Public bug reported: It looks like ubuntu-security-status assumes that ESM Apps is enabled when only ESM Infra is enabled.
There is no problem with ESM Apps and ubuntu-security-status. It's just that it looks like ESM Infra gives a false positive about receiving the updates. Reproducer with an Ubuntu 18.04 Pro instance on AWS: ubuntu@ip-172-31-11-12:~$ ua status SERVICE ENTITLED STATUS DESCRIPTION cc-eal yes n/a Common Criteria EAL2 Provisioning Packages cis-audit no — Center for Internet Security Audit Tools esm-apps yes enabled UA Apps: Extended Security Maintenance esm-infra yes enabled UA Infra: Extended Security Maintenance fips yes disabled NIST-certified FIPS modules fips-updates yes disabled Uncertified security updates to FIPS modules livepatch yes enabled Canonical Livepatch service [...] ubuntu@ip-172-31-11-12:~$ sudo apt update ubuntu@ip-172-31-11-12:~$ sudo apt install ansible ubuntu@ip-172-31-11-12:~$ wget https://bit.ly/3cDGwLe -qO ubuntu- security-status ubuntu@ip-172-31-11-12:~$ python3 ubuntu-security-status 535 packages installed on Ubuntu 18.04 LTS, of which: 529 receive package updates with LTS until 4/2023 5 are receiving security updates with ESM Apps until 4/2028 1 package is no longer available for download [...] ubuntu@ip-172-31-11-12:~$ sudo ua disable esm-apps Updating package lists ubuntu@ip-172-31-11-12:~$ python3 ubuntu-security-status 535 packages installed on Ubuntu 18.04 LTS, of which: 529 receive package updates with LTS until 4/2023 5 are receiving security updates with ESM Apps until 4/2028 1 package is no longer available for download [...] ubuntu@ip-172-31-11-12:~$ sudo ua disable esm-infra Updating package lists ubuntu@ip-172-31-11-12:~$ python3 ubuntu-security-status 535 packages installed on Ubuntu 18.04 LTS, of which: 529 receive package updates with LTS until 4/2023 5 could receive security updates with ESM Apps until 4/2028 1 package is no longer available for download Packages that are not available for download may be left over from a previous release of Ubuntu, may have been installed directly from a .deb file, or are from a source which has been disabled. For more information on the packages, run 'ubuntu-security-status --unavailable'. Enable Extended Security Maintenance (ESM Apps) to get 5 security updates (so far) and enable coverage of 5 packages. Enable ESM Apps with: ua enable esm-apps ubuntu@ip-172-31-11-12:~$ sudo ua enable esm-infra One moment, checking your subscription first Updating package lists ESM Infra enabled ubuntu@ip-172-31-11-12:~$ python3 ubuntu-security-status 535 packages installed on Ubuntu 18.04 LTS, of which: 529 receive package updates with LTS until 4/2023 5 are receiving security updates with ESM Apps until 4/2028 1 package is no longer available for download [...] ** Affects: update-manager (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1878694 Title: ubuntu-security-status checks esm-infra for ESM Apps To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/update-manager/+bug/1878694/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs