We have a critical production web server that can only be rebooted on early Sunday mornings.
Almost all critical security patches ask for a reboot after installing. I have a fear that a security vulnerability patch will come out on Tuesday and a zero day exploit will compromise the server before it gets a chance to reboot 5 days later.
Is the vulnerability removed after the install or after the reboot? Am I being overly paranoid? Is clustering the only way around this?