Questions tagged [patch-management]

Patch Management refers to updating and patching systems, and particularly to tools and systems which automate this process for a large number of systems.

Patch Management refers to the important and never-ending task of installing software updates on systems, including the procedures involved with installing updates, defining update policies for an organization, and tools/systems to help with the patching process.

Patch Management may include patch selection methods (anything from manually reading the CVE list to automated vulnerability scans), patch deployment methods (manually installing patches, various software packages), and patch testing procedures (virtual environments, staged deployment, etc.)

Many tools (free and commercial) have evolved to help alleviate the workload. You may want to include a tag specific to the software you are using. Some examples include:

226 questions
4
votes
2 answers

Is there a diff/merge utility to compare binary files and synchronize data bit-by-bit in either direction based on differences in binary data?

I have a tricky dilemma. I've got some files on two different destination drives, copied from the same source drive. The source drive had been failing, so I used dd to copy over the data to one destination (with options conv=noerror,sync which fills…
purefusion
  • 275
  • 1
  • 3
  • 9
4
votes
1 answer

Will IIS always be installed as fully patched?

When I install Internet Information Server on a Windows machine that is fully patched according to Windows Update, will it be installed as patched right from the start? I have always wondered if any patching inconsistencies could arise from the fact…
Tomalak
  • 1,605
  • 4
  • 17
  • 32
3
votes
1 answer

Windows post-patching monitoring

We currently provide patch management as a service to a large number of servers. Historically, we have had tier 1 type technicians RDP to each machine after the patching window to verify they are online. We are quickly outgrowing this method of…
3
votes
1 answer

Does windows update show updates installed if the updates were installed manually?

I am investigating a new system in our environment. When I got to Windows Update it displays that there never has been any updates. This machine is connected to a WSUS Server. I know that the "Updates were installed:" field will list the date that…
DarkSheep
  • 1,036
  • 1
  • 13
  • 23
3
votes
3 answers

How to update solaris 10 to be safe from shellshock bug?

Saw this post here. Logged into my Solaris server in ssh and tried patchadd 19689293 and it just says it cannot find the patch.
Billy
  • 163
  • 1
  • 1
  • 5
3
votes
1 answer

Is there a different way to view the Windows Updates for a computer that summarizes what each is for?

When reviewing some of our Windows servers, it can be extremely tedious to tell whether a security update is relevant to our system. A patch to IIS is irrelevant if we use Apache; an exploit affecting HTTP connections is not relevant if all our…
Myrddin Emrys
  • 636
  • 2
  • 10
  • 24
3
votes
1 answer

dget complains that public key not found

I'm trying to backport a package, but dget (dscverify) says that it can't check the signature because of public key not being found: [root ~/build/openssl] dget -x…
x-yuri
  • 2,141
  • 2
  • 24
  • 29
3
votes
1 answer

Managing patches to configuration files

I use a configuration management system and, as I believe is common, my CM software simply copy-pastes configuration files to deploy them to my Linux servers, blindly clobbering whatever's there. But for the most part, my config files should just…
Yang
  • 1,665
  • 6
  • 21
  • 35
3
votes
3 answers

How do I determine the SP and Rollup version of an Exchange installation?

How do I determine the SP version number and Rollup version of an Exchange installation?
makerofthings7
  • 8,911
  • 34
  • 121
  • 197
3
votes
2 answers

Data Center Automation tools and Novell Suse Linux?

I'm looking for info to automate the patching/updating process for several hundred Suse machines. Apart from Zenworks and SMT is there other patch management/automation tools you know with good support on Novell SLES OS? I found several tools but…
Julien
  • 430
  • 3
  • 12
3
votes
1 answer

Remotely update Adobe Reader on Mac OS X from terminal

I want to update Adobe Reader remotely on a Mac through the terminal. Flash Player had a .pkg file in the .dmg, so installing that wasn't difficult. There is no .pkg file in Adobe Reader updates. Does any one have a handy method for performing…
garg
  • 635
  • 1
  • 7
  • 17
3
votes
2 answers

Patching Exchange mailbox server without potential data loss

I have what I think is a quick easy question. I'd like to apply a service pack to my exchange 2007 mailbox server. I don't have a CCR setup, so its a pretty standard configuration. We do have it running on VMware and I plan on snapshotting it…
Eric C. Singer
  • 2,329
  • 16
  • 17
3
votes
3 answers

How do you manage software's local forks?

As a system administrator, I often have to modify programs for my company. Example: We're using an web interface to manage our local DNS. After downloading and extracting the tar.gz file from the internet, I have to do some changes: I added a LDAP…
SamK
  • 1,356
  • 3
  • 14
  • 28
3
votes
2 answers

Solaris 10 Get latest Installed patches

I'm trying to find out a way to display the LATEST patches installed in a Solaris box. I know the existence of the commands: showrev - p patchadd -p But I'd like to see a list of patches sorted by install date just to confirm that the box has the…
danboh
  • 355
  • 1
  • 3
  • 8
3
votes
2 answers

Patch Panel Cable Tangle

Possibly the noob-est question ever (I'm a developer stepping in to do some sysadmin stuff): I have a 48-port patch panel bolted to a wall about 10 feet from where my rack is. Right now there's a bundle of ~26 ethernet cables going from the patch…
user426724
  • 289
  • 1
  • 2
  • 10