News for hackers. Stuff that matters.

A comment on Some Ubuntu security patches are now behind 'Ubuntu Pro', a paid product. Parent comment

Re:Some Ubuntu security patches are now behind 'Ubuntu Pro',... by josephcsible on Tuesday January 31, 2023 @11:58PM (#34606565)
> Canonical has never provided security updates for universe packages until this week

Is that true, though? Until now, wasn't it just that they weren't guaranteed? Didn't Canonical make security patches available in universe on a "best-effort" basis, or at least say they did?

[ Parent | on HN ]
Re:Some Ubuntu security patches are now behind 'Ubuntu Pro',... by failsecure on Wednesday February 01, 2023 @06:12PM (#34619485)
I'm not sure as I've never followed how OSS projects get patched w.r.t security in particular. I've always groaned at my employer for running EOL operating systems and tell them about upgrading to a supported OS to prevent getting into this type of situation.

My reasoning was that if we were running a supported version of $oss_project then we'd get security updated naturally.

[ Parent | on HN ]