topic Re: security patch check script in Operating System - HP-UX

security patch check script

John Henrikson — Mon, 03 Nov 2003 16:50:54 GMT

Hello,
I've been running the bastille security patch checklist successfully for some time, the last several days however I've gotten the following error, and was wondering if anyone knew how i could fix it?
Use of uninitialized value in concatenation (.) or string at /opt/sec_mgmt/spc/bin/security_patch_check.pl line 1603.
ERROR: /etc/opt/sec_mgmt/bastille/security_catalog, downloaded from
ftp://ftp.itrc.hp.com/export/patches/security_catalog.gz cannot be
verified (checksum does not match expected value). The catalog might
be corrupt. Possible causes include an incorrectly cached file in
your web proxy () or an interrupted internet connection.

ERROR: Download error:
Trying or retrying a server.

thanks so much!!!

John Henrikson

Re: security patch check script

Steven E. Protter — Mon, 03 Nov 2003 16:54:12 GMT

I just checked my most recent email from Bastille. I'm getting the same error. My guess is that HP changed something or the ftp site was down during your last run.

If I find out differently, I will post back.

Try running the script manually and see what happens.

SEP

Re: security patch check script

Steven E. Protter — Mon, 03 Nov 2003 16:58:14 GMT

Ran as follows:

security_patch_check -r /tmp/scheck.text

Ran fine.

I suspect this is an ftp problem at HP's end. Post the result of any testing.

Thanks for the heads up.

SEP

Re: security patch check script

John Henrikson — Mon, 03 Nov 2003 17:04:38 GMT

well if i run it manually it doesn't give me the correct results its says the patches are up to date, and before the error I had about 5 patches that needed to be applied.. :(
thanks

Re: security patch check script

John Henrikson — Tue, 04 Nov 2003 07:20:08 GMT

and last night it ran correctly!
thanks again
john h.

Re: security patch check script

Gordon Morrison — Thu, 11 Nov 2004 11:30:52 GMT

There's a new version (1.93) of security_patch_check out now, and the catalogue version has changed too:
ftp://ftp.itrc.hp.com/export/patches/security_catalog2.gz

I'm not expecting any points for this, i just think it's a convenient place to store the link ;o)

Re: security patch check script

John Henrikson — Thu, 11 Nov 2004 11:44:26 GMT

Well I appreciate the information, I downloaded it to my system. Thanks!