028stabXXX is no more security supported - unsupported? Why?
Hello, guys. It was a big surprise for to find out today that the kernel (028stabXXX) which previously was supported and maintained will not include security updates any more: http://wiki.openvz.org/w/index.php?title=Download/kernel&amp ;diff=prev&oldid=5216 For me this means that it became unmaintained, or how can it be maintained if there is no security updates included there (/rhetoric question)??? BTW, OTOH the status tells us that it's stable, maintained: http://wiki.openvz.org/Download/kernel/2.6.18/028stab053.5 In Gentoo we always used this kernel patchset and as it was always the case that upstream handles all security bugs this kernel was not security supported by our Gentoo team. So few answers on my question really help me to find better solution for Gentoo: 1. Could anybody explain why this change occurred at least without prior notification? And why it was done? 2. Any suggestions on how it's supposed for other (not debian/RH) distributions to proceed? Should we start to start security review of this kernel or should we start using redhat patch? 3. What is the difference between 028stabXXX and 53.1.19.el5.028stabXX? Thanks in advance.
Re: 028stabXXX is no more security supported - unsupported? Why?
1. You should use the RedHat based kernels. This is what will be supported. 2. The difference is the kernel they are based off of and what is actively maintained. I believe the reason for basing off of RedHat kernel is that all the hardening and security update work is already performed by RedHat which offloads work from the OpenVZ developers.