How do you keep track of major patches for windows systems such as Flash, Reader... etc as they are released?
-
2I read server fault every day. – Jed Daniels Jun 25 '10 at 04:37
6 Answers
- Define the scope of what you're going to track and who's going to pay attention (here, the security folks monitor security patches for apps that have large install bases and the server and clients operation teams monitor for patches in other realms) If you don't do this, you will go absolutely batty.
- Watch the right lists. For security US-CERT is comprehensive, a little slow perhaps, but a good start. Vendor lists are also really useful, depending on what's in your environment and Secunia is great for general vulnerability info and ratings that track back to individual updates. Functionality patches pretty much demand that you monitor your vendors, MS has a pretty comprehensive review at The Hot Blog and the monthly non-security critical updates are in this KB.
- The most important thing is to have a solid patch management process, for testing, scheduling, and managing the release of patches. We're big fans of the Securosis model. Whatever you end up doing needs to fit your resources and organization.
![](../../users/profiles/8396.webp)
- 2,559
- 3
- 25
- 22
For home use, I run Secunia PSI. It keeps track of what's installed on the machine and then alerts me when there are updates -- even gives a download link if necessary. Brilliant little app. Of course, it only works for what's actually installed on my machine and isn't licensed for corporate use...
Secunia does offer a Corporate version as well: http://secunia.com/vulnerability_scanning/corporate I haven't had a chance to check it out yet though.
![](../../users/profiles/1936.webp)
- 3,434
- 6
- 41
- 45
For Adobe, I subscribe to their security notification service and they e-mail me when new updates are about to be released or when critical issues are found. Their Product Security Incident Response Team also has a blog that ends up in my RSS reader.
Microsoft has a similar service through their Security Bulletin Advance Notification service.
![](../../users/profiles/671.webp)
- 8,748
- 1
- 27
- 39
-
1+1 I've found most major vendors have e-mail alert services like this and we have a special e-mail address setup just for these. – Chris S Jun 29 '10 at 18:42
One of the easiest is to leave the auto-updaters on and just take note when your personal machine updates.
![](../../users/profiles/10472.webp)
- 100,183
- 32
- 195
- 326
If the vendor has an RSS feed then I subscribe to their feed in Google Reader which I review daily.
![](../../users/profiles/984.webp)
- 128,755
- 40
- 271
- 413
-
This is the approach I take for most Open Source apps that we have installed – Chris_K Jun 25 '10 at 15:01