of information about software product vulnerabilities.The software configuration
manager should monitorthose sources and download all necessary patches
indicated by in the vulnerability reports, and then work with the developers to
determine the impact of adopting those patches and the risk of not adopting them.