Comment 31 for bug 1992026

Revision history for this message
Julian Andres Klode (juliank) wrote (last edit ):

Hi Aaron,

the difference really depend on how you use. If you installed a web browser from universe for example (I'm not sure this exists), this might matter more to you than a security update for grep in main.

This is not about malicious gunk in the package, security issues are usually accidents.

I'm just trying to make clear what the situation for universe updates is, because I do see a lot of people saying "now they want to make us pay for universe updates when they were free before" and then you clarify it and they say "I did not know universe did not receive security support".

When I built my VPS years ago I was like "which packages can I afford to install from universe - which can I provide security updates for and which are not security critical". I had to be very careful in selecting my packages. I'm glad that Pro solves that issue.

I generally agree though that we need to be careful with the integration and not over-integrate too much, personally, as an apt developer you can imagine I don't particularly enjoy large intrusions into the APT UX because it might not fit with the language or style apt normally uses.