Questions tagged [esm]

ESM is short for "Expanded Security Maintenance". This tag should only be used for questions about how to activate and configure an Ubuntu Pro subscription to allow for ESM updates. Please note that questions about Ubuntu releases past the 5-year LTS period (but in the 10-year ESM period) are OFF-TOPIC for this site.

ESM (Expanded Security Maintenance) is the terminology used by Canonical for the commercial subscription that offers 10 years of security patches for applications in the main and universe repositories, instead of the usual 5 years granted by LTS releases.

ESM is a part of the subscription, and Canonical refers to applications covered by this subscription as "ESM Apps".

Canonical information about ESM.

48 questions
83
votes
1 answer

What are ESM Apps, and how do they relate to Ubuntu Pro?

Since January 2023, there have been some questions mentioning ESM Apps, that seem to have caused confusion among myself and others (one example here). On running sudo apt update, users will get a notification similar to this, stating that several…
Artur Meinild
  • 31,035
38
votes
6 answers

Inhibit ESM messages at login

I would like to inhibit the generation of the following messages when I ssh into my machine Expanded Security Maintenance for Applications is not enabled. Enable ESM Apps to receive additional future security updates. See https://ubuntu.com/esm or…
25
votes
1 answer

What are the services 'apt-news' and 'esm-cache', and how do I disable them?

Recently, I've noticed that when I run sudo apt update, an extra 6 lines are written to my syslog each time: Jan 29 21:17:01 xb systemd[1]: Starting Update APT News... Jan 29 21:17:01 xb systemd[1]: Starting Update the local ESM caches... Jan 29…
Artur Meinild
  • 31,035
10
votes
2 answers

Is ESM available for free for personal use?

I'm unclear whether ESM (Extended Security Maintenance) for Ubuntu is actually free for personal use, or is it always a paid solution?
warsong
  • 427
8
votes
1 answer

When will CVE message stop showing?

I'm still receiving the following upon sudo apt upgrade: # Canonical released microcode updates for both Intel (CVE-2022-40982) and AMD # (CVE-2023-20593). ‘Unattended upgrades’ provide security updates by default. # Ensure it remains enabled to…
jasmines
  • 11,311
8
votes
3 answers

ESM 401 Unauthorized error on Ubuntu 16.04

I want to upgrade my Ubuntu 16.04 server to Ubuntu 18.04 and I'm running the following commands to do so; apt update -y apt upgrade -y do-release-upgrade apt update command runs fine with the following output; # apt update -y Hit:1…
8
votes
2 answers

How to get Extended Security Maintenance for Ubuntu 16.04

I am not ready to move on from Ubuntu 16.04 quite yet, However I want to keep my OS secure. How do I activate Extended Security Maintenance, (ESM)?
C.S.Cameron
  • 20,530
  • 12
  • 78
  • 125
7
votes
1 answer

Where do I get the source for ESM packages?

My home server is running Ubuntu 22.04 (Jammy) and is enrolled in Ubuntu Pro. alan@earth:~$ pro status SERVICE ENTITLED STATUS DESCRIPTION esm-apps yes enabled Expanded Security Maintenance for Applications esm-infra …
popey
  • 24,549
6
votes
2 answers

How to enable ESM on Xenial?

Ubuntu Xenial enters ESM mode as it stated at the official Ubuntu blog post. I'm trying to set up ESM to get ready for that but ubuntu-advantage tool says # ubuntu-advantage enable-esm Sorry, but Extended Security Maintenance is not supported on…
CaptainRR
  • 163
6
votes
1 answer

Where to find changelog for ESM kernel and packages

The last kernel for 14.04 LTS is 3.13.0-170, and the latest kernel for 14.04 ESM is 3.13.0-184. Where can I find the changelog for ESM kernels and packages to understand what has been fixed in these newer releases?
Howard
  • 61
6
votes
2 answers

Will ESM also become available for14.04 and later LTS releases? (Covers 2022)

ESM is available for 12.04, which enables Ubuntu Advantage customers to keep receiving kernel updates and updates for many user space packages. In our case it's very important to know if we'll be able to use Ubuntu 14.04 safely after April 19,…
5
votes
1 answer

Will ESM patches eventually be shared with the community?

I think I understand the basic mechanics of the ESM service, but what the patches Canonical provides are unclear. I can imagine 2 scenarios under the release ESM model, and wonder which (if either) it is. Is it, Canonical will create fixes, but…
5
votes
3 answers

How to find what packages need ESM update

When I log into my Ubuntu 18.04 LTS system, I get this message: 5 additional security updates can be applied with ESM Apps. Learn more about enabling ESM Apps service at https://ubuntu.com/esm My question is how I find out what packages need these…
DDP
  • 53
4
votes
1 answer

Ubuntu 16.04 - Apply ESM security patches only using unattended-upgrade

We have purchased ESM for a number Ubuntu 16.04 servers, installed Ubuntu Advantage Tools and enabled UA. How can I install only security patches including ESM using unattended-upgrade command? We don't want to run 'apt-get upgrade'
tmaulik
  • 41
3
votes
1 answer

With the release of Ubuntu Pro, Laravel Forge provisioned servers are left vulnerable

Since Canonical released Ubuntu Pro this year, they are now withholding some security patches for many common packages, including some that are included on Laravel Forge provisioned servers. I use AWS Inspector to monitor for vulnerabilities on my…
1
2 3 4