Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [patch-management]

Patch Management refers to updating and patching systems, and particularly to tools and systems which automate this process for a large number of systems.

Patch Management refers to the important and never-ending task of installing software updates on systems, including the procedures involved with installing updates, defining update policies for an organization, and tools/systems to help with the patching process.

Patch Management may include patch selection methods (anything from manually reading the CVE list to automated vulnerability scans), patch deployment methods (manually installing patches, various software packages), and patch testing procedures (virtual environments, staged deployment, etc.)

Many tools (free and commercial) have evolved to help alleviate the workload. You may want to include a tag specific to the software you are using. Some examples include:

224 questions
68
votes
6 answers

How can I query my system via command line to see if a KB patch is installed?

I'm looking to find out if a KB is installed via command line.
MathewC
  • 6,877
  • 9
  • 38
  • 53
59
votes
6 answers

The corporate benefits of using MSI files

What are the advantages of using .msi files over regular setup.exe files? I have the impression that deployment is easier on machines where users have few permissions, but not sure about the details. What features does msiexec.exe have that makes…
Frode Lillerud
  • 1,656
  • 3
  • 18
  • 20
37
votes
5 answers

Are VMware ESXi 5 patches cumulative?

This seems basic, but I'm confused about the patching strategy involved with manually updating standalone VMware ESXi hosts. The VMware vSphere blog attempts to explain this, but the actual process is still not clear to me. From the blog: Say…
ewwhite
  • 194,921
  • 91
  • 434
  • 799
27
votes
4 answers

Will virtualizing a server mean another OS layer to patch and update, more work and greater risk?

I've done a search and have not found anything addressing issues regarding patching and system updates. I've got guidelines that say servers need to have necessary patches. If I have a VM host then is that an extra layer to patch and update - even…
user127379
  • 473
  • 4
  • 11
25
votes
7 answers

Get rsync to generate a patch file instead of copying across files?

I'm copying lots of files that have changed from one server to another using rsync. I know I can use the -n option to do a dry run, so I can see what files have been changed. However is it possible to get rsync to print a diff of the file contents…
Amandasaurus
  • 30,211
  • 62
  • 184
  • 246
20
votes
5 answers

Is it usually safe to run "apt-get upgrade" (in terms of stability) on a production server?

I often log into my Ubuntu 12.04.2 server (with Postgres 9.2.4 running with live production data) and see something akin to: 4 packages can be updated. 4 updates are security updates. This happens about every few days, of course. I'm not interested…
orokusaki
  • 2,693
  • 4
  • 28
  • 42
19
votes
2 answers

Patch command not found

I tried to apply patch to my file with following command patch -p0 < foo.patch I got the following output bash: patch: command not found I have Centos 5.x server. Please guide what to do in this case
Sukhjinder Singh
  • 393
  • 1
  • 4
  • 12
15
votes
6 answers

is ksplice production ready?

I would be interested to hear the serverfault community's experiences with Ksplice in production. Quick blurb from wikipedia: Ksplice is a free and open source extension of the Linux kernel which allows system administrators to apply security…
faultyserver
  • 1,904
  • 1
  • 16
  • 20
15
votes
5 answers

How can we remotely administer our "fleet" of Windows 7 laptops?

I'm working with a startup that's teaching kids to program. We've just obtained our first "fleet" of laptops - half a dozen refurbished thinkpads running Windows 7 - and I'm looking for the best way to administer and maintain them. I've already…
Nick Johnson
  • 364
  • 1
  • 10
15
votes
7 answers

FLOSS Server management and audit tools

I've been working with HP's Server Automation tool suite for a long time, and while it's a great tool - it's too much for a small business or home network to use (more accurately: it's way too expensive for anything less than a large company to…
warren
  • 17,829
  • 23
  • 82
  • 134
14
votes
2 answers

How safe are Unattended Upgrades/Automatic Updates for Ubuntu

I'm in the process of trying to keep several ubuntu box's up to date and patched (10.4.2 LTS), one suggestion I've been getting is setting up unattended upgrades (https://help.ubuntu.com/community/AutomaticSecurityUpdates). In the past I've been…
Pratik Amin
  • 3,293
  • 3
  • 20
  • 19
12
votes
10 answers

Firmware Best Practices and Update Schedules

Firmware receives very little attention when it comes to updates. Out of sight, out of mind. Many devices: RAID controllers, NICs, chipsets, and even hard drives, get some benefit from being updated. Better features, security/bug fixes, etc. Most…
Joseph Kern
  • 9,809
  • 3
  • 31
  • 55
11
votes
5 answers

Apply multiple .patch files

I have a directory with .patch files, generated using diff. I would like to apply all those patches using patch -p1 to another directory. But patch takes only one file, unless I cat. What would the command be to apply multiple files using xargs or a…
styts
  • 235
  • 1
  • 2
  • 6
10
votes
4 answers

What does the Windows XP EOL/EOS mean for a business and it's domain?

I am hoping someone can explain in simple terms, what it really means that windows XP will be end of life? It looks like SP2 is already not being patched, but maybe SP3 is going to be patched up until 4/18/2014? So I assume that means there will be…
Scott Szretter
  • 1,860
  • 11
  • 42
  • 66
10
votes
4 answers

Centralized Windows/Mac Patch Management that is easy to use

I'm looking for advice on what patch management solutions you would recommend based upon your experience. I'm also looking for which ones you would not recommend based upon your experience. We have a mixed network of Windows and Mac clients. Our…
IAmTimCorey
  • 203
  • 3
  • 12
1
2 3
…
14 15