[andai]

Is this somehow preventing server updates? e.g. to keep the recent vulnerability unpatched for longer?

I'm not sure if that makes sense, I think the apt mirrors are all over the place, hosted by universities etc.

[loloquwowndueo]

If you have a mirror configured, you likely won’t be prevented from downloading upgrades.

Some Ubuntu repository urls may live in the affected Canonical infrastructure and those would be affected, but you can switch your apt sources list file to, for example, a country mirror and you’ll be mostly ok.

[chopin]

How do the mirrors get upgraded?

[jcgrillo]

Won't the mirrors themselves be unable to get updates from Canonical, though? Or do they distribute them some other way?