[10:03] <ogra> enigma9o7, a) universe CVE updates have not existed before, this is a brand new thing that a bitg team in canonical works on b) that team needs to be paid by soeone, which is why it is behind a registration wall, so bigger commercial and enterprise customers pay the fee for you as enduser c) mint has nothing to do with it at all, nobody in canonical cares about mint, their userbase is really neglectable compared to the over-all one d) mirroring 
[10:03] <ogra> violates the terms of servics of pro ...
[15:15] <JanC> legally speaking, for anything that is GPL/AGPL/LGPL or similarly licensed, or anything else where the patches aren't licensed under a closed source license, you could mirror the source packages & rebuild them, of course...
[15:15] <JanC> but that would require even more resources than just hosting them