, Ubuntu started a service called Ubuntu Pro / ESM that provides updates for packages in universe. It's opt in because Canonical wants companies using Ubuntu to pay for Pro in order to help fund Ubuntu. However, Pro is also free for personal use on up to 5 machines, so there's no reason not to enable it. f it was enabled by default then no one would pay for it.

[-] [email protected] 0 points 3 months ago

However, Ubuntu started a service called Ubuntu Pro / ESM that provides updates for packages in universe.

Since it's all free software, what gives Ubuntu the privilege to restrict these updates behind paywalls and signups?

Pro is also free for personal use on up to 5 machines, so there’s no reason not to enable it.

Fuck that bullshit. We shouldn't be encouraging or enabling this behavior at all.

[-] [email protected] 17 points 3 months ago* (last edited 3 months ago)

GPL does not restrict you from selling the software, though you can't stop getting distributed by someone who bought it. Even RMS himself sold Emacs back in the day.

EDIT: I'm not saying it's justified in moral sense, I think it sucks ass. But it's not against the license.

[-] [email protected] -2 points 3 months ago

GPL does not restrict you from selling the software

Oh god, we know.

Practically speaking though, if anyone can redistribute it for free then it's available for free.

[-] [email protected] 2 points 3 months ago

You don't seem to understand the difference between free as in freedom and free as in beer that is literally the cornerstone of the free software community.

load more comments (3 replies)
load more comments (7 replies)
this post was submitted on 06 Mar 2025
66 points (92.3% liked)

Linux

55062 readers
831 users here now

From Wikipedia, the free encyclopedia

Linux is a family of open source Unix-like operating systems based on the Linux kernel, an operating system kernel first released on September 17, 1991 by Linus Torvalds. Linux is typically packaged in a Linux distribution (or distro for short).

Distributions include the Linux kernel and supporting system software and libraries, many of which are provided by the GNU Project. Many Linux distributions use the word "Linux" in their name, but the Free Software Foundation uses the name GNU/Linux to emphasize the importance of GNU software, causing some controversy.

Rules

Related Communities

Community icon by Alpár-Etele Méder, licensed under CC BY 3.0

founded 6 years ago
MODERATORS