Top
Best
New

Posted by chalmovsky 15 hours ago

WTF Ubuntu?(chalmovsky.com)
1400 points | 598 commentspage 13
mogwire 11 hours ago|
Where is my cup to collect all these tears from people upset about free software not getting fixed fast enough?

I wonder what is slower, these people pulling out a credit to pay something or ubuntu fixing their issue?

myersj 11 hours ago|
Probably right next to your reading glasses, my dude.

Maybe grab those first, though.

mogwire 11 hours ago||
They are on my face. It's how I read a blog post and comments of people who are complaining that free software isn't being updated fast enough for them.

WTF Ubuntu! I'm not paying you for updates... so where the fuck are my updates bro?!

gonzalohm 15 hours ago||
"The free operating system that I use is not giving me enterprise level security updates"

I believe you can contribute to Ubuntu's source code right? Why don't you fix the issue then?

the__alchemist 15 hours ago||
This doesn't work in practice. That's not really how OSS works; it's a naive interpretation. I can go into details if you'd like, but first: Have you taken this approach before? What were the results? I find it usually ends up in discussions/arguments with the owners, and it doesn't get merged. And I see the other side too; reviewing PRs is a burden, and the submitters often will fix their own problem, while introducing complexity or problems elsewhere. Also, it's generally MUCH easier for a maintainer/owner to update software than a rando who wants a bug fixed.
baron3dl 14 hours ago||
I fix it for myself, share it upstream, and have no fucks to give if the gatekeepers review it, reject it, merge it, or belch any purity bullshit in between.

The beauty of OSS is that you don't need permission from anyone to modify the code to your own needs.

methyl 14 hours ago||
Then you build the iso yourself and distribute to every cloud platform? It’s not always that simple.
hobo123 14 hours ago|||
Wouldn't it literally be as simple as hosting a ppa archive with your custom kennel on it and adding that ppa to all target systems?
baron3dl 13 hours ago|||
The glory of OSS is that "you can, if you must" is the answer to every possible what if you can encounter or imagine.
swiftcoder 14 hours ago|||
> "The free operating system that I use is not giving me enterprise level security updates"

Canonical absolutely is marketing enterprise security updates (at least for those who pay). I don't see this in the paid ESM updates channel yet either?

grey-area 14 hours ago|||
Their main point is that Canonical do in fact charge for security updates (they charge some companies for support), and yet are not providing them.
annex-winged-cr 14 hours ago|||
From the article:

> Oh and btw, distros run by volunteers (Debian, Arch, Alpine...) hve shipped the fix. Meanwhile Ubuntu, made by a company that sells security subscriptions, hasn't. This is true as of 2026-11-02 14:48 UTC.

rcxdude 14 hours ago|||
Ubuntu is one of the larger companies in the OS space and advertises themselves as providing long term support with rapid security fixes. AFAIK they haven't released a fix for their paying customers either. If they were complaning about arch or debian then I think you would have a strong point, when those distros have fast fixes but ubuntu doesn't I'm not so sure they that criticism of ubuntu is unwarranted.

(Also, ubuntu already has the fix. What they're dragging their feet on is releasing the updated version. I don't think anyone outside ubuntu can help with that process)

bortimus 14 hours ago|||
Getting commit rights for kernel to "just fix the issue" in a corporate led dev project.

Let's see you do it.

eddythompson80 14 hours ago||
Probably depends on the company. Plenty love to publish useless blog posts about how “We, a SaaS company that produces React components, fixed a vulnerability in Ubuntu Kernel” because we’re involved in all of our tech stack like that. Linux kernel, node and react is our stack and we take ownership of it seriously dawg.
kennywinker 14 hours ago|||
Two weeks late is hardly “enterprise level”

If they don’t have the resources to handle this, they should be recruiting more help from their community

ande-mnoc 14 hours ago|||
> The free operating system

Ubuntu Pro is $500 per machine for enterprise.

hobo123 14 hours ago|||
https://www.gnu.org/philosophy/free-sw.html.en
ande-mnoc 13 hours ago||
Do you understand what an enterprise software support contract is?
gonzalohm 13 hours ago|||
Which OP doesn't pay, as they claim they use Ubuntu because it comes as default with VPS
ande-mnoc 11 hours ago||
I don’t think the paying customers are getting the patch either.
spider-mario 14 hours ago|||
The code that fixes the issue has already been published: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/lin...

Just not picked up by this distribution which advertises itself as having “Enterprise-grade support and integration”. https://ubuntu.com/desktop#:~:text=Enterprise%2Dgrade%20supp...

nottorp 14 hours ago||
But this is C, they're busy porting the patch to Rust...
vanschelven 14 hours ago|||
The most famous not-free-as-in-beer OS that specifically marks enterprise as their target market actually only fixed this yesterday... whatever you may want to take from that.
ivanjermakov 14 hours ago|||
Ubuntu is not a small open source project ran by maintainers, Canonical is a full fledged b2b company with 600+ employees.
vikramkr 14 hours ago|||
Canonical ltd is a multinational tech company with hundreds of millions of dollars in revenue from enterprise contracts
nikanj 14 hours ago||
No updates for paying users of Ubuntu Pro either
Aldipower 11 hours ago|
Calm down, man. I think Ubuntu is doing o.k. here. What is pretty bad that people cannot read advisories anymore and fix there machines, instead crying for their mama (in this case Ubuntu).

Use this firewall rule and you are fine - it blocks the tcp options negoation - and things remain working of course: ` nft add table ip cve_2026_98432 nft add chain ip cve_2026_98432 pre '{ type filter hook prerouting priority -300; }' nft add rule ip cve_2026_98432 pre meta l4proto tcp ip hdrlength gt 5 counter drop `