[00:31] hi everyone, i have an old ubuntu precise (12.04) installation (i know it should be upgraded/replaced), which does now show that updates are available [00:31] the last time i checked for updates was on 2020-11-30 [00:32] for most updates i found USNs (like for the sudo package or linux-image-server) that mention updates even for this outdated release [00:32] (the machine has no ESM subscription, but that should not matter for ubuntu precise anymore) [00:33] i appreciate the maintainer's work [00:33] but for e.g. apache2, i only found this dsa: https://ubuntu.com/security/notices/USN-3937-2 [00:34] stating that version 2.2.22-1ubuntu1.15 of the apache2 package was available through a ESM subscription [00:35] why can this update be installed in my ubuntu precise installation as of now? [00:35] i'm just asking to not accidentally install something wrong (e.g. from a different version) and messing up that installation... [00:39] i guess the general question would be: what happens to with the subscriber-only updates when an ubuntu version leaves ESM support? Are some of them uploaded to http://old-releases.ubuntu.com/ubuntu/? [01:21] erbth: yes, when precise went out of ESM status, we incorporated all of the ESM updates into precise-security before moving them to old-releases.ubuntu.com. [01:33] sbeattie: that is a nice service from you! [01:33] and thank you very much for your response. [13:18] Hello. Is gufw sufficient for ordinary home users? [13:31] If you'll take a non security team member response to this: Having no host firewall at all *can* be sufficient for ordinary home users, and gufw can improve security, or worsen it (by giving a false sense of it, such as when ip forwarding configurations are used). [13:58] tomreyn, well, you're certainly many times smarter/experienced than me, so I'd take your response as a positive. thanks [14:00] i doubt the "smarter" part there. ;) [17:57] gufw isn't a particularly good GUI really [17:58] unless it got changed a lot since I last looked at it :) [17:58] which is a long time ago, I guess [18:02] seems like it improved, but still... [18:36] to be fair a simple home firewall solution is just `sudo ufw enable` [18:36] which is what gufw's on button does [18:37] but gufw has a long way to go as its ui is still a meh gui for ufw