We patched our servers with September month released patch from microsoft. One server had 3 patch relevant, we installed them through IBM Bigfix. Webreports also shows that patches are installed but when checked manually,only one patch is installed.
Web Reports doesnât really say âthe patch is installedâ. What it shows is âthe fixlet was once relevant, but is now remediatedâ.
So if the Delta update, Security-Only update, and Cumulative update were all relevant, and you installed the Cumulative (which includes the other two), then all three Fixlets will show as âFixedâ.
In the future, it would be helpful if you posted the KB, the update name, and perhaps the fixlet IDs. Itâs troublesome to go back and forth between tabs on a phone to google this for you.
Not sure you understand what I wrote earlier but based on your KB numbers I think I was correct -
September 11, 2018âKB4457140 (Security-only update)
KB4457426 Cumulative security update for Internet Explorer: September 11, 2018
The fixes that are included in this Security Update for Internet Explorer (KB 4457426) are also included in the September 2018 Security Monthly Quality Rollup. Installing either the Security Update for Internet Explorer or the Security Monthly Quality Rollup installs the fixes that are in this update
September 11, 2018âKB4457135 (Monthly Rollup)
So installing just KB4457135 also corrects the other two packages and they will all appear as âfixedâ in Bigfix.
In Future, we will make sure that i will post all KB,the update name, and perhaps the fixlet IDs.
As per my understanding from the above information, it is sufficient to install KB4457135 as it is a monthly roll up and KB4457140 and KB4457426 will not show up as KB4457135 is already installed.
Once KB4457129 has been installed, the other two fixlets have changed to âNot Relevantâ.
Web Reports doesnât actually say âthe patch has been installedâ. A better way to understand this is âthe vulnerability has been remediatedâ. Installing KB4457129 has remediated all three issues.
@sureshhan, hello, I expect the report to be showing the same information as the BigFix Console. For the 3 patches MS18-SEP* on server XXXMDB, what does the Console indicate for their applicability and relevance?
@sureshhan, if the Console is showing the patches as not applicable, the report is reflecting the same information. I would look into this independent of the report.
The Monthly Rollup includes the other two. Installing the monthly rollup makes the other two non-relevant so they are no longer applicable in the console and will appear as âFixedâ in Web Reports. There doesnât appear to be anything wrong with what you are seeing.