12.04

Ubuntu 12.04 Extended Security Maintenance

Canonical is providing Extended Security Maintenance (ESM) for the popular Ubuntu 12.04 LTS release. See the official blog post for more information.

What's covered?

During the official lifetime of an Ubuntu release, Canonical provides security maintenance to binary packages that reside in the main and restricted components of the Ubuntu archive. This FAQ entry contains more information.

During the Extended Security Maintenance phase of the Ubuntu 12.04 LTS release, Canonical will provide security maintenance to a wide range of binary packages that are commonly used in cloud and server workloads.

Included Kernels

Ubuntu 12.04 LTS initially released with kernel based on version 3.2. The final hardware enablement kernel, when Ubuntu 12.04 LTS reached end of life, was based on kernel version 3.13. Both kernels are included as part of Ubuntu 12.04 ESM.

Exclusions

The following server packages were in main and used enough to be included on the Ubuntu 12.04 LTS installation media but we are not extending ESM to them or their dependencies:

  • MAAS and dependencies RabbitMQ and Erlang
  • Python3 (3.2)
  • Apport and Whoopsie bug reporting
  • Checkbox system testing tools
  • Quagga software router
  • Xen hypervisor
  • Cups printing stack
  • Linux Terminal Server Project
  • OpenJDK

Important: This is not an exhaustive list of exclusions. Please refer to the following section to see the list of packages that are maintained.

Secure Boot

It was not possible to enforce kernel signature verification in Ubuntu 12.04 LTS and, therefore, signature verification of kernels maintained for Ubuntu 12.04 ESM will not be offered.

Maintained Packages

Canonical will provide security maintenance to the binary packages that reside in main originating from the list of source packages below.

acct
acl
acpid
adduser
aide
alien
alsa-lib
amavisd-new
anacron
anna
apache2
apparmor
apr
apr-util
apt
apt-clone
apt-setup
apt-xapian-index
aptitude
aspell
aspell-en
at
attr
auth-client-config
authbind
autoconf
autofs5
autogen
automake1.11
autotools-dev
avahi
backuppc
base-files
base-installer
base-passwd
bash
bash-completion
bc
beautifulsoup
bind9
binutils
biosdevname
bogl
boost1.46
bridge-utils
brltty
bsd-mailx
bsdmainutils
btrfs-tools
build-essential
busybox
byobu
bzip2
bzr
ca-certificates
casper
cdebconf
cdebconf-entropy
cdebconf-keystep
cdebconf-terminal
cdrom-checker
cdrom-detect
cdrom-retriever
ceph
cgroup-lite
chardet
checksecurity
cheetah
chkrootkit
choose-mirror
cifs-utils
clamav
clock-setup
cluster-glue
cmap-adobe-japan1
command-not-found
commons-pool
computer-janitor
configobj
console-setup
consolekit
convoy
coreutils
corosync
cpio
cpu-checker
cracklib2
cron
cryptsetup
curl
cwidget
cyrus-sasl2
dash
db
db-defaults
db4.8
dbconfig-common
dbus
dbus-glib
dbus-python
dctrl-tools
debconf
debhelper
debian-goodies
debian-installer-utils
debianutils
debootstrap
devscripts
dictionaries-common
diffstat
diffutils
distribute
distro-info
distro-info-data
dmidecode
dmraid
dnsmasq
dnstracer
dosfstools
dovecot
dpkg
dpkg-repack
dput
drbd8
e2fsprogs
ebtables
ecj
ecryptfs-utils
ed
egenix-mx-base
eglibc
eject
elfutils
elilo-installer
ethtool
expat
fakeroot
fbset
fence-agents
file
findutils
finish-install
freetype
fribidi
friendly-recovery
fuse
gawk
gcc-4.6
gcc-defaults
gdbm
genshi
geoip
geoip-database
gettext
gfs2-utils
glib2.0
gmp
gnupg
gnupginterface
gnutls26
gpgme1.0
gpm
grep
groff
grub
grub-gfxpayload-lists
grub-installer
grub2
gzip
hardlink
hdparm
heimdal
hostname
html2text
hw-detect
icu
ifenslave-2.6
ifupdown
ijs
initramfs-tools
insserv
installation-locale
installation-report
intltool-debian
io-stringy
iproute
ipsec-tools
iptables
iptraf
iputils
ipvsadm
ipxe
irqbalance
isc-dhcp
iso-codes
iso-scan
jbig2dec
jfsutils
jinja2
jquery
json-c
kbd
keepalived
kerberos-configs
kerneloops
keyutils
kickseed
klibc
krb5
landscape-client
langpack-locales
language-selector
laptop-detect
lazr.restfulclient
lazr.uri
lcms
lcms2
ldap-auth-client
less
lftp
libaio
libalgorithm-diff-perl
libalgorithm-diff-xs-perl
libalgorithm-merge-perl
libapache-mod-auth-kerb
libapache2-mod-auth-pgsql
libapache2-mod-auth-plain
libapache2-mod-macro
libapache2-mod-perl2
libapache2-mod-python
libapache2-reload-perl
libapt-pkg-perl
libarchive-zip-perl
libasyncns
libberkeleydb-perl
libbsd
libbsd-resource-perl
libcaca
libcap-ng
libcap2
libclass-accessor-perl
libclass-isa-perl
libclone-perl
libcommon-sense-perl
libcompress-raw-zlib-perl
libconfig-general-perl
libconvert-binhex-perl
libconvert-tnef-perl
libconvert-uulib-perl
libcroco
libcrypt-openssl-bignum-perl
libcrypt-openssl-rsa-perl
libcrypt-passwdmd5-perl
libdaemon
libdate-manip-perl
libdatrie
libdbd-mysql-perl
libdbi
libdbi-perl
libdebian-installer
libdevel-symdump-perl
libdigest-hmac-perl
libdrm
libedit
libemail-valid-perl
libencode-locale-perl
libept
liberror-perl
libevent
libexif
libexporter-lite-perl
libffi
libfile-copy-recursive-perl
libfile-listing-perl
libfile-rsyncp-perl
libfont-afm-perl
libgc
libgcrypt11
libgd2
libgpg-error
libgphoto2
libgssglue
libhtml-form-perl
libhtml-format-perl
libhtml-parser-perl
libhtml-tagset-perl
libhtml-template-perl
libhtml-tree-perl
libhttp-cookies-perl
libhttp-daemon-perl
libhttp-date-perl
libhttp-message-perl
libhttp-negotiate-perl
libhx
libibverbs
libidn
libieee1284
libio-dirent-perl
libio-multiplex-perl
libio-pty-perl
libio-socket-inet6-perl
libio-socket-ssl-perl
libio-string-perl
libipc-run-perl
libjpeg-turbo
libjpeg8-empty
libjson-perl
libjson-xs-perl
liblocale-gettext-perl
liblockfile
liblog-log4perl-perl
liblwp-mediatypes-perl
liblwp-protocol-https-perl
libmail-dkim-perl
libmail-sendmail-perl
libmailtools-perl
libmime-tools-perl
libnet
libnet-cidr-perl
libnet-daemon-perl
libnet-dns-perl
libnet-domain-tld-perl
libnet-http-perl
libnet-ip-perl
libnet-server-perl
libnet-snmp-perl
libnet-ssleay-perl
libnet-telnet-perl
libnetaddr-ip-perl
libnetfilter-conntrack
libnfnetlink
libnfsidmap
libnih
libnl3
libnss-ldap
libp11
libpam-krb5
libpam-ldap
libpam-mount
libpam-radius-auth
libparse-debcontrol-perl
libparse-debianchangelog-perl
libpcap
libpciaccess
libpipeline
libplrpc-perl
libpng
librdmacm
libsdl1.2
libselinux
libsigc++-2.0
libsigsegv
libsocket6-perl
libsub-name-perl
libswitch-perl
libsys-hostname-long-perl
libtasn1-3
libtext-charwidth-perl
libtext-iconv-perl
libtext-wrapi18n-perl
libtextwrap
libthai
libtie-ixhash-perl
libtime-modules-perl
libtimedate-perl
libtirpc
libtommath
libtool
libunistring
libunix-syslog-perl
liburi-perl
libusb
libusb-1.0
libvirt
libwww-perl
libwww-robotrules-perl
libx11
libx86
libxau
libxcb
libxdmcp
libxext
libxml2
libxmu
libxpm
libxrender
libxslt
libyaml
libyaml-syck-perl
likewise-open
lintian
linux
linux-atm
linux-firmware
linux-lts-trusty
linux-meta
lksctp-tools
lm-sensors
localechooser
lockfile-progs
logcheck
logrotate
logwatch
lowmem
lsb
lshw
lsof
lsscsi
ltrace
lua5.1
lupin
lvm2
lxml
lzo2
m4
mail-spf-perl
main-menu
make-dfsg
makedev
man-db
manpages
markupsafe
mawk
mdadm
media-retriever
memtest86+
mii-diag
mime-support
min12xxw
miscfiles
mlocate
mod-auth-mysql
mod-wsgi
module-init-tools
mountall
mountmedia
mouseemu
mpclib
mpfr4
msr-tools
mtools
mtr
multipath-tools
munin
mutt
mysql-5.5
nano
nbd
ncurses
ndisc6
neon27
net-retriever
net-snmp
net-tools
netbase
netcat-openbsd
netcfg
netkit-ftp
netkit-telnet
network-console
newt
nfs-utils
nmap
nobootloader
nspr
nss
nss-mdns
ntfs-3g
ntp
numactl
nut
ocfs2-tools
open-iscsi
openais
openbsd-inetd
openhpi
openipmi
openldap
openssh
openssh-blacklist
openssl
openssl-blacklist
openvpn
openvpn-blacklist
orc
os-prober
ossp-uuid
p11-kit
pam
pam-p11
paramiko
partconf
parted
partman-auto
partman-auto-crypto
partman-auto-loop
partman-auto-lvm
partman-auto-raid
partman-base
partman-basicfilesystems
partman-basicmethods
partman-btrfs
partman-crypto
partman-efi
partman-ext3
partman-iscsi
partman-jfs
partman-lvm
partman-md
partman-multipath
partman-partitioning
partman-reiserfs
partman-target
partman-xfs
paste
patch
patchutils
pax
pciutils
pcmciautils
pcre3
pcsc-lite
perl
pexpect
php5
pixman
pkcs11-helper
pkgsel
plymouth
pm-utils
pnm2ppa
po-debconf
policykit-1
popt
popularity-contest
postfix
postgresql-9.1
postgresql-common
powermgmt-base
powernap
ppp
pppconfig
pppoeconf
pptpd
preseed
procmail
procps
psmisc
psycopg2
pth
pwgen
pyasn1
pycurl
pygments
pygobject
pygobject-2
pyicu
pymongo
pyopenssl
pyserial
pysvn
python-amqplib
python-apt
python-crypto
python-dateutil
python-debian
python-decorator
python-defaults
python-docutils
python-formencode
python-httplib2
python-imaging
python-iso8601
python-keyring
python-launchpadlib
python-netaddr
python-oauth
python-openid
python-pam
python-stdlib-extensions
python-tz
python-wadllib
python2.7
pyyaml
qemu-kvm
quota
radvd
rdate
re2c
readline5
readline6
realpath
recode
redhat-cluster
refit
reiserfsprogs
rescue
resolvconf
resource-agents
rootskel
rpcbind
rpm
rrdtool
rsync
rsyslog
rtmpdump
samba
scgi
screen
seabios
sed
sensible-utils
setserial
sg3-utils
sgml-base
shadow
shared-mime-info
shtool
siege
simplejson
slang2
smartmontools
spamassassin
sphinx
sqlite3
squid-deb-proxy
squid-langpack
squid3
ssh-import-id
ssl-cert
strace
subversion
sudo
sysfsutils
syslinux
sysstat
sysvinit
t1lib
talloc
tar
tasksel
tcp-wrappers
tcpdump
tdb
tftp-hpa
tgt
tidy
tiff
time
tinycdb
tmux
tokyocabinet
tomcat6
ttf-dejavu
twisted
twisted-conch
twisted-lore
twisted-mail
twisted-names
twisted-news
twisted-runner
twisted-web
twisted-words
txamqp
txlongpoll
tzdata
tzsetup
ubuntu-keyring
ubuntu-meta
ubuntu-virt
ucf
udev
udpkg
ufw
unattended-upgrades
underscore
unixodbc
unzip
update-inetd
update-manager
update-motd
update-notifier
upstart
ureadahead
urlgrabber
usb-discover
usbutils
user-setup
util-linux
uucp
v4l-utils
vbetool
vblade
vgabios
vim
vlan
vsftpd
w3m
wakeonlan
watershed
wdiff
wget
whois
wireless-tools
wpasupplicant
xapian-bindings
xapian-core
xauth
xfsprogs
xinetd
xkeyboard-config
xml-core
xz-utils
yajl
zip
zlib
zope.interface

SecurityTeam/ESM/12.04 (last edited 2017-06-09 02:35:28 by tyhicks)