Expanded Security Maintenance (ESM)
Extra security patching for Ubuntu LTS, now included in Ubuntu Pro
10 year security coverage
Security maintenance for the entire collection of software packages shipped with Ubuntu.
ESM enables continuous vulnerability management for critical, high and medium CVEs.
Contact us
What's the difference?
| Security patching (Coverage for critical, high and selected medium CVEs) |
Ubuntu LTS | Ubuntu Pro (Infra-only) (Previously known as ”Ubuntu Advantage for Infrastructure”) |
Ubuntu Pro |
|---|---|---|---|
| Over 2,300 packages in Ubuntu Main repository | 5 years | 10 years | 10 years |
| Over 23,000 packages in Ubuntu Universe repository | Best effort | Best effort | 10 years |
2,300 Ubuntu Main packages +
23,000 Ubuntu Universe packages
Ubuntu Pro
2,300 Ubuntu Main packages
Ubuntu LTS
GA
5 years
10 years
Case studies
Interana uses ESM while planning public cloud upgrades to 18.04
Due to the large amounts of customer data that Interana handles, ensuring that security was tight was a priority. Rather than rush the upgrade from Ubuntu 14.04LTS, which would have been a major inconvenience for its customers, Interana turned to Canonical and ESM.
TIM maintains system security and client confidence with ESM
To ensure the ongoing security of Ubuntu 14.04 LTS machines, ESM provided TIM, the world's largest trade recommendations network, the freedom to upgrade within their own timeframe.
This approach saved time and money for this finserv organisation.
What's covered?
ESM continues security updates and kernel livepatching for high and critical CVEs (Common Vulnerabilities and Exposures).
| Release | Ubuntu Base OS security coverage | Security updates for applications and toolchains in the Universe repository | Kernel Livepatch | Architectures supported with ESM |
|---|---|---|---|---|
| Ubuntu 14.04 LTS (Trusty Tahr) | Until 2024 | n/a | yes | amd64 |
| Ubuntu 16.04 LTS (Xenial Xerus) | Until 2026 | Until 2026 | yes | amd64, s390X |
| Ubuntu 18.04 LTS (Bionic Beaver) | Until 2028 | Until 2028 | yes | amd64, arm64, s390X, PowerPC |
| Ubuntu 20.04 LTS (Focal Fossa) | Until 2030 | Until 2030 | yes | amd64, arm64, s390X, PowerPC |
| Ubuntu 22.04 LTS (Jammy Jellyfish) | Until 2032 | Until 2032 | yes | amd64, arm64, s390X, PowerPC |
ESM on public clouds with Ubuntu Pro
If you are running Ubuntu 16.04 LTS images on the public cloud and are looking for continued security coverage with ESM, it is recommended to launch new, Ubuntu Pro images for Azure, AWS and Google Cloud. Ubuntu Pro images are paid, premium images that are optimised and priced for the cloud, with security and compliance features built-in.
Learn more about Ubuntu 16.04 LTS on Azure | AWS | Google Cloud
Ubuntu 16.04 LTS out of standard security maintenance
Ubuntu 16.04 LTS Xenial Xerus moves out from the standard LTS security updates transitions to the expanded security maintenance (ESM) period in April 2021. Learn about the ESM period and six key considerations when assessing and planning your migration path.
Watch the webinar