4.6 System Updates

Why updates matter

System updates patch known vulnerabilities, fix bugs, and add features to operating systems and applications. Attackers actively scan for outdated software because unpatched flaws are easy, documented entry points. Delaying updates leaves systems exposed to exploits that vendors have already fixed.

Patches vs. upgrades

A patch is a small update targeting a specific bug or security hole. An upgrade replaces software with a newer version, often adding major features. Security patches should be applied quickly, especially critical patches addressing actively exploited vulnerabilities, while upgrades may require more testing before deployment.

Update management

Organizations use patch management policies to test, schedule, and deploy updates systematically, balancing security with system stability. Automatic updates reduce the window of vulnerability but can disrupt operations if untested. Delayed or ignored updates increase risk from zero-day exploits becoming known threats over time.

Key terms

System update

A release that patches vulnerabilities, fixes bugs, or adds features to software/OS.

Patch

A small, targeted update fixing a specific bug or security vulnerability.

Upgrade

Replacing software with a newer version, often with major new features.

Patch management

The process of testing, scheduling, and deploying updates systematically to balance security and stability.

Risk of delayed updates

Leaves known vulnerabilities exposed longer, giving attackers more time to exploit them.

Try an AP-style question

Why should patches be tested before wide deployment?

1. Untested patches are illegal
2. Patches are always malware
3. Testing makes them smaller
4. They may break other software