topic Re: security_patch_check in Operating System - HP-UX

security_patch_check

Asya — Thu, 21 Apr 2005 14:55:28 GMT

Hello,

I'm trying to find a better way to stay on top of security patches required by HP.

security_patch_check gives me a list of missing patches. Is there any other software or an option that i could use for a script that would automatically ftp or download patches from the website and create a depot.

I have about 15 servers that need to be checked..and doing them one by one will take me a while..

Thank you!

Re: security_patch_check

Alex Lavrov. — Thu, 21 Apr 2005 15:46:05 GMT

You can write a script that executes this script on each server once a week and send you the results by email.

Re: security_patch_check

Uday_S_Ankolekar — Thu, 21 Apr 2005 15:48:01 GMT

You can do this with 'run patch assessment'

From the left hand side select Maintenance and Supoort for Hp products' and in the next screen from Patching group select Custom Patch bundle and Run patch assessment' and follow the instruction.

-USA..

Re: security_patch_check

Alex Lavrov. — Thu, 21 Apr 2005 15:53:11 GMT

I doubt that "patch assessment" for 115 servers, one by one, will cheer up Asya ... ;)

Re: security_patch_check

Asya — Thu, 21 Apr 2005 16:17:54 GMT

Uday,

Thank you very much. This is a pretty good option and i've seen this before, but I guess forgot about it. I'll try to use it.

Alex..yes, in the future i will create a cron job that will email me nightly results..but for now... Unfortunately, each server has about 30 patches missing..therefore, i need to have it fixed first, and only then have a cronjob....

Thanks again everyone,
Asya

Re: security_patch_check

Keith Buck — Fri, 22 Apr 2005 10:30:56 GMT

Asya,

Just to let you know, we do have this on our list of requested features.

A few additional hints:

- You should start with the quality pack. That will get you a lot closer to up-to-date on patches, and is a well-tested bundle of patches that have few or no issues reported against them.

- Security Patch Check does have a Systems Insight Manager (aka service control manager) integration that will let you scan multiple servers at once and browse the reports.

- itrc does have a security patch bundle that can be downloaded and applied.

- Someone already suggested the itrc patch assessment as another option. This is certainly the best way to gather your dependencies and get a single download. You can also use the patch selection in conjunction with SPC...run SPC with "-o m" to get the "minimum" patches, then paste those into the search form on itrc and it will give you the recommended set of patches as a bundle.

- Don't forget about manual actions and product updates, which are only reported by Security Patch Check B.02.00 or subsequent.

Hope that helps.

-Keith