Questions tagged [esm]

ESM is short for "Expanded Security Maintenance". This tag should only be used for questions about how to activate and configure an Ubuntu Pro subscription to allow for ESM updates. Please note that questions about Ubuntu releases past the 5-year LTS period (but in the 10-year ESM period) are OFF-TOPIC for this site.

ESM (Expanded Security Maintenance) is the terminology used by Canonical for the commercial subscription that offers 10 years of security patches for applications in the main and universe repositories, instead of the usual 5 years granted by LTS releases.

ESM is a part of the subscription, and Canonical refers to applications covered by this subscription as "ESM Apps".

Canonical information about ESM.

49 questions
3
votes
1 answer

With the release of Ubuntu Pro, Laravel Forge provisioned servers are left vulnerable

Since Canonical released Ubuntu Pro this year, they are now withholding some security patches for many common packages, including some that are included on Laravel Forge provisioned servers. I use AWS Inspector to monitor for vulnerabilities on my…
3
votes
1 answer

Extended Security Maintenance (ESM) Audit

I have run into a strange situation I was hoping someone could help with. I have an audit being run on our appliance running Ubuntu 12.04 ESM. I am told the the ESM version of Ubuntu is installed but I need to prove this to our Secuirty audit team.…
Jared
  • 33
2
votes
0 answers

Sudo apt upgrade caused a migration to Ubuntu 24, which failed

I was on Ubuntu 22 LTS. I made a sudo apt upgrade , then noticed there was no more the button to power off in the upper right menu and so shut down violently (the applications were closed though) When I turned the PC on again, I got only a Ubuntu…
Zlotz
  • 121
2
votes
2 answers

ESM apps are disabled, even though they are enabled

The image explains it all, I've activated esm-apps, although it doesn't seem like they're activated. On pro status it says they're on, but when I'm logging to my PC it clearly says they're disabled.
2
votes
1 answer

How to update ESM apps?

I recently installed Ubuntu and while going through the documents on getting started I encountered this: Installed packages with an available esm-apps update: libavcodec58 libavfilter7 libavformat58 libavutil56 libpostproc55 libswresample3…
2
votes
1 answer

Why am I getting ESM updates 1 year into a LTS release?

From my knowledge, ESM messages should not appear until 5 years into an LTS release but I am getting these messages when running apt upgrade . I removed apt ESM hook after backing it up and the message is removed. Why did the updates for these…
Usermaxn
  • 247
2
votes
2 answers

Getting Errors trying to attach ua token

I am trying to enable ESM on my 16.04 VPS server, but I am getting errors trying to connect to the canonical server. The error I am getting after running the ssh command # sudo ua attach C122..... is: Failed to connect to authentication server Check…
Tezalsec
  • 21
  • 1
  • 2
2
votes
2 answers

ESM needed: more payment options for Ubuntu Advantage subscription, besides by credit card number?

The problem: for security reasons, as a general rule my bank (BNL-BNP Paribas) does no longer support payments made online by credit card. Nonetheless, I can still use my credit card for online orders with payment made through PayPal, since my…
2
votes
0 answers

Extended Security Maintenance (ESM) for focal fossa (20.04)

I just ran ubuntu-security-status on a 20.04 installation learnt to enable ESM to get more security updates: 4667 packages installed, of which: 1962 receive package updates with LTS until 4/2025 2694 could receive security updates with ESM Apps…
frukto
  • 21
1
vote
2 answers

How do I get package updates from Ubuntu Pro

We installed tomcat9 and nginx from the Ubuntu package manager and soon realised that the package versions available didn't have the latest security and patches. We then subscribed to ubuntu pro esm-apps which is supposed to have the latest security…
hoz
  • 129
  • 5
1
vote
1 answer

apt upgrade fail with 401 on https://esm.ubuntu.com/infra/ubuntu

I am trying to do a sudo apt update sudo apt upgrade However there are a lot of messages saying that I am not authorized against https://esm.ubuntu.com/infra/ubuntu Err:3 https://esm.ubuntu.com/infra/ubuntu bionic-infra-security/main amd64…
qkhanhpro
  • 111
1
vote
1 answer

What does ESM actually cover?

The ESM webpage ( https://ubuntu.com/security/esm ) is inconsistent. These statements are all on that page: ESM enables continuous vulnerability management for critical, high and medium CVEs. (COVERAGE FOR CRITICAL, HIGH AND SELECTED MEDIUM CVES )…
1
vote
1 answer

Enable esm-apps on armhf

Since recently, it seems to be possible to get updates for software in universe by attaching it to a (free) Ubuntu Pro subscription. This has worked on my desktop (amd64), so I also tried to do it on my NAS (armhf). Attaching the device has worked,…
YtvwlD
  • 290
1
vote
1 answer

Is it safe to use Ubuntu desktop when it is in ESM stage?

Question in short What are the real life (security) risks of using Ubuntu ESM for personal use (Ubuntu for desktop) and what to look out for in general to keep the system secure? Do I need to do anything special and are there any pitfalls if I want…
tnagy.adam
  • 2,268
  • 2
  • 17
  • 14
1
vote
1 answer

Ubuntu 16.04 support past 2021 into 2024

I'd like to know the exact steps that need to be taken to get Ubuntu 16.04 LTS support past April 2021 through to the year 2024 . I've read about Extended Security Maintenance (ESM) and this sounds like a viable option. Can anyone spell out the…