Extended Security Maintenance

Security updates for 14.04 LTS until 2022

Continue to receive security updates for the Ubuntu base OS and critical infrastructure components – Ceph, OpenStack and more – with ESM in your Ubuntu Advantage subscription.

Ubuntu Advantage for Infrastructure is available for physical servers, virtual machines, containers, and desktops. Free for personal use.

Get started with Ubuntu Advantage

CASE STUDY

ITstrategen keeps their applications secure with ESM

The security of customer data is of utmost importance to ITstrategen. That’s why Ubuntu is their server operating system of choice.

Read the case study

CASE STUDY

ITstrategen keeps their applications secure with ESM

The security of customer data is of utmost importance to ITstrategen. That’s why Ubuntu is their server operating system of choice.

Read the case study ›

Free for personal use

Canonical provides Ubuntu Advantage Essential subscriptions, which include ESM, free of charge for individuals on up to 5 machines. For our community of Ubuntu members we will gladly increase that to 50 machines. Your personal subscription will also cover Livepatch, FIPS and CIS hardening tools.

Get ESM now

What’s covered?

ESM continues security updates for:

  • high and critical CVEs (Common Vulnerabilities and Exposures), in
  • the Ubuntu base OS and scale-out infrastructure (Ceph, Openstack, see the complete list), on
  • the 64-bit x86 architecture.

Common questions

Do all levels of Ubuntu Advantage for Infrastructure have access to Ubuntu ESM?

Yes. Ubuntu ESM is available for UA-I Essential, Standard and Advanced customers. For more information on levels please visit our pricing page. Existing UA customers can request their credentials through the Canonical support portal.

How can we ensure the security of our Ubuntu systems after the end of Standard Security Maintenance?

Sign up to Ubuntu Advantage now, and you will benefit from UA services immediately without having a gap in service when a particular release reaches the end of its Standard Security Maintenance window. For more details of initial release dates and maintenance cadence, see wiki.ubuntu.com/Releases. Ubuntu Advantage is available at buy.ubuntu.com and through the AWS Marketplace.

How long will Ubuntu ESM be maintained?

This depends on the release. Ubuntu 14.04 (Trusty Tahr) and 16.04 (Xenial Xerus) will have updates provided for up to three years after the end of the Standard Security Maintenance window. Ubuntu 18.04 (Bionic Beaver) and subsequent releases until further announcement will have ESM updates provided for up to five years.

Is it possible to purchase Ubuntu ESM months down the road when needed, with or without backdating the cost, or does it need to be in place in advance?

You can purchase Ubuntu Advantage support at any time. It does not need to be in place in advance, although we strongly recommend you eliminate the gap between when Ubuntu ESM is enabled on your system(s), to avoid exposing your systems to security vulnerabilities. Ubuntu Advantage is priced year-over-year so there is no backdating.

We're mirroring the repository on our internal Landscape server. Can we still get Ubuntu ESM if using Landscape?

ESM is just a regular Ubuntu archive, but authenticated and served over HTTPS. Archive mirroring is already available in Landscape and is a supported mechanism for mirroring the ESM archive.

Will source code for Ubuntu ESM patches be made available? If so, will that be publicly available on Launchpad or only through Ubuntu ESM?

Both the binary updates and source code will be available to Ubuntu ESM users. We honour all licenses associated with the open-source code in Ubuntu.

Secure your Ubuntu estate

If you would like to discuss ESM or Ubuntu Advantage please get in touch.