On Wed, Jan 26, 2005 at 05:02:09PM -0500, Jonathan Jesse wrote:
> It might be an interesting experience to hear what actually happens on
> Microsoft Patch Tuesday.
> How many open source submissions do you actually receive on that day?
Recently, zero.
> How soon after a patch is released does a test get deployed?
It depends on the patch. Basically, we do two things:
- When the bulletins are published, we immediately make
registry checks. They are usually done within 30 minutes
after the bulletins have been made public (testing
included) ;
- Then, for remote flaws (ie: WINS, for Decembers' Microsoft day)
we reverse engineer the patch to produce a network-check (no credentials
required). That is, if it's possible to do so. It took a few hours
for WINS - I think around 12 hours.
> Then how long do we have to wait until it is part of
> the feed? I think the answer to the last question is 7 days if I recall
> from an earlier post.
Correct.
-- Renaud
_______________________________________________
Nessus mailing list
[email protected]
http://mail.nessus.org/mailman/listinfo/nessus
