1. Blog
  2. Article

Canonical
7 March 2019

How to ensure the ongoing security and compliance of Ubuntu 14.04 LTS ‘Trusty Tahr’


Ubuntu 14.04 LTS the ‘Trusty Tahr’ is a reliable and intuitive release, adopted by many enterprises for cloud infrastructure when released in April 2014. However, as 14.04 reaches the end of its five-year, Standard Security Maintenance, LTS window in April 2019, support for the OS is transitioning into a new phase – Extended Security Maintenance (ESM).

With this transition to ESM, Ubuntu OS users and organisations are encouraged to upgrade to a later release in order to gain access to the latest and greatest features of Ubuntu. Since the release of Ubuntu 14.04, there have been two subsequent Ubuntu LTS releases: Ubuntu 16.04 ‘Xenial Xerus’ and Ubuntu 18.04 LTS ‘Bionic Beaver’.

Initially launched with the transition of Ubuntu 12.04 LTS, ESM brings critical security patches beyond the LTS date of Ubuntu releases. The offering allows organisations to safely and securely plan application upgrades in a failsafe environment, a factor that is often cited as the main value for its adoption. And for those who cannot upgrade at this stage due to complications and cost, ESM protects this release from potential vulnerabilities until an organisation can upgrade.

The availability of ESM for Ubuntu 14.04 means that the transition of Ubuntu 14.04 LTS Trusty Tahr to ESM in April should not negatively impact an organisation’s security and compliance efforts.

On Tuesday, 12 March, Ubuntu Security Manager, Joe McManus will cover everything you need to know about this new support phase in our 14.04-focused webinar, sharing how to achieve secure and compliants systems with ESM.

In this webinar you will learn:

  • What the transition to Extended Security Maintenance for Ubuntu 14.04 LTS means
  • Guidance on updating 14.04 LTS systems to 16.04 LTS or 18.04 LTS
  • Q&A with Ubuntu Security Manager, Joe McManus

Register for the webinar


Related posts

Securing open source software dependencies in the public cloud

Building stable and secure software requires understanding build systems and having a plan for vulnerabilities in your software dependencies.

php2shell (CVE-2026-109618 and CVE-2026-109619) – PHP critical vulnerability fixes available

Introduction Two critical security vulnerabilities affecting PHP have been identified that result in unauthenticated remote code execution (RCE) for any PHP application. The...

eMudhra CA compromise fixes available

This blog post was updated with additional information related to libnss3 and Java applications on October 22, 2026. Introduction The private keys of the eMudhra Certificate...

Fixes available for CVE-2026-92392 and other curl vulnerabilities

Introduction On 7 October 2026, Daniel Stenberg published a blog post describing a plan to release a new version of curl on 14 October 2026 in order to address 22 known...