3 ms·

> This confirms that our machine is receiving all updates until 2027 I believe the author is mistaken here; they are receiving updates only for "main" reposito

by zokier 3y ago

> This confirms that our machine is receiving all updates until 2027 I believe the author is mistaken here; they are receiving updates only for "main" repository, and not for "universe". The example "ffmpeg" package belongs to "universe". The UI seems bit confusing because it doesn't seem to show what the version available through ESM/Ubuntu Pro would be, but exploring the repository manually shows that for example for ffmpeg there is "Version: 7:4.4.2-0ubuntu0.22.04.1+esm2" available, a different version than what is available in the standard repositories.

rlpb 3y ago
Indeed, and you can see for example something that is fixed by that version here: https://ubuntu.com/security/CVE-2022-48434 https://ubuntu.com/security/CVE-2022-48434
imurray 3y ago
As a reward for installing ESM/Ubuntu Pro, that version of ffmpeg will break vlc: https://bugs.launchpad.net/ubuntu/+source/ffmpeg/+bug/2042743 https://bugs.launchpad.net/ubuntu/+source/ffmpeg/+bug/204274... Manually upgrading the source .deb to the (ABI compatible) ffmpeg 4.4.4 and compiling gets all the security fixes and seems to work. It looks like backporting just the security fixes was done incorrectly in Ubuntu's ESM release. My main concern with ESM/Ubuntu Pro is that patches don't get as much community scrutiny and help as other updates. In this case it's broken a fairly major piece of software on what's supposed to be a super-stable LTS release.
- deleted 3y ago
  [deleted]