Questions tagged [patch-management]

Patch Management refers to updating and patching systems, and particularly to tools and systems which automate this process for a large number of systems.

Patch Management refers to the important and never-ending task of installing software updates on systems, including the procedures involved with installing updates, defining update policies for an organization, and tools/systems to help with the patching process.

Patch Management may include patch selection methods (anything from manually reading the CVE list to automated vulnerability scans), patch deployment methods (manually installing patches, various software packages), and patch testing procedures (virtual environments, staged deployment, etc.)

Many tools (free and commercial) have evolved to help alleviate the workload. You may want to include a tag specific to the software you are using. Some examples include:

226 questions
2
votes
1 answer

Uninstalling KB2506143 (WMF 3.0) from Windows 2008R2 with Exchange 2010 SP2 doesn't work

KB2506143 was installed on Exchange 2010 SP2 machine on Windows 2008 R2. Since WMF 3.0 was installed Rollup Updates cannot be installed as they fail on starting some PowerShell scripts. Normal scenario assumes that uninstalling that patch works and…
MadBoy
  • 3,725
  • 15
  • 63
  • 94
2
votes
0 answers

superceded patch - would the old one still show?

Example - if you have a Windows security patch that was released earlier in the year and you installed it. Then, if another security patch came out to SUPERCEDE that original one...would the server/computer show both patches as being installed or…
lara400
  • 465
  • 2
  • 5
  • 13
2
votes
2 answers

Bootstrap a debian build environment and build source packages with no root privileges

On debian squeeze, I am trying to do the following : fetch sources package from the wheezy source repository bootstrap a squeeze chroot for several architectures build the packages for several architectures (i386, amd64, all and any) I want both…
2
votes
1 answer

BES 5.x issues when connecting to Exchange 2010 SP2 RU4

Ever since we updated from SP1 RU4 to SP2 RU4 we have noticed that our BES devices will simply stop receiving email. This has occurred at least 5 times in the past few weeks. Today, while speaking with RIM support (a T3 contract), they said that…
makerofthings7
  • 8,911
  • 34
  • 121
  • 197
2
votes
3 answers

Managing several PCs

I'm looking for suggestions on how to best manage a group of 5-10 Windows 7 PCs. My primary concern is making sure the OS and applications stay up-to-date. My ideal solution would be to partition separate system and user volumes, then periodically…
2
votes
2 answers

Performing Patch/Delta Releases for Web Application

First, my (simplified) problem in a nutshell: My release cycle at work is, each release we currently perform a full copy/deploy of the web application. Simply put, we generate a tarball, SCP it to the production server, and install it. Simple as…
chadl
  • 95
  • 1
  • 1
  • 6
2
votes
3 answers

When Is it proper to autoupdate servers?

I'm asking this question of the SF community based on the latest posting from Dreamhost (a significant webhosting provider here in the US) based on significant downtime suffered from them: We run Debian OS and have used autoupdates to ensure…
GregD
  • 8,713
  • 1
  • 24
  • 36
2
votes
2 answers

Using a Patched libresolv and OpenSSH on Ubuntu

We've got a couple of dozen Ubuntu systems (ranging from 8.04 to 9.40, both desktops and servers with only serial console access on which we'd like to run a patched version of glibc. In particular, this is to fix the inability of glibc's resolver to…
cjs
  • 1,385
  • 1
  • 12
  • 23
2
votes
2 answers

How can I tell which package updates will require a reboot or service restart?

One of our boxes is running Ubuntu 8.04 LTS. Most Ubuntu package upgrades are trivial and don't affect availability much. How do I tell which packages are going to cause an outage before applying them?
jldugger
  • 14,342
  • 20
  • 77
  • 129
2
votes
2 answers

Patch Management Solution?

I'm currently in the process of looking for a patch management solution. The solution would need to be able to patch both MS software and 3rd party software like Adobe. It will also need to be able to patch computers outside of the network. What…
Joe
  • 61
  • 1
  • 2
2
votes
2 answers

Are upgrades of system-critical libraries used immediately

Given a security fix for a system-critical library like libc. Debian-based distros will publish after a few hours / days packages for it. But is the library immediately used for already running applications after installing the deb-package for the…
markus
  • 185
  • 5
  • 10
2
votes
1 answer

How/where to find all Update (msu) packages for Windows 7 (Enterprise)

I've been using Wim2Vhd to create native boot vhd files. (I'm using this to keep several development environments ready, I'm a developer, I know -- I need help ;-) Now the first boot always ends up in several minutes installing all of the windows…
Rudi
  • 121
  • 1
  • 3
2
votes
2 answers

Diff always fail to apply patch of files I make?

I have some files in my server that I wanted to make a patch for, so I took one of the files to test: cp /path/file ~/file So now I have just the same file in my root directory so I make any changes I need on the file at ~/file and now I run the…
Prix
  • 4,881
  • 3
  • 24
  • 25
2
votes
3 answers

Disabling Windows Update and managing patches manually

We are hosting a few servers at a colo facility and we have arranged for another company to perform some monitoring and server maintenance work of our machines. This provider is suggesting that we "turn off" Windows Update in the Windows Server 2008…
CesarGon
  • 440
  • 3
  • 14
  • 27
2
votes
4 answers

Push Windows Updates?

Is there a method or software that will allow the ability to push windows updates to clients in an non-active directory environment? WSUS is not an option for the situation as it doesn't have the ability to push the updates to the clients, only for…
Edge