Networks

A patch is essentially a bug fix and is there to correct an error that was either a known issue or an unknown problem when the software was first released.

It is exactly the same as installing a Service Pack on Windows, a service pack is just a large collection of these bug fixes put in a helpful form.

As far as patching web-servers is concerned, once a security flaw or software bug becomes known a software patch is produced. This can then close the flaw that can allow certain Viruses andHackers to access, change or otherwise damage or take over the system.

As these are normally reactive patches (written after the discovery of the bug) then this can still leave web-servers open to attack to a certain extent. It is worthwhile to completely separate any public servers from the trusted network and create a DMZ, but that's down to the overall design of the network.

This question was closed by the author