topic Re: Question Reg patch in Operating System - HP-UX

Question Reg patch

navin — Wed, 03 Mar 2010 23:13:39 GMT

Hello All,
I have no of servers - which i have to check the below things..What would be the best idea to handle this - i know i can look at swinstall..but i believe there must be a better way of doing this.PLEASE ADVICE.
Thanks
1) When was the patch bundles applied and is it obsolete
2) When was the patch bundls modified and is it obsolete
3) Was there any new patches added recently an
Once again thanks so much

Re: Question Reg patch

James R. Ferguson — Wed, 03 Mar 2010 23:43:25 GMT

Hi:

> i know i can look at swinstall..but i believe there must be a better way of doing this.

The output of 'swlist' would show you what is *installed* on your server. For your Operating Environment use:

# swlist -l bundle HPUX11i-*

For seeing the date of your last patch bundles, see:

# swlist |grep -Ei "qpk|gold"

You will see notations like:

B.11.31.1003.347a

...which means an 11.31 bundle from March 2010 (YYMM).

To see what's currently available see the ITRC Patch database:

http://www11.itrc.hp.com/service/patch/releaseIndexPage.do?BC=main

...or use SWA (the Software Assistant) to analyze, download and create a depot of patches for subsequent installation.

The contents of the standard patch bundles can be seen by clicking on the hyperlink in the Patch Database.

Regards!

...JRF...

Re: Question Reg patch

Kapil Jha — Thu, 04 Mar 2010 01:11:57 GMT

I don think you can get it in one shot regarding the dates.

You may write a script if your environment permit it to sun on all the server and get to see /var/adm/sw/swagent.log to get various information.

Normally patching comes under change so you
get the info if you find smthing in ur change
document.

BR,
Kapil+

Re: Question Reg patch

navin — Thu, 04 Mar 2010 20:51:31 GMT

Thanks for the reply besides 4 recommended patch bundles - there is a Bundle 11i - patch as B.11.23.0409.3 - is this part of OS install - i believe i had installed recommended patch bundles seperately - but never installed Bundle 11i so assuming that is from std os install?
pls advice
tnx

Re: Question Reg patch

James R. Ferguson — Thu, 04 Mar 2010 21:07:06 GMT

Hi (again) Navin:

> there is a Bundle 11i - patch as B.11.23.0409.3 - is this part of OS install

Yes, do a 'swlist|grep -i bundle11i' to see it. It would be installed if your server was updated or installed to September 2004 or later.

Regards!

...JRF...

Re: Question Reg patch

Raj D. — Thu, 04 Mar 2010 22:14:12 GMT

Navin,
Depending upon your OS version and current patch level status you need to decide what patches needed:

# uname -a
Check current patches installed:
# swlist -l bundle | grep -i -e HPUX11 -e Gold -e QPK -e Diag -e Online

Make sure you have Latest Gold or QPK bundles are installed and Latest OnlineDiag.

If not you can always download from itrc.hp.com patch section , and ftp to the server and install using swinstall. Make sure to plan for downtime as it needs reboot.

Also check this out: For Patch Management:
http://docs.hp.com/en/5992-4044/ch07s02.html

Cheers,
Raj.

Re: Question Reg patch

Steven E. Protter — Thu, 04 Mar 2010 22:33:34 GMT

Shalom,

You can remove superseded patches from the bundle.

Now when a major patch set is released, don't expect there to be a lot of superseded patches, but if you are using something older this has more relevance.

http://forums11.itrc.hp.com/service/forums/questionanswer.do?admit=109447626+1267741622617+28353475&threadId=1090326

http://docs.hp.com/en/5991-5309/5991-5309.pdf

HP's patch management guides are worth going through to learn lots of tips and tricks.

SEP

Re: Question Reg patch

James R. Ferguson — Thu, 04 Mar 2010 22:53:52 GMT

Hi (again);

> SEP: You can remove superseded patches from the bundle

You can remove superseded patches from a depot, but why bother, other than to conserve space?

During a 'swinstall' session's analysis phase, if a depot contains both superseded patches and corresponding superseding patches, the superseded patches will never be installed. This analysis is performed using the union of the server and the depot.

Regards!

...JRF...