Ravi Sir's Cyber Security Cards › Interview Cards
What is the difference between updating packages and patching a web app?
What is the difference between updating packages and patching a web app? sudo yum update patches the OS packages. Your app code, plugins and custom PHP need their own update path. Equifax (2017) was linked to an unpatched app component, not the OS. Internet-facing app parts need patching too. “OS pa
Read card text
What this card says
Short answer
sudo yum update patches the OS packages. Your app code, plugins and custom PHP need their own update path.
Example
Equifax (2017) was linked to an unpatched app component, not the OS. Internet-facing app parts need patching too.
Say it in the interview
“OS patching and app patching are two different jobs. I track both.”
Why it matters
People patch the OS and forget the app. Attackers hit the unpatched app component.
Learn more in the lesson: 46.3 Linux on EC2 Interview Questions