There are pros and cons of the LTS approach. A big CON is that even on Ubuntu LTS, lots of softare is incredibly out of date and full of unpatched security vul

There are pros and cons of the LTS approach. A big CON is that even on Ubuntu LTS, lots of softare is incredibly out of date and full of unpatched security vulnerabilities. Consider Roundcube, probably the most popular PHP email web client. On Ubuntu 18.04 LTS the last update is from, well, April 2018: https://packages.ubuntu.com/bionic/roundcube https://packages.ubuntu.com/bionic/roundcube Now consider the amount of CVEs (remote code execution and XSS) published for Rouncube since then, which are all unpatched in that Ubuntu: https://www.cvedetails.com/vulnerability-list/vendor_id-8905/Roundcube.html https://www.cvedetails.com/vulnerability-list/vendor_id-8905... If you are running Ubuntu LTS on your server, that's a big problem. The `roundcube` package is in the `universe` repository, meaning "community maintained". In this case for this LTS that meant "no security updates at all for 3 years". The newer LTS, 20.04, doesn't seem to have those CVEs fixed either.