Bug#469901: linux-image-2.6-486: Upgrading from sarge leaves you behind with an old, unsupported and probably soon unsecure kernel

[Uwe Storbeck <uwe@ibr.ch>]

Package: linux-image-2.6-486
Severity: important

I'm not sure if this is the right package to file the report against.
But as this package probably should have been installed during the
upgrade I chose it. Be free to reassign the report.

This system had installed an up-to-date version of sarge with
standard kernel packages (kernel-image-2.4-k6 version 101sarge2,
kernel-image-2.4.27-4-k6 version 2.4.27-10sarge7). I upgraded it
to etch (aptitude update; aptitude dist-upgrade). The upgrade did
not touch the kernel nor did it warn me that I have to upgrade the
kernel myself.

So after the upgrade I end up with a system which has an (in etch)
unsupported and unmaintained kernel which never will be updated by
security updates and thus will be unsecure very soon. A standard
Debian user probably will not realize this fact and will feel secure
with his upgraded system.

If you upgrade from sarge to etch also the kernel should be upgraded
to a maintained version or at least there should be a clear warning
that you have to upgrade the kernel yourself.

Regards

Uwe


-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i586)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.4.27-4-k6
Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1)