2 ms·

Ubuntu security updates do not cover the universe repository, which contains the largest number of packages. The universe repo is 'community-supported', which m

Ubuntu security updates do not cover the universe repository, which contains the largest number of packages. The universe repo is 'community-supported', which means that a lot of CVEs are not fixed in practice. https://people.canonical.com/~ubuntu-security/cve/universe.html https://people.canonical.com/~ubuntu-security/cve/universe.h... So, Ubuntu's LTS support is only relevant security-wise if you mostly stick to the main repository.

oarsinsync 6y ago
Anyone have any idea what Debian's LTS security posture looks like? Is it also restricted to 'main' and does it also ignore 'contrib' and 'non-free'?
- danieldk 6y ago
  Similar policy: https://www.debian.org/security/faq#contrib https://www.debian.org/security/faq#contrib However most packages in Debian are in main. AFAIK contrib is for FLOSS packages that somehow depend on packages that are not FLOSS.