He gave the impression he didn't patch ANYTHING, including his kernel, yet you boys wanted to throw him a ticker tape parade since he was using linux. An obsolete version of that too, LMAO!
I explicitly stated that ssh/ssl and the database were kept current. If you got the impression that the sysadmins never patched anything, it is because you were not paying attention.
You are correct that the kernel was not patched after the initial installation, but then it was not necessary or useful either. There were no bug or security fixes that affected us in that environment. In fact, I had to lay down the law on a sysadmin who wanted to apply irrelevant kernel patches to that particular machine so that it would be "current". You do not monkey with mission-critical servers with huge file systems without a damn good reason, and it was a 24x7 box so downtime for any reason (and therefore risking downtime) is ipso facto bad.
We have an old Sun box here running a pretty old version of Solaris. It's been running for years, perfectly, so there hasn't been a real need to upgrade. Going to denigrate us for using an old version?
It seems you've swallowed the Microsoft "You have to buy the latest" profit-making line.