Patch Management refers to updating and patching systems, and particularly to tools and systems which automate this process for a large number of systems.

learn more… | top users | synonyms

0
votes
0answers
9 views

Patch management solution for Debian and Ubuntu-environment [closed]

I'm looking for an open-source configuration management-solution like spacewalk. As the "spacewalk-server" must be installed on CentOS or Fedora and the environment I want to install it in runs on ...
-4
votes
1answer
51 views

Apply patch to custom kernel manually [closed]

I compiled a RHEL based kernel with a script. I've come to know that our version of kernel is vulnerable to attack and we need to apply security patches. ...
1
vote
1answer
57 views

VMWare Tools. How often to update and how to handle it?

We have about 8 ESXi Servers (5.5) and about 100 VMs. I always try to keep the ESXi Servers up to date with the vmware patches. This seems to work more or less well for me. Sometimes i need some weeks ...
0
votes
1answer
80 views

Files listed on WinShock (KB2992611) what do the different file sizes for the same file name mean?

Lsass.exe.mui 6.0.6002.23498 10,752 20-Sep-2014 03:46 Not applicable Lsasrv.dll.mui 6.0.6002.23498 50,688 20-Sep-2014 03:33 Not applicable Lsass.exe.mui 6.0.6002.23498 10,752 ...
0
votes
0answers
13 views

How to Configure Spacewalk Database on a Different Partition

Good morning, I'd like to configure a separate partition for my Spacewalk database, but I'm not sure how to tell the application to point to the new partition during the install process. I've done ...
5
votes
1answer
80 views

How to Configure A Software Update Baseline in SCCM 2012

I have a remote site that has about 70 systems that have not been patched for the last 4 months due to the WSUS server going down and I am now just getting around to deploying SCCM 2012 there. Can ...
1
vote
1answer
21 views

Microsoft updates feed [closed]

I'm trying to write a web scraper that will pull together information about security updates for various products but I cannot find one for microsoft products. As this is cross-platform and includes ...
-2
votes
2answers
65 views

Can I update Ubuntu with active users logged in? [closed]

I would like to run apt-get dist-upgrade, but I don't know how this will affect the currently logged in users. How can I find out: 1. will a restart be required 2. will the system be ...
0
votes
0answers
31 views

LanDesk, CBA 8 unable to locate the remote

I'm patching some workstation via LanDesk and for 1 workstation, there's this error that appears sometimes... I mean : i have to patch 10 updates on this workstation update 1 : ok update 2 : error ...
1
vote
4answers
132 views

powershell check windows update on a server

We have some 1000 + servers, we are doing monthly patching activity. i need to check the patches are updated on the servers or not, is it possible to check based on the Microsoft Security Bulletin ...
2
votes
1answer
39 views

Hardened compiler flags VS automatic security patches?

I noticed that a few select pieces of software in the Long Term Support repository for my Operating System, have not been compiled with PIE, or Immediate binding (for example). In the opinion of ...
3
votes
1answer
83 views

Is there a different way to view the Windows Updates for a computer that summarizes what each is for?

When reviewing some of our Windows servers, it can be extremely tedious to tell whether a security update is relevant to our system. A patch to IIS is irrelevant if we use Apache; an exploit affecting ...
1
vote
1answer
1k views

(VMware) esxcli software vib update -n xxx, which vib version is selected for the module xxx

Although I have read VMware's official blog post http://blogs.vmware.com/vsphere/2013/10/are-esxi-patches-cumulative.html very carefully, there is still quite some mist. Now I ask one concise ...
2
votes
2answers
406 views

RHEL 5 list missing critical patches/packages

Im trying to figure out if there is an easy way to identify the missing critical patches/packages on my RHEL5 boxes. This is for audit purposes and was trying to figure out if there was an RPM command ...
-1
votes
2answers
218 views

Linux patch management [closed]

I'm doing a internship to setup a Linux patch management system. It's a IT infrastructure management company with focus on Microsoft systems. They currently have ~15 Linux servers to manage and ...
0
votes
1answer
81 views

Does MS notify when an OS patch is updated?

We know the drill, every Patch Tuesday MS releases a long list of MS13-xx patches. Those typically consist of KB items for individual configurations or servers. From time to time, though, Microsoft ...
0
votes
0answers
43 views

Server setup scripts, patches and migrations

I have written some scripts which I use to configure various servers in a uniform way. Each time I deploy a server I run the relevant scripts so that I know they're all configured the same. I then ...
4
votes
3answers
275 views

How important is patch management? [duplicate]

Problem I'm trying to sell the idea of organizational patch/update management and antivirus management to my superiors. Thus far, my proposition has been met with two responses: We haven't had any ...
5
votes
3answers
1k views

Is it usually safe to run “apt-get upgrade” (in terms of stability) on a production server?

I often log into my Ubuntu 12.04.2 server (with Postgres 9.2.4 running with live production data) and see something akin to: 4 packages can be updated. 4 updates are security updates. This happens ...
1
vote
5answers
2k views

Run WSUS in an isolated server

We have a test/integration environment (rig) running Windows HyperV with server VMs inside it. I'd like to manage patches in the rig (the hyper V hosts and the VMs inside, which are all on their own ...
1
vote
0answers
46 views

Resume by RTC to guarantee software updates

I am maintaining around 100 user workstations with various software and operating systems. I use a WSUS Server for Windows updates and I have a set of custom scripts for other software. WSUS will ...
3
votes
1answer
56 views

Managing patches to configuration files

I use a configuration management system and, as I believe is common, my CM software simply copy-pastes configuration files to deploy them to my Linux servers, blindly clobbering whatever's there. But ...
1
vote
1answer
5k views

WsusContent folder how to clear down

I have an SBS2008 server, the WsusContent folder was 78 GB in size, I have ran the server cleanup wizard but it is still 71GB, is there any safe way to clear these out, there are a total of 7786 ...
-1
votes
1answer
139 views

Windows Server Patching: Verification of Windows server coming back up after reboots? [closed]

I have been working towards improving our monthly Windows Server update process. The goal is to remove as much of the manual process as possible. Our process has been 1) Present updates to servers ...
25
votes
4answers
722 views

Will virtualizing a server mean another OS layer to patch and update, more work and greater risk?

I've done a search and have not found anything addressing issues regarding patching and system updates. I've got guidelines that say servers need to have necessary patches. If I have a VM host then ...
2
votes
0answers
49 views

superceded patch - would the old one still show?

Example - if you have a Windows security patch that was released earlier in the year and you installed it. Then, if another security patch came out to SUPERCEDE that original one...would the ...
3
votes
1answer
181 views

Patch Management in computer lab environment

Backgound I work at a university as an administrator over all of the public computer labs. Our labs are composed of hundreds of dual-boot iMacs(Mountain Lion + Windows 7) as well as hundreds Windows ...
2
votes
3answers
9k views

How do I determine the SP and Rollup version of an Exchange installation?

How do I determine the SP version number and Rollup version of an Exchange installation?
2
votes
3answers
70 views

Managing several PCs

I'm looking for suggestions on how to best manage a group of 5-10 Windows 7 PCs. My primary concern is making sure the OS and applications stay up-to-date. My ideal solution would be to partition ...
1
vote
1answer
86 views

Use WSUS to select patched to install, but not to download them

I am looking after three sites. Two are nice and close and share a high-speed link, so there is a single WSUS server to manage those - no problems there. The other site is 4 servers in China, using ...
31
votes
5answers
6k views

Are VMware ESXi 5 patches cumulative?

This seems basic, but I'm confused about the patching strategy involved with manually updating standalone VMware ESXi hosts. The VMware vSphere blog attempts to explain this, but the actual process is ...
0
votes
3answers
2k views

Get a list of missing hotfixes for windows

How to get a list of all available patches/hotfixes for any given Windows platform? What I would like to do is: Get a list of already deployed patches (using something like wmic qfe list full ...
2
votes
3answers
189 views

When Is it proper to autoupdate servers?

I'm asking this question of the SF community based on the latest posting from Dreamhost (a significant webhosting provider here in the US) based on significant downtime suffered from them: We run ...
1
vote
1answer
3k views

GPO: Windows Firewall Exceptions - enable for one target IP only (LAN Guard)

I'm in the midst of setting up GFI LAN Guard for vulnerability scanning and patch management. The first thing I have to get in order is for LG to inventory all of the clients on the network. In order ...
3
votes
1answer
796 views

Remotely update Adobe Reader on Mac OS X from terminal

I want to update Adobe Reader remotely on a Mac through the terminal. Flash Player had a .pkg file in the .dmg, so installing that wasn't difficult. There is no .pkg file in Adobe Reader updates. ...
10
votes
4answers
795 views

What does the Windows XP EOL/EOS mean for a business and it's domain?

I am hoping someone can explain in simple terms, what it really means that windows XP will be end of life? It looks like SP2 is already not being patched, but maybe SP3 is going to be patched up ...
3
votes
1answer
68 views

Patching Exchange mailbox server without potential data loss

I have what I think is a quick easy question. I'd like to apply a service pack to my exchange 2007 mailbox server. I don't have a CCR setup, so its a pretty standard configuration. We do have it ...
1
vote
1answer
61 views

Check that NLM is patched in Netware 6.5

We need to solve vulnerability CVE-2011-4191 "Stack-based buffer overflow in the xdrDecodeString function in XNFS.NLM in Novell NetWare 6.5 SP8 allows remote attackers to execute arbitrary code or ...
0
votes
1answer
120 views

Confirming updates were applied via WSUS

Is there a way to setup WSUS to e-mail a weekly or monthly report which would indicate the current patch status of each computer under a given WSUS policy? I'm hoping there is another way to verify ...
1
vote
2answers
182 views

Patch Management Solution? [closed]

I'm currently in the process of looking for a patch management solution. The solution would need to be able to patch both MS software and 3rd party software like Adobe. It will also need to be able ...
3
votes
3answers
224 views

How do you manage software's local forks?

As a system administrator, I often have to modify programs for my company. Example: We're using an web interface to manage our local DNS. After downloading and extracting the tar.gz file from the ...
1
vote
4answers
161 views

Convenient source for information on known exploits (not theoretical)

Forgive me if this question has been asked before or is off-topic. The past couple of security patches I've installed have been discovered from reading news articles, which publicly discuss security ...
3
votes
2answers
230 views

Patch Panel Cable Tangle

Possibly the noob-est question ever (I'm a developer stepping in to do some sysadmin stuff): I have a 48-port patch panel bolted to a wall about 10 feet from where my rack is. Right now there's a ...
3
votes
4answers
129 views

How do you know when to patch your Ubuntu box?

I have a VPS hosted somewhere running Ubuntu 10.04. How do I know when to patch the system? Is there a notification system analogous to, for example, Mac OS or Windows warning me (through email) to ...
2
votes
2answers
42 views

Are upgrades of system-critical libraries used immediately

Given a security fix for a system-critical library like libc. Debian-based distros will publish after a few hours / days packages for it. But is the library immediately used for already running ...
8
votes
4answers
2k views

Centralized Windows/Mac Patch Management that is easy to use

I'm looking for advice on what patch management solutions you would recommend based upon your experience. I'm also looking for which ones you would not recommend based upon your experience. We have ...
5
votes
5answers
329 views

IE8 vs Firefox 4 with regards to central management and updating

For an organization still using XP, and that plans to continue using XP for at least another year, do you think it would be better to switch to Firefox 4 or continue to use IE8? Is Firefox ...
12
votes
3answers
22k views

How can I query my system via command line to see if a KB patch is installed?

I'm looking to find out if a KB is installed via command line.
8
votes
5answers
3k views

Suggestions for free/cheap asset/patch management software (Adobe, Java, etc)

I am using WSUS for Microsoft patching but would like something that will inventory and patch Adobe, Java, Firefox, Quicktime, etc. I have used Lumension in the past and it was OK but it is too ...
6
votes
6answers
465 views

How to Minimize Linux Server Reboots

Last week there were a fair few comments on a slashdot article about whether Unix (or Linux) machines ever need to be rebooted. More than a few of the commenters mentioned having machines with ...