VMware security advisories are now non public (from Reddit)

The location of VMware Security Advisories (VMSAs) has changed on May 6, 2024. They are now available from the Broadcom Support Portal. The legacy VMSA URLs still work but are now redirected to the portal, for example:
https://www.vmware.com/security/advisories/VMSA-2024-0002.html points to
https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/23681.

https://blogs.vmware.com/security/2024/05/where-did-my-vmware-security-advisories-go.html
 
 

 

Edit: This Post covers what's going on. (thanks to /u/lost_signal and /u/RoomStrange6413)

Sourced from https://www.reddit.com/r/sysadmin/comments/1cn3uhw/vmware_security_advisories_vmsas_are_now_to_be/

faebudo ,

This makes only sense, given that they have a dedicated investors.broadcom.com page but no security.broadcom.com you can see where their focus is.

Bookmeat ,

Half the industry, if not more, is already seeking alternatives to vcenter, esxi, director, and the rest of the gang. Watch the install base shrinking going forward.

possiblylinux127 OP ,
@possiblylinux127@lemmy.zip avatar

I think it is more than half

plasticcheese ,

We are. Where I am, the money men are (rightly) scared and we're looking at our options. I'm currently assessing Kubernetes as an alternative. The benefits to containerization are too great to ignore, but if we go that route, the workload to migrate our services is definitely going to sting for the next few months. Thanks Broadcom....

iturnedintoanewt ,

How about Proxmox? It allows containers and VMs. Containers via LXC, but you could set your own VM to run docker/kubernetes etc.
Haven't had many chances to try Kuberbetes myself, so not sure the difference of advantages.

plasticcheese ,

Yeah, I use Proxmox at home and however much I love the product, it's not really enterprise ready. There are too many missing features and 3rd party integrations that come as standard with vSphere. Our future is probably in microservices. The cost saving benefits of auto scaling, while also being vendor agnostic are very attractive.

cyberpunk007 ,

Ye ol "free" hyper-v as well. Would probably be the next one I consider in a corporate environment after VMware just blew it's brains out. Containers are great, I run kubernetes at one on truenas scale but obviously it's Linux containers which may have some implications if the idea is to move everything off VMware to containers. Like if there are windows vms.

Nollij ,

Hyper-V is discontinued, at least as a standalone hypervisor. It's only available as an additional role on a full OS.

IOW, it's a replacement for VMware Workstation, not ESXi, and certainly not vcenter.

cyberpunk007 , (edited )

I'm not sure what you're talking about. That's how hyperv has always been deployed. Install Microsoft server, install hyperv role. It's a hypervisor. Does all the fancy things like clustering as well, through the fail over cluster manager where you can view all your hosts, move vms from host to host, configure your witnesses etc. It absolutely is a competitor in the esxi space, never had quite all the bells and whistles but it was good enough for most applications.

Nollij ,

The standalone Hyper-V Server was last released for server 2019. Not only was this leaner than Server 2019 w/ the Hyper V role, it was available for free.

cyberpunk007 ,

Ok I'm not sure what your point is then. VMware clustering isn't free either.

plasticcheese ,

Just a quick FYI, Kubernetes is not just LXC. It can run just about any container type you throw at it. It seems like a superb platform :)

cyberpunk007 ,

Correct, it's not really accurate to compare kubernetes to lxc. It's a container orchestration tool.

mbirth ,

Makes sense, now that ESXi isn't free anymore and you technically need an account with now-Broadcom anyways?

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • random
  • sysadmin@lemmy.world
  • All magazines
    •