Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [patch-management]

Patch Management refers to updating and patching systems, and particularly to tools and systems which automate this process for a large number of systems.

Patch Management refers to the important and never-ending task of installing software updates on systems, including the procedures involved with installing updates, defining update policies for an organization, and tools/systems to help with the patching process.

Patch Management may include patch selection methods (anything from manually reading the CVE list to automated vulnerability scans), patch deployment methods (manually installing patches, various software packages), and patch testing procedures (virtual environments, staged deployment, etc.)

Many tools (free and commercial) have evolved to help alleviate the workload. You may want to include a tag specific to the software you are using. Some examples include:

226 questions
1
vote
0 answers

Resume by RTC to guarantee software updates

I am maintaining around 100 user workstations with various software and operating systems. I use a WSUS Server for Windows updates and I have a set of custom scripts for other software. WSUS will push updates at 3am, and the scripts run an hour…
tcshain
  • 31
  • 1
1
vote
1 answer

WsusContent folder how to clear down

I have an SBS2008 server, the WsusContent folder was 78 GB in size, I have ran the server cleanup wizard but it is still 71GB, is there any safe way to clear these out, there are a total of 7786 updates, there are only 7 PCs in the network so it…
JJJJNR
  • 870
  • 6
  • 20
  • 32
1
vote
1 answer

How can I automate installation of a package to Linux and Windows Virtual Machines on VMware ESX4?

I would like to create an application that will traverse a Virtual Infrastructure using the vSphere Web Services API (this part I have handled) and perform and unattended install of some given package on Linux and Windows machines (this latter part…
nc.
  • 133
  • 4
1
vote
3 answers

Free centralized patch management for Debian

We have a number of Debian servers that need to be patched and manual patching becomes an issue as their number grows. What I am lookig at is a way to push patches to the servers from the central location and have some sort of reporting on how it…
Sergei
  • 1,226
  • 16
  • 25
1
vote
1 answer

ESX 3.5 refuses to update

I have a set of ESX 3.5 servers in 2 different datacenters. One is DR, one is production. They are on the same vlan and so I can access any of them on the private network from my vCenter server. Last month, as a learning experience (I hadn't dealt…
Speeddymon
  • 191
  • 1
  • 10
1
vote
1 answer

Use WSUS to select patched to install, but not to download them

I am looking after three sites. Two are nice and close and share a high-speed link, so there is a single WSUS server to manage those - no problems there. The other site is 4 servers in China, using an ipsec VPN; this is not so great for patch…
DrStalker
  • 6,946
  • 24
  • 79
  • 107
1
vote
2 answers

Apache Security Patch update in centos version 5.4

I am running centos version 5.4 with apache version 2.2.3, I want to get latest security patches for this apache version. I checked the last update for apache via rpm -q --changelog httpd | less and it shows Thu Mar 25 2010 Karanbir Singh…
Toqeer
  • 1,241
  • 3
  • 14
  • 20
1
vote
3 answers

Do you actually keep IOS up to date?

In quite a few environments I see Cisco hardware treated as 'set it and forget it'. Many admins just don't even think about updating IOS. If you look in places like Packstorm or Bugtraq, some months you will see tons of attacks all centered at IOS.…
Terry
  • 1,073
  • 1
  • 11
  • 17
1
vote
1 answer

What is the preferred way to distribute a small update to software?

If a product simply requires a replacement of the .EXE file, what would be the expected way to deliver this update to multiple workstations in a large enterprise? Is an .MSP file preferred? Or should a new .MSI file be provided and it simply be…
CJ7
  • 653
  • 10
  • 24
1
vote
1 answer

"The update is already installed on this system" message when trying to apply hotfixes

I was trying to install (KB2460011 and KB2516475) to windows Server 2008R2 SP1 Standard after suggested as a fix for SQL Server crashing issue and it gives me update is already installed message/error but I don’t see the hotfixes applied when I…
DaniSQL
  • 1,107
  • 7
  • 12
1
vote
1 answer

GPO: Windows Firewall Exceptions - enable for one target IP only (LAN Guard)

I'm in the midst of setting up GFI LAN Guard for vulnerability scanning and patch management. The first thing I have to get in order is for LG to inventory all of the clients on the network. In order to ensure that this runs successfully, I need to…
Citizen Chin
  • 532
  • 2
  • 12
  • 21
1
vote
4 answers

How do you manager MSSQL 2000/2005 patches

I am learning how to manage databases for my company and while I have pretty good understanding of using a database, I can definately see that it is completely different administering a database. My possition is we are a small team and we previously…
Lima
  • 374
  • 3
  • 12
1
vote
1 answer

Check that NLM is patched in Netware 6.5

We need to solve vulnerability CVE-2011-4191 "Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or cause a denial of service (abend or NFS outage) via…
ptt35t
  • 11
  • 1
1
vote
4 answers

Convenient source for information on known exploits (not theoretical)

Forgive me if this question has been asked before or is off-topic. The past couple of security patches I've installed have been discovered from reading news articles, which publicly discuss security vulnerabilities that apply to software on my…
maple_shaft
  • 171
  • 9
1
vote
1 answer

Implementing an NMS

We are looking to implement an NMS (netork monitoring software) in our company and have found many different products; Nagios, Kaseya, Zabbix, Zenoss, Munin, OpenNMS. The core functionality that we need is patch management and server monitoring if a…
nobody
1 2 3
…
15 16