Re: Patch Management

[modversion <perlish () gmail com>]

SecMelis write:
> Thank's, indeed I'm using version WSUS 2.0; Not aware of 
> WsusDebugTool.exe.
>
> However, I'm thinking about comparison of the patch size from M$ 
> relative to other OSes.
>
> Cheers,
> Arif Jatmoko
>
>
> ----- Original Message ----- From: "Nick Duda" <nduda () VistaPrint com>
> To: "Devin Rambo" <drambo () vediorps com>; "Sec Melis" 
> <sec.melis () gmail com>; <security-basics () securityfocus com>
> Sent: Saturday, April 21, 2007 2:18 AM
> Subject: RE: Patch Management
>
>
> Devin,
>
> Reading a couple words into your first paragraph and already I said to
> myself, 3.0 handles that now. WSUS 3.0 has a "server cleanup" feature
> built into it that does numerous tasks, such as, unused updates and
> update revisions, computers not contacting the server, uneeded update
> files, expired updates and superseded updates. It tells you at the
> completion of the cleanup on what exactly was cleaned up.
>
> - Nick
>
>
>
> -----Original Message-----
> From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
> On Behalf Of Devin Rambo
> Sent: Friday, April 20, 2007 2:48 PM
> To: 'Sec Melis'; security-basics () securityfocus com
> Subject: RE: Patch Management
>
> Arif,
>
> I'm not sure how WSUS v3.0 handles the bloat of declined/expired
> patches,
> but in v2.0, you have to manually clear them. If you're on v2.0, here's
> what
> you want to do:
>
> 1. Download the WSUS server debug tool from
> http://www.microsoft.com/windowsserversystem/updateservices/downloads/de
> faul
> t.mspx. The link is to "Server Diagnostic Tool" just to confuse
> everyone,
> but that's the tool you want.
>
> 2. Extract the tool to someplace on the hard drive of your WSUS server.
>
> 3. Open up a command prompt, navigate to the directory where the tool
> lives,
> and type the following command:
>
> WsusDebugTool.exe /Tool:PurgeUnnneededFiles
>
> The tool is misnamed a bit. It actually purges ALL the files from the
> patch
> repository. It will then proceed to re-download anything that you have
> marked as approved for install. I'm running WSUS on a virtual server
> with
> semi-limited storage space, so I actually run this command over the
> weekend
> immediately following Patch Tuesday just to keep my server nice and
> tidy. I
> strongly recommend running this so the downloads happen during off-peak
> hours, for obvious reasons. HTH.
>
> Devin
>
>
> -----Original Message-----
> From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
> On
> Behalf Of Sec Melis
> Sent: Friday, April 20, 2007 12:13 AM
> To: security-basics () securityfocus com
> Subject: Re: Patch Management
>
> Have you guys check your disk space used by WSUS?
> Surprisingly, my WSUS eats more than 26 GB space for last 2 years!
> Imagine,
> how many bandwidth resources was consumed during that time if it's
> distributed across, let's say 30 WSUS relays and 8000 clients for one
> medium
> company ......
>
> Duh dear uncle Bill ......
>
> Arif Jatmoko
>
>
> ---------------------
> Confidentiality note
> The information in this email and any attachment may contain 
> confidential and proprietary information of VistaPrint and/or its 
> affiliates and may be privileged or otherwise protected from 
> disclosure. If you are not the intended recipient, you are hereby 
> notified that any review, reliance or distribution by others or 
> forwarding without express permission is strictly prohibited and may 
> cause liability. In case you have received this message due to an 
> error in transmission, please notify the sender immediately and delete 
> this email and any attachment from your system.
> ---------------------

how about linux patch management ?
could  any tools make it ? open source tools may be better :)