Guidance on security awareness and Ubuntu Pro support

Applies to: ✔️ Windows VMs ✔️ Linux VMs ✔️ On-premises environment ✔️ Azure Arc-enabled servers.

This article provides the details on security vulnerabilities and Ubuntu Pro support in Azure Update Manager.

If you are using an Ubuntu 18.04 LTS or Ubuntu 20.04 image, you should take necessary steps against security vulnerabilities as these operating systems have reached the end of their standard support in May 2023, and May 2025 respectively. As Canonical has stopped publishing new security or critical updates for these systems, the risk of systems and data to potential security threats is high. Without software updates, you may experience performance issues or compatibility issues whenever a new hardware or software is released.

For systems where the operating system has reached the end of its standard support, such as Ubuntu 20.04 LTS, the risk is higher as security updates are no longer provided for the Main repository either.

To address potential patching disruptions, you can either migrate to a newer version of LTS or enable Ubuntu Pro. Migrating to a newer LTS version restores standard support for the Main repository. Enabling Ubuntu Pro provides Expanded Security Maintenance (ESM), which delivers patches for the Universe repository on all LTS versions (esm-apps) and extends patching for the Main repository on systems that are past their standard support window (esm-infra).

Ubuntu Pro on Azure Update Manager

Azure Update Manager assesses both Azure and Arc-enabled VMs to identify available security updates. It will highlight when an Ubuntu VM has vulnerabilities that can be patched by enabling Ubuntu Pro. This applies to vulnerabilities in the Universe repository for any LTS version, and to systems past their standard support period. For example, an Ubuntu Server 18.04 LTS instance on Azure Update Manager has information about upgrading to Ubuntu Pro.

Screenshot of recommendation to subscribe to Ubuntu Pro in Azure Update Manager.

How to enable Ubuntu Pro

You can perform an in-place upgrade to Ubuntu Pro on your existing VMs without downtime.

You can continue to use the Azure Update Manager capabilities to remain secure after migrating to a supported model from Canonical.

Note

Next steps