Patch Management Group

 View Only
  • 1.  Patching Google Chrome via Altiris

    Posted Dec 31, 2014 08:05 AM

    Does anyone have experience in patching Google Chrome via PMS 7.1 or 7.5 in enterprise environment?

    There is versioning issue, making patch management complicated. 

     

    We have enabled latest, which is CHROME-119 

    Chrome_Bulletins.png

    From SW Inventory we can see there are many versions like 65.* or 66.* as well, which Patch Assessment does not evaluate:

    Chrome_ARP.png

    Issue seems to be caused by MSI installer, as explained in this article, for instance (more articles can be found).

    Google Chrome offers an MSI installer useful for enterprise deployments. However, I have noticed that when I install Chrome using this MSI there is a version number mismatch.

    If I open Chrome and click on "About Google Chrome" from the menu, it says version 35.0.1916.153.

    However, if I open Control Panel and pull up my program list, it says Google Chrome version 65.223.153.

    Based on that fact, there are version discrepancies between ARP and PMS reports.

    We discovered that these 65+ versions are coming from Chrome Enterprise edition, most likely.

     

    Since we must be very accurate in assessing and patching exact versions of Chrome, I wonder to know if any workarounds exist.

     

     

     

     

     

     

     

     



  • 2.  RE: Patching Google Chrome via Altiris

    Posted Dec 31, 2014 11:23 AM

    We ended up deploying the Entprise version with the auto-update feature enabled and it has worked well.  Users do not need to be admins for the auto-update to work and the auto-update for Chrome is seamless to users.  The only concern we have is the risk of updating without testing.  To mitigate this our web developers subscribe to one of the more frequently updated Chrome update "channels" like Beta or Dev.

     



  • 3.  RE: Patching Google Chrome via Altiris

    Posted Jan 02, 2015 04:42 AM
      |   view attached

    Hope someone from Google can explain the versioning for enterprise Chrome.

    This thread was created by me to track it:

    https://productforums.google.com/forum/#!category-topic/chrome/Stable/mIhXM7o_Upo

    It would be also helpful to know if Symantec knows about this issue and is adjusting IsApplicable & IsInstalled rules accordingly.