I mean some software needs to be patched due to certain requirements—let's put it that way. Ubuntu does not provide free patches for several CVEs For example, let's check CVE-2024-32230 For this security vulnerability, there is no free patch available on Ubuntu 24.04—you need to purchase Ubuntu Pro - ThreadSky

cyberpunk.tools • 16 hours ago

I mean some software needs to be patched due to certain requirements—let's put it that way. Ubuntu does not provide free patches for several CVEs

For example, let's check CVE-2024-32230 For this security vulnerability, there is no free patch available on Ubuntu 24.04—you need to purchase Ubuntu Pro

Comments

cyberpunk.tools•16 hours ago

Again, even if I wanted to buy Ubuntu Pro, their pricing page is confusing, to say the least. All it lists is Workstation, WSL, and Server with unlimited VMs. My particular server/instance doesn’t fit any of those descriptions.

cyberpunk.tools•16 hours ago

On top of that, it’s not just me with this question—I’ve seen other users wondering the same thing on the Ubuntu subreddit.

younelan.bsky.social•7 hours ago

It's just their way of saying we have personal user and business users... have as many vms as you want (could be 0 VMs. As opposed to other OS vendor charge extra per processor, per vm. Some vendors have very confusing and complex schemes)

cyberpunk.tools•1 hour ago

Well, that’s your assumption, and I don’t think it’s correct. You can assume whatever you want, but in the end, it just proves one thing—their pricing is a mess.

younelan.bsky.social•7 hours ago

According to tracker looks like they fixed it. That said, it's really an ffmpeg problem and a local vulnerability. Even if they hadn't, nothing prevents you from compiling ffmpeg (which I have a few times for different reasons(
https://ubuntu.com/security/CVE-2024-32230

cyberpunk.tools•1 hour ago

Not sure what you’re looking at, but this is fixed in Ubuntu Pro, and you need to buy a license to get that fix—no free fix is available. Again, compiling isn’t really a solution because then you can’t install any package that depends on ffmpeg, and you’d have to compile that too. It’s not that easy

cyberpunk.tools•1 hour ago

Even if you get this particular CVE fixed by compiling ffmpeg with all upstream dependencies, the problem is that Ubuntu has other vulnerabilities that aren’t fixed in the free version. So you could end up compiling half the operating system just to patch all the vulnerabilities

cyberpunk.tools•1 hour ago

Then, obviously, you’ll want to update all your applications and libraries once a month or so. Now you not only need to run apt-get update but also download all the sources for everything you compiled and recompile them again. And just imagine for a second that this is a live production server.

Comments

Posting Rules

Reply