RE: Critical/Security Updates as well as other Patch Management

From: Jed Needle (jed@vitel.com)
Date: 03/11/03

  • Next message: Tim Donahue: "RE: Firewall recommendations?" 
    Date: Tue, 11 Mar 2003 15:23:59 -0700
From: "Jed Needle" <jed@vitel.com>
To: <security-basics@securityfocus.com>

    On Microsoft platforms there is a patch management util called SUS
    "software update service?? (I think)
    Once configured, the server will automatically download relevant
    patches, you then point the clients to the sus server and push updates
    to clients that way.

    Jed

    -----Original Message-----
    From: Ivan Hernandez [mailto:ivan.hernandez@globalsis.com.ar]
    Sent: Monday, March 10, 2003 11:49 AM
    To: Eric Zatko
    Cc: security-basics@securityfocus.com
    Subject: Re: Critical/Security Updates as well as other Patch Management

    On debian it's about running an 'apt-get dist-upgrade' having selected
    the security.debian.org packages mirror.

    Ivan Hernandez

    Eric Zatko wrote:

    >Good day everyone,
    >
    >I am very interested in hearing all opinions/resources/etc. regarding
    the topic of Security updates, Critical updates, and general patch
    management. Any and all platforms... not only, but including Microsoft.
    >
    >What are the strategies being used?
    >
    >What are the best web/free resources?
    >
    >What are your opinions?
    >
    >My sincere thanks in advance.
    >Eric
    >

  • Next message: Tim Donahue: "RE: Firewall recommendations?"

    Relevant Pages

    • RE: Deploying Microsoft patches
      ... Try SUS from M$. ... windows update server for your organization. ... You can't use SUS to deploy your own updates (you can use this tool to ...
      (Security-Basics)
    • Re: Error 0x80070057
      ... For suggestions related to SUS please post on the SUS newsgroup: ... I have a 'closed' system with no outside internet access. ... SUS runs on the server. ... Under Options on the SUS server I just set it to> get updates from another SUS server. ...
      (microsoft.public.windowsupdate)
    • Re: Newbie has two SBS2003 issues
      ... personally prefer to manually approve updates in SUS. ... Whether your servers or even workstations see these updates in SUS would ... There was a brief period a few weeks ago where an SBS 2k3 server, ... So far as the backups go, you'd have to inspect the backup logs themselves ...
      (microsoft.public.windows.server.sbs)
    • Re: SUS not updating on clients and servers
      ... be sure the SUS policy scope is directed towards the ... >computers for your Automatic Updates settings. ... >server by fully qualified domain name. ...
      (microsoft.public.windows.group_policy)
    • Re: Patch Management
      ... Subject: Patch Management ... WSUS 3.0 has a "server cleanup" feature ... expired updates and superseded updates. ... I'm not sure how WSUS v3.0 handles the bloat of declined/expired ...
      (Security-Basics)