Questions tagged [patch-management]

Patch Management refers to updating and patching systems, and particularly to tools and systems which automate this process for a large number of systems.

Patch Management refers to the important and never-ending task of installing software updates on systems, including the procedures involved with installing updates, defining update policies for an organization, and tools/systems to help with the patching process.

Patch Management may include patch selection methods (anything from manually reading the CVE list to automated vulnerability scans), patch deployment methods (manually installing patches, various software packages), and patch testing procedures (virtual environments, staged deployment, etc.)

Many tools (free and commercial) have evolved to help alleviate the workload. You may want to include a tag specific to the software you are using. Some examples include:

226 questions
2
votes
1 answer

Debian: Kernel update using APT - reboot required to take effect?

Suppose I update the kernel of a running Debian system using apt-get upgrade linux-image-amd64 to a higher minor version number (e.g., 5.10.10 to 5.10.11). Do I have to reboot the Debian server in order for the update to take effect?
manifestor
  • 6,079
  • 7
  • 27
  • 39
1
vote
1 answer

How to update Windows 10 Pro Endpoints remotely?

Here is the scenario, We have Windows 10 Pro (100 end points) all physical. It is a MS Windows AD environment. What is the best solution to update these end points remotely? Looking for something that does this job, not a host of other features.…
truthtriumphs
  • 59
  • 1
  • 10
1
vote
1 answer

How to have a reproducible security patching procedure on CentOS 7

TL;DR : How to make sure a list of package updates can be made in a reproducible way on many servers, even if newer security updates are available before the patching campaign is over? In a company that has regulatory constraints, the security…
Mossroy
  • 121
  • 3
1
vote
1 answer

CentOS: detailed history of patch updates

e.g. http://mirror.centos.org/centos/7/os/x86_64/Packages/ ... chrony-3.2-2.el7.x86_64.rpm Any ways to know what made the -2 part in 3.2-2? I.e. deltas between 3.2 and 3.2-2. That's no-brainer for Debian and Ubuntu I'm using Amazon Linux 2, but…
nodakai
  • 311
  • 3
  • 8
1
vote
2 answers

How to findout what pre-requisite MS patches are?

TL;DR: install MS patch requires previous patches, how to determine needed patches in an isolated network? I have this Windows 2008R2 SP1 machine in a isolated network, the machine hasn't been patched since 2015, which means a lot of patches are…
Sajuuk
  • 121
  • 6
1
vote
3 answers

Monthly Patch Releases for Linux CentOS/RedHat

Can somebody tell me when CentOS/RedHat release package updates monthly? Micrososft has patch Tuesday but I can't seem to find a day/week when CentOS/RedHat release monthly patches. I'd like to schedule my environment patching around this if such a…
jrd1989
  • 698
  • 15
  • 48
1
vote
1 answer

Determining When a Windows Reboot is Required

We are using Microsoft Systems Management Server (SMS) & Inventory Tool for Microsoft Updates (ITMU) for the distribution of Microsoft Security Patches. We use the following command for installation: PatchInstall.exe /g:0 /d /n /z:ws /c:15 /t:30…
1
vote
1 answer

Why is Windows Server 2012 not patchable for meltdown, when Windows Server 2008 R2 is?

Just curious, but does anyone know why Windows Server 2012 R1 server isn't patchable for meltdown/spectre? Windows 2008 R2 (2009) is patchable, but 2012 (2012) isn't? What was added in the R2 revisions of 2008 and 2012 that allowed for patching…
1
vote
1 answer

What do I have to install to update MOSS?

I found this great blog post on SharePoint patches: http://blogs.msdn.com/sowmyancs/archive/2008/09/24/all-available-sharepoint-service-packs-patches-and-related-information.aspx My question is do I have to install them all in order? or do the later…
rgwaldron
  • 157
  • 1
  • 8
1
vote
1 answer

XenServer 7.2 Hot Fix - Can only apply to Pool not Individual Hosts

I'm running xenserver 7.2 on a few M620 blade servers. I'm trying to apply XS72E004 and 005 patches. I go to the notification section and select Download/Install next to each patch. I have a pool created and if I leave the pool selected I can apply…
jrd1989
  • 698
  • 15
  • 48
1
vote
5 answers

What is the proper way to keep Ubuntu Server 8.04 updated?

I have a web server running Ubuntu Server 8.04 and I would like to know the proper commands to keep it updated. I’ve been using apt-get update and apt-get upgrade, but occasionally it tells me that there are packages held back. I’ve been using…
Corey
  • 2,031
  • 12
  • 39
  • 54
1
vote
1 answer

rsync for software update / multiple clients

I'm building a game launcher / updater and need to make clients download the last game version if an update is avaiable or if there is a problem with files integrity. I need something able to produce a "delta patch" between a client local game and…
FLX
  • 123
  • 5
1
vote
1 answer

XenServer 6.5 Patch Installed But Missing

I installed a few patches in my XenServer 6.5 environment. After I installed the 3 patches I noticed that in XenCenter that my server is saying it needs patch XS65ESP1021 installed. I confirmed that XS65ESP1021 is already applied to this server. I…
jrd1989
  • 698
  • 15
  • 48
1
vote
1 answer

Doubtes in MS KB Numbers

I am having some doubtes in MS KB numbers, For Example MS16-103 (KB 3182332) - under this we have two different KB nos like 3176492, 3176493. My doubts is which one we should apply in the server. in server kb 3176493 is installed, this kb is under…
karthick
  • 327
  • 1
  • 4
  • 12
1
vote
1 answer

Using WSUS to patch multiple environments

We set up Windows domains from scratch and then all servers (2003, 2008 R2, 2012, etc) sit offline (including DC's) for months before being used again. This causes a nightmare when trying to patch the servers once they are turned on again since…