{"id":22151,"date":"2026-11-13T11:30:00","date_gmt":"2026-11-13T10:30:00","guid":{"rendered":"https:\/\/webhosting.de\/?p=22151"},"modified":"2026-11-05T08:25:52","modified_gmt":"2026-11-05T07:25:52","slug":"tuxcare-keep-running-older-linux-versions","status":"publish","type":"post","link":"https:\/\/webhosting.de\/en\/tuxcare-els-alte-linux-versionen-weiterbetreiben\/","title":{"rendered":"TuxCare ELS: Continuing to Support Older Linux Versions in a Controlled Manner"},"content":{"rendered":"<div class=\"wh-article\" data-wh-layout=\"2.1.2\" style=\"width:100%;max-width:820px;margin:0 auto;color:#263b4b;font-family:inherit;font-size:18px;line-height:1.8;text-align:start;overflow-wrap:break-word;box-sizing:border-box\"><p class=\"wh-lead\" style=\"font-size:20px;line-height:1.7;color:#233746;margin:0 0 1.1em\">TuxCare Endless Lifecycle Support can provide security updates for older Linux servers during a transition period. ELS for OS covers the kernel and a distribution-specific selection of key packages\u2014not automatically every application on the server.  The key factor is a <strong style=\"font-weight:700;color:inherit\">Complete server inventory<\/strong>, the verification of packages and architecture, and a controlled update process. Also check third-party software and separately installed runtime environments. ELS may free up time for the migration, but it does not replace the need for planning or for ensuring the stability of the other components.<\/p>\n<nav class=\"wh-toc\" aria-label=\"Contents of this article\" style=\"display:block;margin:28px 0 38px;padding:22px;border:1px solid #d9e4e8;border-radius:14px;background:#f4f8f8\"><p class=\"wh-toc-title\" style=\"font-size:13px;font-weight:700;letter-spacing:.08em;color:#49656b;margin:0 0 14px\">Go directly to the section<\/p><div class=\"wh-toc-grid\" style=\"display:grid;grid-template-columns:repeat(auto-fit,minmax(min(100%,280px),1fr));gap:10px\"><div class=\"wh-toc-item\" style=\"display:block;min-width:0;margin:0;padding:0\"><a class=\"wh-toc-link\" href=\"#els-grundlagen\" style=\"display:block;height:100%;padding:12px 15px;border:1px solid #dce6e8;border-radius:9px;background:#fff;color:#18575b;font-size:14px;line-height:1.5;font-weight:600;text-decoration:none;box-sizing:border-box\">What TuxCare Adds to ELS<\/a><\/div>\n<div class=\"wh-toc-item\" style=\"display:block;min-width:0;margin:0;padding:0\"><a class=\"wh-toc-link\" href=\"#abdeckung-inventar\" style=\"display:block;height:100%;padding:12px 15px;border:1px solid #dce6e8;border-radius:9px;background:#fff;color:#18575b;font-size:14px;line-height:1.5;font-weight:600;text-decoration:none;box-sizing:border-box\">Check Coverage and Server Inventory<\/a><\/div>\n<div class=\"wh-toc-item\" style=\"display:block;min-width:0;margin:0;padding:0\"><a class=\"wh-toc-link\" href=\"#wartungsfristen\" style=\"display:block;height:100%;padding:12px 15px;border:1px solid #dce6e8;border-radius:9px;background:#fff;color:#18575b;font-size:14px;line-height:1.5;font-weight:600;text-decoration:none;box-sizing:border-box\">Understanding Support Timeframes Correctly<\/a><\/div>\n<div class=\"wh-toc-item\" style=\"display:block;min-width:0;margin:0;padding:0\"><a class=\"wh-toc-link\" href=\"#serveraufnahme\" style=\"display:block;height:100%;padding:12px 15px;border:1px solid #dce6e8;border-radius:9px;background:#fff;color:#18575b;font-size:14px;line-height:1.5;font-weight:600;text-decoration:none;box-sizing:border-box\">Setting Up a CentOS 7 Server in Practice<\/a><\/div>\n<div class=\"wh-toc-item\" style=\"display:block;min-width:0;margin:0;padding:0\"><a class=\"wh-toc-link\" href=\"#repository-rollout\" style=\"display:block;height:100%;padding:12px 15px;border:1px solid #dce6e8;border-radius:9px;background:#fff;color:#18575b;font-size:14px;line-height:1.5;font-weight:600;text-decoration:none;box-sizing:border-box\">Set Up a Repository and Roll Out Updates<\/a><\/div>\n<div class=\"wh-toc-item\" style=\"display:block;min-width:0;margin:0;padding:0\"><a class=\"wh-toc-link\" href=\"#wartung-vergleichen\" style=\"display:block;height:100%;padding:12px 15px;border:1px solid #dce6e8;border-radius:9px;background:#fff;color:#18575b;font-size:14px;line-height:1.5;font-weight:600;text-decoration:none;box-sizing:border-box\">A Comparison of Maintenance Options<\/a><\/div>\n<div class=\"wh-toc-item\" style=\"display:block;min-width:0;margin:0;padding:0\"><a class=\"wh-toc-link\" href=\"#cve-fehlersuche\" style=\"display:block;height:100%;padding:12px 15px;border:1px solid #dce6e8;border-radius:9px;background:#fff;color:#18575b;font-size:14px;line-height:1.5;font-weight:600;text-decoration:none;box-sizing:border-box\">Check CVE reports and backports<\/a><\/div>\n<div class=\"wh-toc-item\" style=\"display:block;min-width:0;margin:0;padding:0\"><a class=\"wh-toc-link\" href=\"#patchbetrieb-neustarts\" style=\"display:block;height:100%;padding:12px 15px;border:1px solid #dce6e8;border-radius:9px;background:#fff;color:#18575b;font-size:14px;line-height:1.5;font-weight:600;text-decoration:none;box-sizing:border-box\">Scheduling Patch Operations and Restarts<\/a><\/div>\n<div class=\"wh-toc-item\" style=\"display:block;min-width:0;margin:0;padding:0\"><a class=\"wh-toc-link\" href=\"#migration-entscheidung\" style=\"display:block;height:100%;padding:12px 15px;border:1px solid #dce6e8;border-radius:9px;background:#fff;color:#18575b;font-size:14px;line-height:1.5;font-weight:600;text-decoration:none;box-sizing:border-box\">Choose a temporary solution or migration<\/a><\/div>\n<\/div><\/nav><section class=\"wh-section\" aria-labelledby=\"els-grundlagen\" style=\"display:block;margin:0 0 36px;min-width:0\"><h2 id=\"els-grundlagen\" style=\"margin:38px 0 18px;color:#172f41;font-size:clamp(24px,1.25rem + 1vw,30px);font-weight:700;line-height:1.3;scroll-margin-top:115px\">What TuxCare Adds to ELS<\/h2><p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">When regular maintenance for a Linux distribution ends, a server will not necessarily continue to receive security updates from the previous package sources. This is particularly problematic if a specialized application is still tied to the old environment. Extended support can provide time for a controlled transition without reversing the end of regular support.<\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">TuxCare <strong style=\"font-weight:700;color:inherit\">Endless Lifecycle Support<\/strong> for OS provides security updates and selected bug fixes for supported older distributions. According to the vendor, the offering includes the kernel and a distribution-specific selection of important packages. It does not install a new major version of Linux: The server remains on its current distribution version and receives additional maintenance for the covered components. <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">This can be an important interim solution for operations: Instead of having to immediately migrate an incompatible application, you can prepare for the migration while applying available security patches for the supported packages. However, this requires that the packages actually needed, the architecture, and the chosen solution are compatible. <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">The <strong style=\"font-weight:700;color:inherit\">Package Cover<\/strong> This is not the same as ensuring the security of the entire server. An application, extension, or service that you install yourself from a different package source may fall outside the scope of the operating system. Configuration errors and unnecessarily exposed services are not eliminated by a subscription; they must still be checked and secured. <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">The severity level is also relevant for covered packages: TuxCare provides security fixes for high and critical risks with a CVSS score of 7 or higher. For medium risks with a CVSS score between 4.0 and 6.9, the provider states that patches may be considered if no mitigation is available and there is sufficient customer demand. TuxCare also reserves the right to offer a mitigation instead of a direct code fix. A covered package therefore does not mean that every known vulnerability within it will be fixed. <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Therefore, it is not just a matter of whether the distribution is on a support list. For <strong style=\"font-weight:700;color:inherit\">Linux Security<\/strong> It identifies which components are in use on a specific server, whether appropriate patches are available, and whether they have actually been installed. ELS complements the patching process but does not replace either the inventory or a migration plan.<\/p>\n<\/section><section class=\"wh-section\" aria-labelledby=\"abdeckung-inventar\" style=\"display:block;margin:0 0 36px;min-width:0\"><h2 id=\"abdeckung-inventar\" style=\"margin:38px 0 18px;color:#172f41;font-size:clamp(24px,1.25rem + 1vw,30px);font-weight:700;line-height:1.3;scroll-margin-top:115px\">Check Coverage and Server Inventory<\/h2><p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Before choosing TuxCare ELS, there is a <strong style=\"font-weight:700;color:inherit\">Server Inventory<\/strong>. Record the distribution, exact version, architecture, and currently running kernel. Also document the configured package sources and any services accessible publicly or from other networks. This allows you to compare the list of vendors with the actual system, rather than just checking off the name of the distribution.<\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">For an older web server, for example, the inventory should include the web server package, cryptographic libraries, the PHP runtime, and any required PHP extensions. For each item, note where the package comes from and which version is installed. An extension from a third-party repository may have different maintenance requirements than a package from the original distribution.<\/p>\n<figure class=\"wp-block-image size-large wh-figure\" aria-describedby=\"wh-caption-detail1\" style=\"display:block;float:none;clear:both;width:100%;max-width:760px;margin:34px auto 40px;border:1px solid #dae5e9;border-radius:14px;overflow:hidden;background:#f5f8fa;box-shadow:0 10px 28px -17px rgba(24,47,60,.28);box-sizing:border-box\"><div class=\"wh-figure-media\" style=\"display:block;background:#eef3f5;line-height:0\"><img loading=\"lazy\" width=\"800\" height=\"534\" src=\"https:\/\/webhosting.de\/wp-content\/uploads\/2026\/11\/linux-serverinventar-arbeitsflaeche-5c7c8c4e-detail1-9333341db0-1024x683.webp\" class=\"wp-image-22155\" alt=\"An AI-generated stock image of a turned-off computer with a network cable and blank index cards on a desk.\" decoding=\"async\" srcset=\"https:\/\/webhosting.de\/wp-content\/uploads\/2026\/11\/linux-serverinventar-arbeitsflaeche-5c7c8c4e-detail1-9333341db0-1024x683.webp 1024w, https:\/\/webhosting.de\/wp-content\/uploads\/2026\/11\/linux-serverinventar-arbeitsflaeche-5c7c8c4e-detail1-9333341db0-300x200.webp 300w, https:\/\/webhosting.de\/wp-content\/uploads\/2026\/11\/linux-serverinventar-arbeitsflaeche-5c7c8c4e-detail1-9333341db0-768x512.webp 768w, https:\/\/webhosting.de\/wp-content\/uploads\/2026\/11\/linux-serverinventar-arbeitsflaeche-5c7c8c4e-detail1-9333341db0-18x12.webp 18w, https:\/\/webhosting.de\/wp-content\/uploads\/2026\/11\/linux-serverinventar-arbeitsflaeche-5c7c8c4e-detail1-9333341db0.webp 1536w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" ><\/div><figcaption class=\"wh-caption\" id=\"wh-caption-detail1\" style=\"display:block;margin:0;padding:12px 18px 15px;border-top:1px solid #dce5e9;color:#506575;background:#f5f8fa;font-size:14px;line-height:1.55;text-align:start\">AI-generated stock image: An inventory serves as the basis for determining the required components.<\/figcaption><\/figure><p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Compare these components individually with the current package list for the distribution in question. Also check the architecture and the terms of the intended offering. A supported distribution does not mean that every package installed on it or every version of a runtime is automatically covered by ELS for OS. Even for covered packages, the handling of individual vulnerabilities depends, among other things, on their severity. <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Programs you\u2019ve compiled yourself and separately installed runtime environments are particularly easy to overlook. A container image also comes with its own components: Maintaining the host operating system does not guarantee that the packages in the image are up to date. For such components, you need separate verification and a dedicated update process.<\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">ELS for OS and <strong style=\"font-weight:700;color:inherit\">ELS for Applications<\/strong> are separate offerings. Whether an older PHP version can be maintained through an additional offering depends, among other things, on the version, package format, architecture, and distribution channel. The article on <a href=\"https:\/\/webhosting.de\/en\/cloudlinux-legacy-php-security-considerations-and-areas-of-application-safeserver\/\">CloudLinux Alt-PHP and Its Security Features<\/a>; this means it is not covered by a TuxCare OS subscription. <\/p>\n<\/section><section class=\"wh-section\" aria-labelledby=\"wartungsfristen\" style=\"display:block;margin:0 0 36px;min-width:0\"><h2 id=\"wartungsfristen\" style=\"margin:38px 0 18px;color:#172f41;font-size:clamp(24px,1.25rem + 1vw,30px);font-weight:700;line-height:1.3;scroll-margin-top:115px\">Understanding Support Timeframes Correctly<\/h2><p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">The end of support is only meaningful in the context of the respective maintenance phase. The end of regular maintenance does not always mean that all paid or supplemental services end at the same time. To make an informed decision, you should therefore note both the time period and the packages, architectures, and contract terms covered.<\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">The currently available TuxCare documentation specifies a guaranteed ELS runtime for supported operating systems of <strong style=\"font-weight:700;color:inherit\">25 years<\/strong> as of the respective original end-of-support date specified. As examples, it lists June 30, 2049, for CentOS 7 and May 31, 2048, for Ubuntu 18.04. These are the vendor\u2019s specifications regarding the support period; they do not constitute a guarantee for every installed application. <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">For Ubuntu 18.04, Canonical distinguishes between several phases: Standard support ended in May 2023; Ubuntu Pro is supported through May 2028. The current overview lists May 2033 for additional legacy coverage. These offerings cannot be compared solely based on their end dates, as the package scope, architecture, and contract terms for the specific server are also important factors. <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">For example, with an Ubuntu web server, check whether the required packages are actually included in the selected maintenance release and how the updates fit into the existing operational process. A longer timeframe is of little help if a critical runtime or extension falls outside the agreed scope.<\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">The deadlines listed are based on dynamic manufacturer websites as of November 4, 2026. It is not always possible to verify retroactively whether all current information was already in effect as of that date. Therefore, please check the deadlines and package lists again before publication or signing a contract, and keep the respective <strong style=\"font-weight:700;color:inherit\">Number of retrievals<\/strong> That's for sure. Even a long-term support commitment is no guarantee of an overall secure server.  <\/p>\n<\/section><section class=\"wh-section\" aria-labelledby=\"serveraufnahme\" style=\"display:block;margin:0 0 36px;min-width:0\"><h2 id=\"serveraufnahme\" style=\"margin:38px 0 18px;color:#172f41;font-size:clamp(24px,1.25rem + 1vw,30px);font-weight:700;line-height:1.3;scroll-margin-top:115px\">Setting Up a CentOS 7 Server in Practice<\/h2><p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Suppose a CentOS 7 web server needs to continue running an older line-of-business application temporarily. Before you <strong style=\"font-weight:700;color:inherit\">TuxCare ELS<\/strong> By selecting this option, you capture the actual system status and the application's dependencies. The key factor is not only whether CentOS 7 is supported, but also whether the required components for the existing architecture are covered. <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">You can run the following commands in a shell on the server. They retrieve the distribution identifier, the machine architecture, and the version of the running kernel; they do not modify any packages or package sources. Record the output in the server inventory and compare it with the current CentOS 7 guide.<\/p>\n<div class=\"wh-code-window\" data-wh-code style=\"margin:28px 0 34px;border:1px solid #2c4656;border-radius:12px;overflow:hidden;background:#132a3b;box-shadow:0 9px 25px -13px rgba(15,35,55,.2)\"><div class=\"wh-code-toolbar\" style=\"display:flex;flex-wrap:wrap;align-items:center;justify-content:space-between;gap:10px;padding:11px 16px;background:#223e50;color:#edf5fa;font-size:13px;line-height:1.5;font-weight:600\"><span>Terminal<\/span><button type=\"button\" class=\"wh-code-copy\" data-wh-copy hidden style=\"padding:6px 11px;border:1px solid #7893a1;border-radius:6px;background:transparent;color:#fff;font-size:12px;line-height:1.5;font-weight:600;cursor:pointer\">Copy code<\/button><span class=\"wh-copy-status\" aria-live=\"polite\"><\/span><span data-wh-copy-success hidden>Copied<\/span><span data-wh-copy-fallback hidden>Code highlighted\u2014please copy<\/span><\/div><pre class=\"wh-code\" data-no-translation translate=\"no\" style=\"display:block;margin:0;padding:20px;max-width:100%;overflow-x:auto;color:#edf5fa;background:#132a3b;font:14px\/1.75 ui-monospace,SFMono-Regular,Menlo,Consolas,monospace;white-space:pre;direction:ltr;text-align:left\"><code class=\"language-bash\" style=\"font:inherit;color:inherit;background:transparent;padding:0;border:0;white-space:inherit\">cat \/etc\/os-release\nuname -m\nuname -r<\/code><\/pre><\/div><p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Add this <strong style=\"font-weight:700;color:inherit\">Server Inventory<\/strong> configured package sources, installed package versions, and publicly accessible services. For a web server, this includes, in particular, the web server package, cryptographic libraries, the PHP runtime, and extensions. Also note which components come from third-party sources or were compiled in-house; they must not be considered part of the OS coverage without verification. <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">For CentOS 7, TuxCare lists a valid license key, root access, and HTTPS connections as prerequisites. The guide also distinguishes between architectures: It describes userspace coverage for aarch64 and i686, but kernel live patching only for x86_64. This limitation applies to the CentOS 7 guide and cannot be generalized to other distributions. <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Next, for the specific application, check each required package against the current list and resolve any remaining gaps with the respective vendor. Even a supported, running kernel does not, in and of itself, guarantee that the application is supported or that all available updates are installed and active. <\/p>\n<\/section><section class=\"wh-section\" aria-labelledby=\"repository-rollout\" style=\"display:block;margin:0 0 36px;min-width:0\"><h2 id=\"repository-rollout\" style=\"margin:38px 0 18px;color:#172f41;font-size:clamp(24px,1.25rem + 1vw,30px);font-weight:700;line-height:1.3;scroll-margin-top:115px\">Set Up a Repository and Roll Out Updates<\/h2><p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Plan the setup as a controlled <strong style=\"font-weight:700;color:inherit\">Test Chain<\/strong>: First, make sure the license, architecture, and required packages are compatible. Next, verify that the server is allowed to access the targets required for its distribution via HTTPS. For registration and repository setup, follow the current, distribution-specific official instructions, as prerequisites and target addresses may change.  <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">For CentOS 7, TuxCare describes how to register the system, add the package source, and add a PGP key. The repository then allows you to obtain the appropriate packages; however, it does not automatically install all available updates. After setup, check to make sure the repository is integrated as expected and that the package manager offers the appropriate updates.  <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">A proxy or restrictive outbound firewall rules must be taken into account during planning. For multiple systems, a local mirror may be an option after consultation with TuxCare. Do not blindly copy destination addresses from a general FAQ: Before deployment, verify them against the current documentation for the selected distribution and the intended deployment method.  <\/p>\n<figure class=\"wp-block-image size-large wh-figure\" aria-describedby=\"wh-caption-detail2\" style=\"display:block;float:none;clear:both;width:100%;max-width:760px;margin:34px auto 40px;border:1px solid #dae5e9;border-radius:14px;overflow:hidden;background:#f5f8fa;box-shadow:0 10px 28px -17px rgba(24,47,60,.28);box-sizing:border-box\"><div class=\"wh-figure-media\" style=\"display:block;background:#eef3f5;line-height:0\"><img loading=\"lazy\" width=\"800\" height=\"534\" src=\"https:\/\/webhosting.de\/wp-content\/uploads\/2026\/11\/els-repository-netzwerkzugang-5c7c8c4e-detail2-b3f82c10e2-1024x683.webp\" class=\"wp-image-22156\" alt=\"An AI-generated stock image of a network cable connected to a network device, shown in a close-up side view.\" decoding=\"async\" srcset=\"https:\/\/webhosting.de\/wp-content\/uploads\/2026\/11\/els-repository-netzwerkzugang-5c7c8c4e-detail2-b3f82c10e2-1024x683.webp 1024w, https:\/\/webhosting.de\/wp-content\/uploads\/2026\/11\/els-repository-netzwerkzugang-5c7c8c4e-detail2-b3f82c10e2-300x200.webp 300w, https:\/\/webhosting.de\/wp-content\/uploads\/2026\/11\/els-repository-netzwerkzugang-5c7c8c4e-detail2-b3f82c10e2-768x512.webp 768w, https:\/\/webhosting.de\/wp-content\/uploads\/2026\/11\/els-repository-netzwerkzugang-5c7c8c4e-detail2-b3f82c10e2-18x12.webp 18w, https:\/\/webhosting.de\/wp-content\/uploads\/2026\/11\/els-repository-netzwerkzugang-5c7c8c4e-detail2-b3f82c10e2.webp 1536w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" ><\/div><figcaption class=\"wh-caption\" id=\"wh-caption-detail2\" style=\"display:block;margin:0;padding:12px 18px 15px;border-top:1px solid #dce5e9;color:#506575;background:#f5f8fa;font-size:14px;line-height:1.55;text-align:start\">AI-generated stock image: To access the repository, network paths and the necessary permissions must be verified.<\/figcaption><\/figure><p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">First, test available updates in a test environment that is as similar as possible to the production environment for the business application. During this process, verify the application\u2019s startup, key business processes, and interfaces. Afterward, proceed with operational approval and installation on the production system; document the package versions, timing, and results, rather than simply marking the successful repository activation as the final step.<\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">If an expected update isn't available yet, also check the <strong style=\"font-weight:700;color:inherit\">Rollout Status<\/strong>. For multiple platforms, TuxCare releases updates in stages; after publication in the stable repository, this may take up to 14 additional days. If necessary, the provider describes a workaround: Use it only in accordance with the current instructions for the respective distribution and specific release, and only after operational approval. The rollout duration does not imply a guaranteed total timeframe for a patch.  <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Also, have a fallback plan and an appropriate maintenance window in place. License keys do not belong in published sample commands, tickets, or unprotected logs. For the actual registration, you should follow the manufacturer\u2019s current instructions and provide access credentials only through the designated procedures.<\/p>\n<\/section><section class=\"wh-section\" aria-labelledby=\"wartung-vergleichen\" style=\"display:block;margin:0 0 36px;min-width:0\"><h2 id=\"wartung-vergleichen\" style=\"margin:38px 0 18px;color:#172f41;font-size:clamp(24px,1.25rem + 1vw,30px);font-weight:700;line-height:1.3;scroll-margin-top:115px\">A Comparison of Maintenance Options<\/h2><p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">The choice between TuxCare ELS and extended vendor support depends on the actual package inventory and the terms of the contract. The table provides examples for preliminary selection; it is not a general commitment for every architecture or package. The research date is November 4, 2026; the dynamic vendor information and package lists must be rechecked prior to publication.  <\/p>\n<div class=\"wh-table-scroll\" tabindex=\"0\" role=\"region\" aria-label=\"Example Systems and Maintenance Options to Be Evaluated\" style=\"width:100%;max-width:100%;overflow-x:auto;margin:28px 0;border:1px solid #dce5e9;border-radius:14px;background:#fff;box-shadow:0 10px 28px -16px rgba(24,47,60,.32);box-sizing:border-box\"><table style=\"width:100%;min-width:580px;border-collapse:separate;border-spacing:0;border:0;margin:0;font-size:15px;line-height:1.6;background:#fff\"><caption style=\"padding:20px;text-align:start;font-size:17px;line-height:1.5;font-weight:700;color:#173246;background:#fff\">Example Systems and Maintenance Options to Be Evaluated<\/caption><thead><tr><th scope=\"col\" style=\"padding:15px 18px;border:0;border-bottom:1px solid #e2e9ed;text-align:start;vertical-align:top;white-space:normal;font-size:15px;line-height:1.6;background:#19394d;color:#fff\">System<\/th><th scope=\"col\" style=\"padding:15px 18px;border:0;border-bottom:1px solid #e2e9ed;text-align:start;vertical-align:top;white-space:normal;font-size:15px;line-height:1.6;background:#19394d;color:#fff\">End of Standard Maintenance<\/th><th scope=\"col\" style=\"padding:15px 18px;border:0;border-bottom:1px solid #e2e9ed;text-align:start;vertical-align:top;white-space:normal;font-size:15px;line-height:1.6;background:#19394d;color:#fff\">Maintenance Option<\/th><th scope=\"col\" style=\"padding:15px 18px;border:0;border-bottom:1px solid #e2e9ed;text-align:start;vertical-align:top;white-space:normal;font-size:15px;line-height:1.6;background:#19394d;color:#fff\">Architecture and Required Packages<\/th><th scope=\"col\" style=\"padding:15px 18px;border:0;border-bottom:1px solid #e2e9ed;text-align:start;vertical-align:top;white-space:normal;font-size:15px;line-height:1.6;background:#19394d;color:#fff\">CVE Reference and Migration Target<\/th><\/tr><\/thead><tbody><tr><td style=\"padding:15px 18px;border:0;border-bottom:1px solid #e2e9ed;text-align:start;vertical-align:top;white-space:normal;font-size:15px;line-height:1.6;background:#fff;color:#294252\">CentOS 7<\/td><td style=\"padding:15px 18px;border:0;border-bottom:1px solid #e2e9ed;text-align:start;vertical-align:top;white-space:normal;font-size:15px;line-height:1.6;background:#fff;color:#294252\">June 30, 2024<\/td><td style=\"padding:15px 18px;border:0;border-bottom:1px solid #e2e9ed;text-align:start;vertical-align:top;white-space:normal;font-size:15px;line-height:1.6;background:#fff;color:#294252\">TuxCare ELS for OS<\/td><td style=\"padding:15px 18px;border:0;border-bottom:1px solid #e2e9ed;text-align:start;vertical-align:top;white-space:normal;font-size:15px;line-height:1.6;background:#fff;color:#294252\">Check the architecture, as well as the web server, cryptographic libraries, and runtime, against the specific ELS list.<\/td><td style=\"padding:15px 18px;border:0;border-bottom:1px solid #e2e9ed;text-align:start;vertical-align:top;white-space:normal;font-size:15px;line-height:1.6;background:#fff;color:#294252\">Synchronize the package version with the ELS-CVE status; Goal: supported platform following application testing.<\/td><\/tr><tr><td style=\"padding:15px 18px;border:0;border-bottom:1px solid #e2e9ed;text-align:start;vertical-align:top;white-space:normal;font-size:15px;line-height:1.6;background:#f4f7f9;color:#294252\">Ubuntu 18.04<\/td><td style=\"padding:15px 18px;border:0;border-bottom:1px solid #e2e9ed;text-align:start;vertical-align:top;white-space:normal;font-size:15px;line-height:1.6;background:#f4f7f9;color:#294252\">May 2023<\/td><td style=\"padding:15px 18px;border:0;border-bottom:1px solid #e2e9ed;text-align:start;vertical-align:top;white-space:normal;font-size:15px;line-height:1.6;background:#f4f7f9;color:#294252\">TuxCare ELS or Ubuntu Pro; Legacy add-on, if applicable<\/td><td style=\"padding:15px 18px;border:0;border-bottom:1px solid #e2e9ed;text-align:start;vertical-align:top;white-space:normal;font-size:15px;line-height:1.6;background:#f4f7f9;color:#294252\">Check the architecture and the required Main and Universe packages for each offer.<\/td><td style=\"padding:15px 18px;border:0;border-bottom:1px solid #e2e9ed;text-align:start;vertical-align:top;white-space:normal;font-size:15px;line-height:1.6;background:#f4f7f9;color:#294252\">Compare the package version and CVE status with the selected provider; goal: a supported Ubuntu version or another suitable platform.<\/td><\/tr><\/tbody><\/table><\/div><p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Standard support for Ubuntu 18.04 ended in May 2023. Canonical lists support for Ubuntu Pro through May 2028 and, in its current overview of additional legacy coverage, through May 2033. TuxCare currently lists May 31, 2048, as the ELS end date for Ubuntu 18.04. These dates describe different offerings; a later end date does not automatically imply the appropriate package coverage.  <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Therefore, compare the <strong style=\"font-weight:700;color:inherit\">Scope of Maintenance<\/strong> for each required package and the architecture actually used. For Ubuntu, the Main and Universe components\u2014as well as the requirements for Pro and a potential Legacy add-on\u2014are particularly relevant. Also note how available CVE fixes can be verified and whether the existing release and update processes align with the offering.   <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">In both examples, the migration target remains a planning decision, not a feature of the maintenance contract. If the line-of-business application is not yet operational on a supported platform, a suitable maintenance alternative can provide time for testing. If none of the offerings address a critical dependency, this gap must be addressed separately before continued operation can be justified.<\/p>\n<\/section><section class=\"wh-section\" aria-labelledby=\"cve-fehlersuche\" style=\"display:block;margin:0 0 36px;min-width:0\"><h2 id=\"cve-fehlersuche\" style=\"margin:38px 0 18px;color:#172f41;font-size:clamp(24px,1.25rem + 1vw,30px);font-weight:700;line-height:1.3;scroll-margin-top:115px\">Check CVE reports and backports<\/h2><p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">If a scanner continues to report a vulnerability after an update, first check the exact distribution and version, as well as the name, architecture, and installed version of the affected package. Also determine which package source it comes from. A finding for a distribution package cannot be readily applied to a self-compiled application or a package from a third-party repository.<\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">The reason for apparent contradictions may be a <strong style=\"font-weight:700;color:inherit\">Backport<\/strong> be: In this case, a security fix is incorporated into an older development branch without its visible upstream version number matching that of the latest release. An older version number alone therefore does not prove that the package is vulnerable, nor that the scanner's report must be incorrect.<\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Compare the specific CVE and the installed package version with the information for your distribution in the TuxCare CVE Tracker. \u201eIn Testing\u201c means that a fix is still being tested; \u201eIn Rollout\u201c means it is being distributed via rollout repositories. \u201eReleased,\u201c on the other hand, indicates that the fix has been fully released to all users. Even then, you must verify that the correct version has actually been installed; \u201eNot Vulnerable\u201c means that the TuxCare version is not affected. <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">If an expected update is missing from the package manager, check not only the package source and version but also the <strong style=\"font-weight:700;color:inherit\">Rollout Status<\/strong>. For multiple platforms, staggered distribution following publication in the stable repository may take up to 14 additional days. A potential bypass may only be incorporated into the process in accordance with the current, distribution- and release-specific original instructions and upon operational approval; this does not result in a guaranteed total patch timeframe.  <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Next, examine the scanner\u2019s database and analysis. TuxCare provides OVAL data for a range of ELS products; you must verify for yourself whether your tool is using the correct data for the specific system and interpreting it correctly. Document the package version, CVE status, and scan time. If the comparison remains unclear, continue to treat the finding as open and clarify it with the relevant departments or the vendor. <\/p>\n<\/section><section class=\"wh-section\" aria-labelledby=\"patchbetrieb-neustarts\" style=\"display:block;margin:0 0 36px;min-width:0\"><h2 id=\"patchbetrieb-neustarts\" style=\"margin:38px 0 18px;color:#172f41;font-size:clamp(24px,1.25rem + 1vw,30px);font-weight:700;line-height:1.3;scroll-margin-top:115px\">Scheduling Patch Operations and Restarts<\/h2><p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Setting up a repository is the beginning of the patching process, not the end. Determine who will regularly check for available updates, who will approve them, and how failed updates will be detected. Compare the package versions that are actually installed with the available updates and record any discrepancies for each system. <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Whenever possible, test updates first on a comparable test system running the same application and using the relevant package sources. In particular, test the startup, login, and key interfaces of the line-of-business application. Only after receiving operational approval should you roll out the packages in a controlled manner; the results and any errors should be documented in the installation report.<\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Also, plan for changes <strong style=\"font-weight:700;color:inherit\">Maintenance window<\/strong>. Even after a successful package update, running processes may still use old libraries until they are restarted. Applications may also need to be restarted; a system reboot may be required if kernel changes are involved. After the reboot, verify both the service functionality and the expected package and operating status.<\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">KernelCare Live Patching is a complementary product and should be distinguished from regular ELS package updates. It can apply supported kernel patches while the system is running, but it does not replace all updates or every service or system restart. Check the product, distribution, and architecture: For CentOS 7, TuxCare documents kernel live patching only for x86_64. Further basics are explained in the article on <a href=\"https:\/\/webhosting.de\/en\/kernelcare-patch-feed-live-linux-security-without-reboot-secure\/\">KernelCare Patch Feed<\/a>.  <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">The issue of <code data-no-translation style=\"font:600 .87em\/1.5 ui-monospace,monospace;color:#235063;background:#edf3f5;border-radius:4px;padding:.1em .3em\">uname -r<\/code> shows the currently running kernel, but not the server's complete update status. For example, an installed kernel package may not become active until after a reboot; conversely, the output does not indicate whether libraries and applications have been updated and restarted.<\/p>\n<\/section><section class=\"wh-section\" aria-labelledby=\"migration-entscheidung\" style=\"display:block;margin:0 0 36px;min-width:0\"><h2 id=\"migration-entscheidung\" style=\"margin:38px 0 18px;color:#172f41;font-size:clamp(24px,1.25rem + 1vw,30px);font-weight:700;line-height:1.3;scroll-margin-top:115px\">Choose a temporary solution or migration<\/h2><p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Whether TuxCare ELS is sufficient for a specific server depends on that server\u2019s actual components and risks. Compare the required packages with the available coverage and identify any gaps in applications, runtime environments, and third-party software. ELS for OS covers a distribution-specific selection; support for the operating system does not imply maintenance for every application running on it. <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Also check for any remaining CVE vulnerabilities within the packages covered. According to TuxCare, medium-risk vulnerabilities are only considered for a patch under additional conditions; furthermore, the vendor may provide a mitigation rather than a direct code fix. Therefore, for each specific vulnerability, assess whether a fix or a mitigation is available and whether the remaining risks are acceptable for your operations. <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">A temporary solution may be appropriate if a line-of-business application is currently tied to the old platform and the remaining risks are manageable. However, also consider the manufacturer\u2019s available maintenance options: For Ubuntu 18.04, depending on your needs, Ubuntu Pro and, if necessary, the Legacy add-on are viable alternatives. Review the packages, architecture, and contract terms\u2014not just the respective end date. <\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">For a publicly accessible service with an unmaintained application or an unsupported runtime, ELS alone may not be sufficient. Therefore, limit access to only those networks and services that are actually needed, remove unnecessary permissions, and monitor administrative access. These <strong style=\"font-weight:700;color:inherit\">Network Limitation<\/strong> It reduces the attack surface, but does not replace missing security updates.<\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Keep the continued operation temporary and define a migration goal, including the responsible parties and a verifiable deadline. Plan application tests on the target platform, the data migration, and the verification of all relevant interfaces. A fallback plan should specify the conditions under which you would abort the migration and how you would revert to the previous operating state.<\/p>\n<p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Review the plan regularly in light of new package vulnerabilities, changes in vendor dependencies, and operational overhead. If required components can no longer be maintained or if necessary access cannot be sufficiently restricted, simply extending the operating system support period may not be sufficient. In such cases, migration, application replacement, or controlled decommissioning must be reevaluated.<\/p>\n<\/section><section class=\"wh-sources\" style=\"margin:40px 0 0;padding:24px 0 0;border-top:1px solid #dce5e9;color:#596b7b;font-size:14px;line-height:1.65\"><h2 style=\"margin:38px 0 18px;color:#172f41;font-size:clamp(24px,1.25rem + 1vw,30px);font-weight:700;line-height:1.3;scroll-margin-top:115px\">Sources and Current State of Knowledge<\/h2><p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Status of the research: <time datetime=\"2026-11-04\">2026-11-04<\/time><\/p><p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\">Search date: November 4, 2026. Please double-check the manufacturer's information regarding deadlines, package lists, and product scope prior to publication; their retroactive status as of the search date cannot always be verified.<\/p><div class=\"wh-source-urls\"><p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\"><span class=\"wh-source-url\" data-no-translation dir=\"ltr\" style=\"overflow-wrap:anywhere;font:12px\/1.6 ui-monospace,monospace;direction:ltr\">https:\/\/docs.tuxcare.com\/els-for-os\/<\/span><\/p><p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\"><span class=\"wh-source-url\" data-no-translation dir=\"ltr\" style=\"overflow-wrap:anywhere;font:12px\/1.6 ui-monospace,monospace;direction:ltr\">https:\/\/support.tuxcare.com\/hc\/en-us\/articles\/11371554556572-Frequently-asked-questions-about-TuxCare-Endless-Lifecycle-Support<\/span><\/p><p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\"><span class=\"wh-source-url\" data-no-translation dir=\"ltr\" style=\"overflow-wrap:anywhere;font:12px\/1.6 ui-monospace,monospace;direction:ltr\">https:\/\/ubuntu.com\/security\/esm<\/span><\/p><p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\"><span class=\"wh-source-url\" data-no-translation dir=\"ltr\" style=\"overflow-wrap:anywhere;font:12px\/1.6 ui-monospace,monospace;direction:ltr\">https:\/\/docs.tuxcare.com\/els-for-os\/centos-7-els\/<\/span><\/p><p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\"><span class=\"wh-source-url\" data-no-translation dir=\"ltr\" style=\"overflow-wrap:anywhere;font:12px\/1.6 ui-monospace,monospace;direction:ltr\">https:\/\/docs.tuxcare.com\/els-for-os\/managing-els-repository\/<\/span><\/p><p style=\"margin:0 0 1.1em;font-size:inherit;line-height:inherit\"><span class=\"wh-source-url\" data-no-translation dir=\"ltr\" style=\"overflow-wrap:anywhere;font:12px\/1.6 ui-monospace,monospace;direction:ltr\">https:\/\/wiki.ubuntu.com\/Security\/ESM\/18.04<\/span><\/p><\/div><\/section><\/div>","protected":false},"excerpt":{"rendered":"<p>TuxCare Endless Lifecycle Support provides security updates for selected packages in older Linux distributions. Key factors include specific package coverage, a controlled update process, and a migration plan.<\/p>","protected":false},"author":1,"featured_media":22154,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[794],"tags":[],"class_list":["post-22151","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-sicherheit-computer_und_internet"],"acf":[],"_links":{"self":[{"href":"https:\/\/webhosting.de\/en\/wp-json\/wp\/v2\/posts\/22151","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/webhosting.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/webhosting.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/webhosting.de\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/webhosting.de\/en\/wp-json\/wp\/v2\/comments?post=22151"}],"version-history":[{"count":3,"href":"https:\/\/webhosting.de\/en\/wp-json\/wp\/v2\/posts\/22151\/revisions"}],"predecessor-version":[{"id":22157,"href":"https:\/\/webhosting.de\/en\/wp-json\/wp\/v2\/posts\/22151\/revisions\/22157"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/webhosting.de\/en\/wp-json\/wp\/v2\/media\/22154"}],"wp:attachment":[{"href":"https:\/\/webhosting.de\/en\/wp-json\/wp\/v2\/media?parent=22151"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/webhosting.de\/en\/wp-json\/wp\/v2\/categories?post=22151"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/webhosting.de\/en\/wp-json\/wp\/v2\/tags?post=22151"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}