D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

[LUG] Extract historical time to apply security updates

 

Curious question, but has anyone attempted to extract time to patch from
logs and packages (or other data).

Specifically interested in how long the security updates took to be
installed from there release by vendor. Although how vendors compare
would be interesting I know the Linux distros we use are at least
comparable (since I get the mailing list security advisories within days
of each other typically).

I can imagine in Debian stable this is relatively easy, because all
non-release upgrades are security upgrades. But other distros muddy the
water here, although most flag security updates.

I've separately being running a whole set of less critical server boxes
on automatic daily update, with no issues of note in 6 months. I know
Bad Apple is in the nothing changes without my permission school of
system admin, but for these boxes it seems a good balance of risk v
effort v timeliness.

-- 
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq