Patch Management refers to updating and patching systems, and particularly to tools and systems which automate this process for a large number of systems.

learn more… | top users | synonyms

0
votes
1answer
46 views

Files listed on WinShock (KB2992611) what do the different file sizes for the same file name mean?

Lsass.exe.mui 6.0.6002.23498 10,752 20-Sep-2014 03:46 Not applicable Lsasrv.dll.mui 6.0.6002.23498 50,688 20-Sep-2014 03:33 Not applicable Lsass.exe.mui 6.0.6002.23498 10,752 ...
0
votes
0answers
12 views

How to Configure Spacewalk Database on a Different Partition

Good morning, I'd like to configure a separate partition for my Spacewalk database, but I'm not sure how to tell the application to point to the new partition during the install process. I've done ...
5
votes
1answer
32 views

How to Configure A Software Update Baseline in SCCM 2012

I have a remote site that has about 70 systems that have not been patched for the last 4 months due to the WSUS server going down and I am now just getting around to deploying SCCM 2012 there. Can ...
1
vote
1answer
21 views

Microsoft updates feed [closed]

I'm trying to write a web scraper that will pull together information about security updates for various products but I cannot find one for microsoft products. As this is cross-platform and includes ...
-2
votes
2answers
64 views

Can I update Ubuntu with active users logged in? [closed]

I would like to run apt-get dist-upgrade, but I don't know how this will affect the currently logged in users. How can I find out: 1. will a restart be required 2. will the system be ...
0
votes
0answers
24 views

LanDesk, CBA 8 unable to locate the remote

I'm patching some workstation via LanDesk and for 1 workstation, there's this error that appears sometimes... I mean : i have to patch 10 updates on this workstation update 1 : ok update 2 : error ...
1
vote
3answers
93 views

powershell check windows update on a server

We have some 1000 + servers, we are doing monthly patching activity. i need to check the patches are updated on the servers or not, is it possible to check based on the Microsoft Security Bulletin ...
2
votes
1answer
36 views

Hardened compiler flags VS automatic security patches?

I noticed that a few select pieces of software in the Long Term Support repository for my Operating System, have not been compiled with PIE, or Immediate binding (for example). In the opinion of ...
3
votes
1answer
75 views

Is there a different way to view the Windows Updates for a computer that summarizes what each is for?

When reviewing some of our Windows servers, it can be extremely tedious to tell whether a security update is relevant to our system. A patch to IIS is irrelevant if we use Apache; an exploit affecting ...
1
vote
1answer
1k views

(VMware) esxcli software vib update -n xxx, which vib version is selected for the module xxx

Although I have read VMware's official blog post http://blogs.vmware.com/vsphere/2013/10/are-esxi-patches-cumulative.html very carefully, there is still quite some mist. Now I ask one concise ...
2
votes
2answers
376 views

RHEL 5 list missing critical patches/packages

Im trying to figure out if there is an easy way to identify the missing critical patches/packages on my RHEL5 boxes. This is for audit purposes and was trying to figure out if there was an RPM command ...
-1
votes
2answers
196 views

Linux patch management [closed]

I'm doing a internship to setup a Linux patch management system. It's a IT infrastructure management company with focus on Microsoft systems. They currently have ~15 Linux servers to manage and ...
0
votes
1answer
79 views

Does MS notify when an OS patch is updated?

We know the drill, every Patch Tuesday MS releases a long list of MS13-xx patches. Those typically consist of KB items for individual configurations or servers. From time to time, though, Microsoft ...
0
votes
0answers
42 views

Server setup scripts, patches and migrations

I have written some scripts which I use to configure various servers in a uniform way. Each time I deploy a server I run the relevant scripts so that I know they're all configured the same. I then ...
4
votes
3answers
268 views

How important is patch management? [duplicate]

Problem I'm trying to sell the idea of organizational patch/update management and antivirus management to my superiors. Thus far, my proposition has been met with two responses: We haven't had any ...
4
votes
3answers
931 views

Is it usually safe to run “apt-get upgrade” (in terms of stability) on a production server?

I often log into my Ubuntu 12.04.2 server (with Postgres 9.2.4 running with live production data) and see something akin to: 4 packages can be updated. 4 updates are security updates. This happens ...
1
vote
5answers
2k views

Run WSUS in an isolated server

We have a test/integration environment (rig) running Windows HyperV with server VMs inside it. I'd like to manage patches in the rig (the hyper V hosts and the VMs inside, which are all on their own ...
1
vote
0answers
46 views

Resume by RTC to guarantee software updates

I am maintaining around 100 user workstations with various software and operating systems. I use a WSUS Server for Windows updates and I have a set of custom scripts for other software. WSUS will ...
3
votes
1answer
56 views

Managing patches to configuration files

I use a configuration management system and, as I believe is common, my CM software simply copy-pastes configuration files to deploy them to my Linux servers, blindly clobbering whatever's there. But ...
1
vote
1answer
4k views

WsusContent folder how to clear down

I have an SBS2008 server, the WsusContent folder was 78 GB in size, I have ran the server cleanup wizard but it is still 71GB, is there any safe way to clear these out, there are a total of 7786 ...
-1
votes
1answer
136 views

Windows Server Patching: Verification of Windows server coming back up after reboots? [closed]

I have been working towards improving our monthly Windows Server update process. The goal is to remove as much of the manual process as possible. Our process has been 1) Present updates to servers ...
25
votes
4answers
719 views

Will virtualizing a server mean another OS layer to patch and update, more work and greater risk?

I've done a search and have not found anything addressing issues regarding patching and system updates. I've got guidelines that say servers need to have necessary patches. If I have a VM host then ...
2
votes
0answers
49 views

superceded patch - would the old one still show?

Example - if you have a Windows security patch that was released earlier in the year and you installed it. Then, if another security patch came out to SUPERCEDE that original one...would the ...
3
votes
1answer
179 views

Patch Management in computer lab environment

Backgound I work at a university as an administrator over all of the public computer labs. Our labs are composed of hundreds of dual-boot iMacs(Mountain Lion + Windows 7) as well as hundreds Windows ...
2
votes
3answers
8k views

How do I determine the SP and Rollup version of an Exchange installation?

How do I determine the SP version number and Rollup version of an Exchange installation?
2
votes
3answers
70 views

Managing several PCs

I'm looking for suggestions on how to best manage a group of 5-10 Windows 7 PCs. My primary concern is making sure the OS and applications stay up-to-date. My ideal solution would be to partition ...
1
vote
1answer
86 views

Use WSUS to select patched to install, but not to download them

I am looking after three sites. Two are nice and close and share a high-speed link, so there is a single WSUS server to manage those - no problems there. The other site is 4 servers in China, using ...
31
votes
5answers
6k views

Are VMware ESXi 5 patches cumulative?

This seems basic, but I'm confused about the patching strategy involved with manually updating standalone VMware ESXi hosts. The VMware vSphere blog attempts to explain this, but the actual process is ...
0
votes
3answers
2k views

Get a list of missing hotfixes for windows

How to get a list of all available patches/hotfixes for any given Windows platform? What I would like to do is: Get a list of already deployed patches (using something like wmic qfe list full ...
2
votes
3answers
187 views

When Is it proper to autoupdate servers?

I'm asking this question of the SF community based on the latest posting from Dreamhost (a significant webhosting provider here in the US) based on significant downtime suffered from them: We run ...
1
vote
1answer
3k views

GPO: Windows Firewall Exceptions - enable for one target IP only (LAN Guard)

I'm in the midst of setting up GFI LAN Guard for vulnerability scanning and patch management. The first thing I have to get in order is for LG to inventory all of the clients on the network. In order ...
3
votes
1answer
734 views

Remotely update Adobe Reader on Mac OS X from terminal

I want to update Adobe Reader remotely on a Mac through the terminal. Flash Player had a .pkg file in the .dmg, so installing that wasn't difficult. There is no .pkg file in Adobe Reader updates. ...
10
votes
4answers
791 views

What does the Windows XP EOL/EOS mean for a business and it's domain?

I am hoping someone can explain in simple terms, what it really means that windows XP will be end of life? It looks like SP2 is already not being patched, but maybe SP3 is going to be patched up ...
3
votes
1answer
68 views

Patching Exchange mailbox server without potential data loss

I have what I think is a quick easy question. I'd like to apply a service pack to my exchange 2007 mailbox server. I don't have a CCR setup, so its a pretty standard configuration. We do have it ...
1
vote
1answer
61 views

Check that NLM is patched in Netware 6.5

We need to solve vulnerability CVE-2011-4191 "Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or ...
0
votes
1answer
120 views

Confirming updates were applied via WSUS

Is there a way to setup WSUS to e-mail a weekly or monthly report which would indicate the current patch status of each computer under a given WSUS policy? I'm hoping there is another way to verify ...
1
vote
2answers
181 views

Patch Management Solution? [closed]

I'm currently in the process of looking for a patch management solution. The solution would need to be able to patch both MS software and 3rd party software like Adobe. It will also need to be able ...
3
votes
3answers
223 views

How do you manage software's local forks?

As a system administrator, I often have to modify programs for my company. Example: We're using an web interface to manage our local DNS. After downloading and extracting the tar.gz file from the ...
1
vote
4answers
161 views

Convenient source for information on known exploits (not theoretical)

Forgive me if this question has been asked before or is off-topic. The past couple of security patches I've installed have been discovered from reading news articles, which publicly discuss security ...
3
votes
2answers
229 views

Patch Panel Cable Tangle

Possibly the noob-est question ever (I'm a developer stepping in to do some sysadmin stuff): I have a 48-port patch panel bolted to a wall about 10 feet from where my rack is. Right now there's a ...
3
votes
4answers
129 views

How do you know when to patch your Ubuntu box?

I have a VPS hosted somewhere running Ubuntu 10.04. How do I know when to patch the system? Is there a notification system analogous to, for example, Mac OS or Windows warning me (through email) to ...
2
votes
2answers
42 views

Are upgrades of system-critical libraries used immediately

Given a security fix for a system-critical library like libc. Debian-based distros will publish after a few hours / days packages for it. But is the library immediately used for already running ...
8
votes
4answers
2k views

Centralized Windows/Mac Patch Management that is easy to use

I'm looking for advice on what patch management solutions you would recommend based upon your experience. I'm also looking for which ones you would not recommend based upon your experience. We have ...
5
votes
5answers
326 views

IE8 vs Firefox 4 with regards to central management and updating

For an organization still using XP, and that plans to continue using XP for at least another year, do you think it would be better to switch to Firefox 4 or continue to use IE8? Is Firefox ...
11
votes
3answers
20k views

How can I query my system via command line to see if a KB patch is installed?

I'm looking to find out if a KB is installed via command line.
8
votes
5answers
3k views

Suggestions for free/cheap asset/patch management software (Adobe, Java, etc)

I am using WSUS for Microsoft patching but would like something that will inventory and patch Adobe, Java, Firefox, Quicktime, etc. I have used Lumension in the past and it was OK but it is too ...
6
votes
6answers
462 views

How to Minimize Linux Server Reboots

Last week there were a fair few comments on a slashdot article about whether Unix (or Linux) machines ever need to be rebooted. More than a few of the commenters mentioned having machines with ...
4
votes
4answers
720 views

Patch Management and System Inventory on a Windows network? [closed]

What are some good ways to have patch management and systems/hardware inventory for a Windows (Server 2003 or 2008) network? For example, at a minimum knowing the basics for all the machines out on ...
3
votes
3answers
12k views

Update RHEL Servers without Internet Connection

I plan to have a few servers installed with RHEL, but the servers will not have Internet connection. Is it possible to update RHEL servers without Internet connection? Can I download the updated ...
1
vote
2answers
93 views

When should I upgrade (or not upgrade) Java?

I'm pretty familliar with .NET and know that patches and upgrades are mutually exclusive to framework versions (1.x) and (2.x / 3.x) and (4.x). This segregation makes it easy to understand the ...