How frequently to check for updates on your security software?

Firewalls, Apache and anything else.

[jake66]

I just purchased my first dedicated server and it is unmanaged. I've hired a management company to do the tasks I'm to sheepish to execute myself.

The problem is, they only patch / upgrade upon request.
So what is the best method to check for new versions of my software?

Manually (like I am presently doing), or is there some way to remotely check a site to see if there's a new package available? (Say, in a script of some sort).

I should also mention the vast majority of programs used are open source. :)

[Receptional Andy]

On linux servers yum and up2date provide an automated way to check updates. Notification should be really be an automated task in any case.

It's also a good idea to subscribe to the various mailing lists for your key software so you're the first to know.

Note also that you are unlikely to always want to be an early adopter for software updates (depending on what software of course!) if this is a production server.

[jake66]

How can I tell if I've got yum or up2date installed?