Remix.run Logo
▲ gonzalohm 6 hours ago

"The free operating system that I use is not giving me enterprise level security updates"

I believe you can contribute to Ubuntu's source code right? Why don't you fix the issue then?

▲the__alchemist 6 hours ago | parent | next [-]

This doesn't work in practice. That's not really how OSS works; it's a naive interpretation. I can go into details if you'd like, but first: Have you taken this approach before? What were the results? I find it usually ends up in discussions/arguments with the owners, and it doesn't get merged. And I see the other side too; reviewing PRs is a burden, and the submitters often will fix their own problem, while introducing complexity or problems elsewhere. Also, it's generally MUCH easier for a maintainer/owner to update software than a rando who wants a bug fixed.

▲baron3dl 6 hours ago | parent [-]

I fix it for myself, share it upstream, and have no fucks to give if the gatekeepers review it, reject it, merge it, or belch any purity bullshit in between.

The beauty of OSS is that you don't need permission from anyone to modify the code to your own needs.

▲methyl 6 hours ago | parent [-]

Then you build the iso yourself and distribute to every cloud platform? It’s not always that simple.

▲baron3dl 5 hours ago | parent | next [-]

The glory of OSS is that "you can, if you must" is the answer to every possible what if you can encounter or imagine.

▲hobo123 6 hours ago | parent | prev [-]

Wouldn't it literally be as simple as hosting a ppa archive with your custom kennel on it and adding that ppa to all target systems?

▲swiftcoder 6 hours ago | parent | prev | next [-]

> "The free operating system that I use is not giving me enterprise level security updates"

Canonical absolutely is marketing enterprise security updates (at least for those who pay). I don't see this in the paid ESM updates channel yet either?

▲grey-area 6 hours ago | parent | prev | next [-]

Their main point is that Canonical do in fact charge for security updates (they charge some companies for support), and yet are not providing them.

▲annex-winged-cr 6 hours ago | parent | prev | next [-]

From the article:

> Oh and btw, distros run by volunteers (Debian, Arch, Alpine...) hve shipped the fix. Meanwhile Ubuntu, made by a company that sells security subscriptions, hasn't. This is true as of 2026-11-02 14:48 UTC.

▲rcxdude 6 hours ago | parent | prev | next [-]

Ubuntu is one of the larger companies in the OS space and advertises themselves as providing long term support with rapid security fixes. AFAIK they haven't released a fix for their paying customers either. If they were complaning about arch or debian then I think you would have a strong point, when those distros have fast fixes but ubuntu doesn't I'm not so sure they that criticism of ubuntu is unwarranted.

(Also, ubuntu already has the fix. What they're dragging their feet on is releasing the updated version. I don't think anyone outside ubuntu can help with that process)

▲bortimus 6 hours ago | parent | prev | next [-]

Getting commit rights for kernel to "just fix the issue" in a corporate led dev project.

Let's see you do it.

▲eddythompson80 5 hours ago | parent [-]

Probably depends on the company. Plenty love to publish useless blog posts about how “We, a SaaS company that produces React components, fixed a vulnerability in Ubuntu Kernel” because we’re involved in all of our tech stack like that. Linux kernel, node and react is our stack and we take ownership of it seriously dawg.

▲kennywinker 6 hours ago | parent | prev | next [-]

Two weeks late is hardly “enterprise level”

If they don’t have the resources to handle this, they should be recruiting more help from their community

▲ande-mnoc 6 hours ago | parent | prev | next [-]

> The free operating system

Ubuntu Pro is $500 per machine for enterprise.

▲hobo123 6 hours ago | parent | next [-]

https://www.gnu.org/philosophy/free-sw.html.en

▲ande-mnoc 5 hours ago | parent [-]

Do you understand what an enterprise software support contract is?

▲gonzalohm 4 hours ago | parent | prev [-]

Which OP doesn't pay, as they claim they use Ubuntu because it comes as default with VPS

▲ande-mnoc 3 hours ago | parent [-]

I don’t think the paying customers are getting the patch either.

▲spider-mario 6 hours ago | parent | prev | next [-]

The code that fixes the issue has already been published: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...

Just not picked up by this distribution which advertises itself as having “Enterprise-grade support and integration”. https://ubuntu.com/desktop#:~:text=Enterprise%2Dgrade%20supp...

▲nottorp 6 hours ago | parent [-]

But this is C, they're busy porting the patch to Rust...

▲vanschelven 6 hours ago | parent | prev | next [-]

The most famous not-free-as-in-beer OS that specifically marks enterprise as their target market actually only fixed this yesterday... whatever you may want to take from that.

▲ivanjermakov 6 hours ago | parent | prev | next [-]

Ubuntu is not a small open source project ran by maintainers, Canonical is a full fledged b2b company with 600+ employees.

▲vikramkr 6 hours ago | parent | prev | next [-]

Canonical ltd is a multinational tech company with hundreds of millions of dollars in revenue from enterprise contracts

▲nikanj 6 hours ago | parent | prev [-]

No updates for paying users of Ubuntu Pro either