News for hackers. Stuff that matters.

A comment on Ubuntu 20.04 LTS’ snap obsession has snapped me off of it. Parent comment

Re:Ubuntu 20.04 LTS’ snap obsession has snapped me off of it by scrappyjoe on Saturday May 02, 2020 @12:25PM (#23052734)
18.04 has a ten year extended security maintenance life AFAIK, so you could stretch to 2028.
[ Parent | on HN ]
Re:Ubuntu 20.04 LTS’ snap obsession has snapped me off of it by danieldk on Saturday May 02, 2020 @12:46PM (#23052970)
Ubuntu security updates do not cover the universe repository, which contains the largest number of packages. The universe repo is 'community-supported', which means that a lot of CVEs are not fixed in practice.

https://people.canonical.com/~ubuntu-security/cve/universe.h...

So, Ubuntu's LTS support is only relevant security-wise if you mostly stick to the main repository.

[ Parent | on HN ]
Re:Ubuntu 20.04 LTS’ snap obsession has snapped me off of it by oarsinsync on Saturday May 02, 2020 @01:04PM (#23053133)
Anyone have any idea what Debian's LTS security posture looks like? Is it also restricted to 'main' and does it also ignore 'contrib' and 'non-free'?
[ Parent | on HN ]
Re:Ubuntu 20.04 LTS’ snap obsession has snapped me off of it by danieldk on Saturday May 02, 2020 @01:16PM (#23053244)
Similar policy:

https://www.debian.org/security/faq#contrib

However most packages in Debian are in main. AFAIK contrib is for FLOSS packages that somehow depend on packages that are not FLOSS.

[ Parent | on HN ]
Re:Ubuntu 20.04 LTS’ snap obsession has snapped me off of it by eitland on Saturday May 02, 2020 @12:39PM (#23052901)
Wow, that's seriously impressive if true.

As many others I haven't liked vanilla Ubuntu since they swapped Gnome 2 for a (what I think is a) clone of the Mac OS interface, but my desktop still uses the Ubuntu 18.04 base system under the hood so this might come in handy for a number of people like me.

[ Parent | on HN ]