Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is there any service available where you simply list the services, programs and versions you use, and when some CVE comes out about it, you automatically get alerted?

Also, is there any other place to look for this kind of information. Do some people release security vulnerabilities to other places than CVE?

So in general, how do you guys keep up to date with what might be vulnerable in your infrastructure?

Edit: Since I've been asked, we are a Unix shop with mostly Red Hat and some HP-UX. I would still prefer a high level solution which are OS independent. What happens if we use software versions which are not in the official repositories of Red Hat/HP/... or simply not supported by them.

share|improve this question
    
On Windows, I've used PatchLink. But I see from the tags that you specified Unix. Which Unix(es)? That might help direct the answers. –  mfinni Feb 17 '11 at 22:53
    
We use Red Hat and HP-UX, but I'm looking for an OS independent solution... –  skinp Feb 18 '11 at 14:31

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.