topic Re: How do we tell what patches ?(new to AIX and inherited HP) in Operating System - HP-UX

How do we tell what patches ?(new to AIX and inherited HP)

Jim Lynn — Wed, 16 Jan 2002 15:50:21 GMT

I've been asked to investigate the following - any experience ?
RISK FACTOR: 3

RISK FACTOR EXPLANATION: Any local user can cause a kernel deadlock
condition. The local user requires no special privileges. This condition
cannot be remotely exploited. There are patches available.

IMPACT: Denial of Service
SUMMARY: The HP-UX kernel contains a vulnerability that may allow for
local users to cause a denial of service.
PLATFORMS AFFECTED: Servers,Workstations
Hardware:
Operating Systems: HP-UX
Explanation: HP-UX 10.20 Series 700 and 800

Applications:

BACKGROUND: The problem may occur when a process maps a file to a
memory buffer (using the mmap() system call). If the process attempts to
perform an I/O operation using data from the mapped buffer on the file
descriptor for the mapped file, a kernel deadlock will occur. A local
user could cause a system-wide denial of service.
RECOMMENDATIONS: Predictive Systems recommends applying the appropriate
patches provided by HP.

HP HP-UX 10.20 Series 800:
HP Patch PHKL_24518

Re: How do we tell what patches ?(new to AIX and inherited HP)

Jeff Machols — Wed, 16 Jan 2002 15:52:26 GMT

swlist | grep PHKL_24518

Re: How do we tell what patches ?(new to AIX and inherited HP)

James R. Ferguson — Wed, 16 Jan 2002 15:54:43 GMT

Hi Jim:

On 10.20, to determine if you have this patch installed, do:

# swlist -l fileset|grep PHKL_24518

To see all patches and filesets, drop the piped 'grep' above.

Regards!

...JRF...

Re: How do we tell what patches ?(new to AIX and inherited HP)

harry d brown jr — Wed, 16 Jan 2002 15:54:57 GMT

To list software and patches installed, use:

swlist -l

Now, since you inherited this, I'd suggest going to the HP site "IT Resource Center Home", then under "maintenance and support" select "more....", then under "patching" select "custom patch bundles (custom patch manager)", then follow the instructions and get all of the patches up to date.

live free or die
harry

Re: How do we tell what patches ?(new to AIX and inherited HP)

harry d brown jr — Wed, 16 Jan 2002 15:56:48 GMT

Also,

Before you DO ANYTHING regarding installing or removing patches, create a make_recovery tape!!!

make_recovery -A -v -i -d /dev/rmt/atapedevicehere

live free or die
harry

Re: How do we tell what patches ?(new to AIX and inherited HP)

Sanjay_6 — Wed, 16 Jan 2002 16:00:44 GMT

Hi,

If you want to check whether the patch is there on the system or not, try

swlist -l patch |patch_name

for your case, try

swlist -l patch | grep PHKL_24518

hope this helps.

Regds

Re: How do we tell what patches ?(new to AIX and inherited HP)

Jim Lynn — Wed, 16 Jan 2002 17:07:19 GMT

If the patch is in a bundled set - do you have to go to the HP site or can you break to thebundle down by patch list....

Re: How do we tell what patches ?(new to AIX and inherited HP)

James R. Ferguson — Wed, 16 Jan 2002 17:27:53 GMT

Hi Jim:

You can go to the ITRC Maintenance & Support -> Standard Bundles -> View Support Plus Release and drill into any bundle to see all the patches it contains.

On the Support Plus Release Index page there, you can also find recent Support Plus bundles that contain a particular patch by entering its number (PHxx_nnnn).

Don't worry about selecting a patch from the patch database that has been superseded. You will be automatically advised of this and can select the successor.

Regards!

...JRF...