Traditional patch management solutions are better at installing software than they are at patching and upgrading, according to a recent Yankee Group report that recommends comprehensive rather than piecemeal approaches to fixing vulnerabilities in applications.