universe repository security and ubuntu-pro

[Oliver Grawert]

hi,
Am Freitag, dem 24.11.2023 um 14:46 +0000 schrieb Chandra Amarasingham
via ubuntu-users:
> Hi,
> 
> I am trying to understand the difference between general use of the 
> universe repository and ubuntu pro usage.  I am wondering if the
> security fixes delivered under ubuntu pro would also get to the
> general universe repository at some point?  or am I misunderstanding
> things completely?
> Chandra

universe is and has always been "community maintained", that means
security fixes there are done by the community ... out of the 25k
packages in there i'd guess about 100-200 usually see security fixes
during the lifecycle of an LTS ... 

if you dont pick pro, this stays as it has always been for you, you get
these approximately 1-200 fixes, nothing changed ... 

if you subscribe to pro (free for home and small business use up to 5
machines) you get the full set of security fixes.

while these also get submitted upstream, so that community maintainers
*could* pick them up from there for non-pro use. i doubt the 1-200
number will actually rise a lot (since this is more a manpower thing of
volunteers than anything else) 

pro actually enables additional archives and the work in there is paid
for by bigger companies (the ones that do not fall under the 5
machines). the work is done by the canonical security team so that you
and me can freely participate, i.e. it is an extra goodie for non-
paying customers, but to make sure big players do not abuse it it is
behind a subscription wall...

ciao
	oli 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: This is a digitally signed message part
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20231124/0b608341/attachment.sig>