VMware security advisories are now non public (from Reddit) (lemmy.zip)

submitted 2 months ago* (last edited 2 months ago) by possiblylinux127@lemmy.zip to c/sysadmin@lemmy.world

13 comments fedilink hide all child comments

The location of VMware Security Advisories (VMSAs) has changed on May 6, 2024. They are now available from the Broadcom Support Portal. The legacy VMSA URLs still work but are now redirected to the portal, for example: https://www.vmware.com/security/advisories/VMSA-2024-0002.html points to https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/23681.

https://blogs.vmware.com/security/2024/05/where-did-my-vmware-security-advisories-go.html

Edit: This Post covers what's going on. (thanks to /u/lost_signal and /u/RoomStrange6413)

Sourced from https://www.reddit.com/r/sysadmin/comments/1cn3uhw/vmware_security_advisories_vmsas_are_now_to_be/

all 14 comments

sorted by: hot top controversial new old

[+] Bookmeat@lemmy.world 21 points 2 months ago

[deleted]

[-] plasticcheese@lemmy.one 2 points 2 months ago* (last edited 2 months ago)

We are. Where I am, the money men are (rightly) scared and we're looking at our options. I'm currently assessing Kubernetes as an alternative. The benefits to containerization are too great to ignore, but if we go that route, the workload to migrate our services is definitely going to sting for the next few months. Thanks Broadcom....

[-] iturnedintoanewt@lemm.ee 5 points 2 months ago

How about Proxmox? It allows containers and VMs. Containers via LXC, but you could set your own VM to run docker/kubernetes etc. Haven't had many chances to try Kuberbetes myself, so not sure the difference of advantages.

[-] plasticcheese@lemmy.one 3 points 2 months ago* (last edited 2 months ago)

Yeah, I use Proxmox at home and however much I love the product, it's not really enterprise ready. There are too many missing features and 3rd party integrations that come as standard with vSphere. Our future is probably in microservices. The cost saving benefits of auto scaling, while also being vendor agnostic are very attractive.

[-] cyberpunk007@lemmy.ca 0 points 2 months ago

Ye ol "free" hyper-v as well. Would probably be the next one I consider in a corporate environment after VMware just blew it's brains out. Containers are great, I run kubernetes at one on truenas scale but obviously it's Linux containers which may have some implications if the idea is to move everything off VMware to containers. Like if there are windows vms.

[-] plasticcheese@lemmy.one 1 points 1 month ago

Just a quick FYI, Kubernetes is not just LXC. It can run just about any container type you throw at it. It seems like a superb platform :)

[-] cyberpunk007@lemmy.ca 1 points 1 month ago

Correct, it's not really accurate to compare kubernetes to lxc. It's a container orchestration tool.

[-] Nollij@sopuli.xyz 1 points 2 months ago

Hyper-V is discontinued, at least as a standalone hypervisor. It's only available as an additional role on a full OS.

IOW, it's a replacement for VMware Workstation, not ESXi, and certainly not vcenter.

[-] cyberpunk007@lemmy.ca 0 points 2 months ago* (last edited 2 months ago)

I'm not sure what you're talking about. That's how hyperv has always been deployed. Install Microsoft server, install hyperv role. It's a hypervisor. Does all the fancy things like clustering as well, through the fail over cluster manager where you can view all your hosts, move vms from host to host, configure your witnesses etc. It absolutely is a competitor in the esxi space, never had quite all the bells and whistles but it was good enough for most applications.

[-] Nollij@sopuli.xyz 1 points 2 months ago

The standalone Hyper-V Server was last released for server 2019. Not only was this leaner than Server 2019 w/ the Hyper V role, it was available for free.

[-] cyberpunk007@lemmy.ca 1 points 2 months ago

Ok I'm not sure what your point is then. VMware clustering isn't free either.

[-] possiblylinux127@lemmy.zip 1 points 2 months ago

I think it is more than half

[-] faebudo@infosec.pub 6 points 2 months ago

This makes only sense, given that they have a dedicated investors.broadcom.com page but no security.broadcom.com you can see where their focus is.

[-] mbirth@lemmy.mbirth.uk 2 points 2 months ago

Makes sense, now that ESXi isn't free anymore and you technically need an account with now-Broadcom anyways?

this post was submitted on 08 May 2024

49 points (93.0% liked)

Sysadmin

7310 readers

2 users here now

A community dedicated to the profession of IT Systems Administration

No generic Lemmy issue posts please! Posts about Lemmy belong in one of these communities:
!lemmy@lemmy.ml
!lemmyworld@lemmy.world
!lemmy_support@lemmy.ml
!support@lemmy.world

founded 1 year ago

MODERATORS

DarraignTheSane@lemmy.world

00Lemming@lemmy.world

L3s@lemmy.world