Home
Patch User Guides
BigFix Patch provides an automated, simplified patching process that is administered from a single console.
Patch for Ubuntu User's Guide
BigFix Patch for Ubuntu provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Ubuntu endpoints.
Using Patch for Ubuntu
Access Ubuntu Fixlets sites for Ubuntu security updates from the BigFix console.
Frequently asked questions
The questions and answers in this section can help you to better understand Patch for Ubuntu.

Patch User Guides
BigFix Patch provides an automated, simplified patching process that is administered from a single console.
- Patch for Windows User's Guide
  BigFix Patch for Windows™ provides Fixlets for Microsoft™ security and non-security patches. Dashboards, wizards, and reports aid you in managing updates for various endpoint devices.
- Patch for AIX User's Guide
  BigFix® for Patch for AIX® provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility, and enforcement to deploy and manage patches to all AIX endpoints.
- Patch for Red Hat Enterprise Linux User's Guide
  BigFix Patch for Red Hat Enterprise Linux provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility, and enforcement to deploy and manage patches to all Red Hat Enterprise Linux endpoints.
- Patch for CentOS Linux User's Guide
  BigFix® Patch for CentOS Linux™ provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all CentOs endpoints.
- Patch for Amazon Linux User's Guide
  BigFix® Patch for Amazon Linux™ provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Amazon Linux endpoints.
- Patch for SUSE Linux Enterprise User's Guide
  BigFix Patch for SUSE Linux Enterprise provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all SUSE Linux endpoints.
- Patch for Ubuntu User's Guide
  BigFix Patch for Ubuntu provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Ubuntu endpoints.
  - Overview
    BigFix Patch for Ubuntu provides Fixlets that you use to manage the security updates and service packs that Ubuntu releases. These Fixlets are available through the Patches for Ubuntu sites.
  - Using Patch for Ubuntu
    Access Ubuntu Fixlets sites for Ubuntu security updates from the BigFix console.
    - Patch Using Fixlets
      From the console, select the action for the appropriate Fixlets that you want to deploy. The action propagates across your deployment and applies patches based on the settings that you make in the Fixlet work area and the Take Action dialog.
    - Action Logging
    - Patches for Ubuntu Fixlet Sites
      Ubuntu security updates are available through email lists, RSS feeds, and through the Ubuntu website and Launchpad, the web support site that hosts applications such as Ubuntu.
    - Superseded Fixlets
      In BigFix, supersedence is a property of Fixlets that provides multiple packages. In Launchpad, the host website for applications such as Ubuntu, supersedence is a property of every package.
    - Uninstall patches
    - Adding repositories
      You can add repositories with the Ubuntu Custom Repository Management dashboard.
    - Importing repositories
      You can import repositories with the Ubuntu Custom Repository Management dashboard.
    - Registering endpoints to repositories
      Register and connect your repositories to endpoints with the Ubuntu Custom Repository Management dashboard.
    - Deleting repositories
      You can delete repositories with the Ubuntu Custom Repository Management dashboard.
    - Frequently asked questions
      The questions and answers in this section can help you to better understand Patch for Ubuntu.
- Patch for Oracle Linux User's Guide
  BigFix® Patches for Oracle Linux provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Oracle Linux endpoints.
- Patch for Solaris User's Guide
  BigFix Patch for Solaris provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Solaris endpoints.
- Patch for HP-UX User's Guide
  BigFix® for Patch for HP-UX provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all HP-UX endpoints.
- Patch for Mac OS X User's Guide
  BigFix® for Patch for Mac OS X provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Mac OS X endpoints.
- Patch for Debian User's Guide
  BigFix Patch for Debian provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Debian endpoints.
- Patch for VMware ESXi User's Guide
  BigFix Patch for VMware ESXi provides you unified, near real-time visibility to manage patches to all VMware ESXi endpoints from a single console.
- Patch for Raspbian User's Guide
  BigFix Patch for Raspbian provides Fixlets that you use to manage the latest updates and service packs that Raspberry Pi releases. These Fixlets are available through the Patches for Raspbian sites.
- Patch for Rocky Linux User's Guide
  BigFix Patch for Rocky Linux provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Rocky Linux endpoints.
- Patch for Virtual Endpoint Manager User's Guide
  BigFix® for Virtual Endpoint Manager provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches in a virtual environment.
- Updates for Middleware Applications
  Middleware patching is an important process for organizations to ensure their systems are secure and up to date. By applying the appropriate patches and security updates, organizations can minimize the risk of malicious attacks and potential data loss. BigFix users can enjoy unified patch management by using a single platform for deploying database and middleware patches.
- Supersedence for Non-Windows
  This topic describes how supersedence works in Patch.

Frequently asked questions

The questions and answers in this section can help you to better understand Patch for Ubuntu.

What to do when Fixlets fail to install with the following message in the EDR log? "Warning: Nothing to install. Please check if you are using the latest kernel."

This message appears only in case of Fixlets that deploy kernel packages. A kernel Fixlet becomes relevant if the endpoint does not have the target kernel package installed or if the endpoint's active kernel is at a lower version than the target kernel package. An endpoint is still considered subject to kernel vulnerabilities even if it has the latest kernel installed but not using it actively.

To remediate the issue, restart the endpoint and ensure it is using the latest kernel available.

What are Unspecified Fixlets and why do we need them?

Unspecified Fixlets are for the packages found in Ubuntu's security repositories and that do not have a security notice (USN) associated with them. Not all security packages released by Ubuntu have a USN associated with them - Unspecified Fixlets covers such packages.

Which type of Kernel Packages are supported for USN fixlets?

Bigfix Patch supports the following USN Kernel type packages:

linux-image-<version>-generic
linux-image-<version>-lowlatency
linux-image-<version>-oracle
linux-image-<version>-kvm
linux-image-<version>-oem
linux-image-<version>-gcp
linux-image-<version>-azure

Note: BigFix Patch does not currently support the following USN Kernel packages: aws,flo, gke, goldfish, hammerhead, hwe, lpae, mako, nexus4, powerpc, powerpc64, raspi2, snapdragon, virtual. Also note that these packages are subjected to change.