topic Re: Patching in Operating System - HP-UX

Patching

Jason_309 — Wed, 17 Jan 2007 16:01:25 GMT

The previous admin did not believe in patching. So i get try and bring it up to speed. It has not been patched since about 2002. What would you suggest as my best approach on this is?

Re: Patching

James R. Ferguson — Wed, 17 Jan 2007 16:08:47 GMT

Hi Jason:

Download and apply the appropriate Support Plus or Standard Patch bundles from the ITRC patch database:

http://www2.itrc.hp.com/service/patch/releaseIndexPage.do?BC=main|

Patches and patch bundles are cumulative, so the good news is that you will be "current" by taking the most recent bundles.

Be sure to install *all* the bundles in a set. For instance, for 11.11, install the BUNDLE11i, the HWEnable11i and GOLDQPK11i bundles.

Make sure to fetch and install the latest Support Tools too:

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B6191AAE

You can collect the patch bundles into a single depot with 'swcopy' and perform one reboot. If you need a good overview on patching, see:

http://docs.hp.com/en/5991-5309/index.html

Regards!

...JRF...

Re: Patching

A. Clay Stephenson — Wed, 17 Jan 2007 16:11:00 GMT

1) Download and install the latest version of Ignite/UX and then run a make_tape_recovery.

2) If possible, create a lifeboat disk by dd'ing your existing boot disk(s) to lifeboat disk(s). Should anything fail, you then remove the boot disk and insert thge lifeboat in the boot disk's slot and you are back in business much faster than you can say Ignite --- but still do the make_tape_recovery.

3) Install the latest Quality Pack. Because these are cumulative, you should be up to the latest and greatest.

4) It may be necessary to do tasks such as relink the Oracle executables.

5) Your version of JetDirect is probably out of date (and may even be JetAdmiin). Install the latest version and run the transferqueue command to convert your existing interface files to the newer versions.

Re: Patching

Ivan Krastev — Wed, 17 Jan 2007 16:12:02 GMT

Also check for patches non OS programs - some Oracle's need additional patching after os patches.

regards,
ivan

Re: Patching

Jason_309 — Wed, 17 Jan 2007 16:13:41 GMT

Thank you both for such quick responses.

Re: Patching

Jason_309 — Wed, 17 Jan 2007 16:14:37 GMT

thanks again.

Re: Patching

Robert Fritz — Thu, 18 Jan 2007 12:00:58 GMT

I'd also suggest using Security Patch Check to get the latest security patches and updates which are often not in the bundles. Also, this will give you the data you need to get the systems up to date on security bulletin compliance.

The tool can be found at:
http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B6834AA

Re: Patching

Bob E Campbell — Mon, 29 Jan 2007 12:16:39 GMT

Just an update to Robs pointer to security_patch_check(1M). The Software Assistant (SWA) tool has been released and replaces most SPC usage.

Find more information and download the first release at http://www.hp.com/go/swa