I guess I’m mosty relying on the vendor’s packaging, being it opatch, yum, or msi. So, I’m mostly not repackaging things, and the tool to apply the patch is also very much set.
In my experience it is pretty hard to sort out which patches/patchsets to install. This includes the very important subtask of figuring out the order in which patches need to be applied.
Having said that, a proper QA (before rollout), change management (including approval) and production verification (after rollout) is of course a must-have.
If you like to leave comments, and aren’t a spammer, register for the site and email us at firstname.lastname@example.org and we’ll turn off moderation for your account.