post
It sure seems that way. Their "extended security maintenance" spam says that there are security updates that are only available if you "subscribe".
I asked the Linux community about this, and didn't get a straight answer (not surprised.)
It was enough for me to switch to Debian, though. There's no excuse for updates to be locked behind paywalls or sign-ups in the free software ecosystem.
The way I understand it is that the security team supports releases for 5 years. If you are running an older version of ubuntu than that and want security backports, you need to get the extended support. The difference in Debian is that when a release is too old, the security team simply doesn't backport security fixes. You can pay someone to do it, but it's not a part of what Debian as a project does.
The Ubuntu security team only supports the ~2,000 packages in "main"
Things like ffmpeg are in "universe" and only get security updates if you subscribe to Ubuntu Pro
ubuntu.com/security/esm
Debian's security team has always been significantly more responsive than Ubuntu. It's regularly had CVE fixes in older versions of Debian that newer versions of Ubuntu don't bother to pull into universe
There’s no excuse for updates to be locked behind paywalls or sign-ups in the free software ecosystem.
Of course because you are also working for free, right? Btw. Ubuntu PRO is free for up to 5 devices....
And people ask me "why" when I chose LMDE over Ubuntu-based Linux Mint.
This shit is why. Canonical is huffing their own farts at this point. Don't dangle shit in front of me if it comes at a price. And yes, I know Linux Mint isn't under Canonical, but at this point I would rather not support anything Ubuntu-related.
You only get security updates for packages in main. If you want them for packages in universe, like ffmpeg, you have to use esm or upgrade to 24.10.
Anybody can get Ubuntu Pro for free on up to five devices: https://ubuntu.com/pro/subscribe
Why Ubuntu pro when you can have Linux Mint for free indefinitely
Ubuntu pro provides support after 5 years of standard LTS support. Linux Mint does not provide any support (paid nor free) after the first 5 years so the comparison does not really make sense.
It's the difference in OS version;
- 24.04 has ffmpeg_6.1.1-3ubuntu5
- 24.10 has ffmpeg_7.0.2-3ubuntu1
So if you want ffmpeg from main, upgrade to 24.10, otherwise you can only get ffmpeg in 24.04 by waiting until its added to main, using Ubuntu Pro, or compiling from source.
All distros have security vulnerabilities. It's the nature of software. Minimizing the risk is the best you can do.
all 32 comments