Patching and Updating: Keeping Your Devices and Software Up to Date

A patch is a software update that fixes a problem in a program or operating system. Many of those problems are security flaws, and an update closes the flaw before someone can use it against you. Turning on automatic updates and restarting your devices when asked covers most of what you need to do.

 

Audience: Students, faculty, and staff

Why patching matters

Many software updates fix security flaws, also known as vulnerabilities. Once an update, or patch, is released, attackers typically study what the vulnerability was. They then go after devices that haven't been patched yet through attacks using exploits. AI has significantly increased the speed in which attackers can exploit vulnerabilities. What used to take them weeks can now take hours. Installing updates promptly is one of the simplest and most effective ways to stay secure.

Who updates what

University-managed computers (OIT-managed): OIT pushes operating system and many application updates automatically. Windows computers receive updates through Software Center and Macs through Self Service. You can help stay up to date by:

• Connecting regularly. Updates can only install while your computer is on and connected to the network. You don't need to leave it on all the time, but don't let it sit shut down, asleep, or closed for long stretches.
• Leaving your managed device on overnight. When you get a notice that updates are pending, leave your computer on and plugged in overnight so they can install without interrupting your work.
• Installing updates early if you like. Install updates yourself anytime from Software Center (Updates tab) or Self Service.
• Restarting when asked, and at least once a week. Updates you put off will eventually install and restart your computer automatically.
• Keeping non-managed applications updated. Update any software OIT doesn't manage, and don't install unsupported software.
• Restart your browser. Browsers are updated even more often than other software. Routinely restart your browser so it can update.

Details: How to use Software Center in Microsoft Windows?, Installing Applications on Mac Computers via Self Service

Personal devices (your own laptop, phone, or tablet): You are responsible for all updates. OIT does not manage or patch personal devices. Using an OIT managed device is recommended for all university business.

Advice for university employees

• Apply patches within 10 business days - set a calendar reminder to check if you must do some manually.
• Keep automatic updates on where possible, and do not defer them indefinitely.
• Report suspected vulnerabilities within 4 hours to security@uidaho.edu.
• Subscribe to Watchful UI for vulnerability and patch alerts: email preferences.

Getting help

If an update fails or you can't tell whether your device is up to date, contact the IT Service Desk at support@uidaho.edu or 208-885-4357 (HELP).