Showing results for 
Search instead for 
Did you mean: 

What is SecPatchChk ?

Valued Contributor

What is SecPatchChk ?

In my server from my swlist i have :

  SecPatchChk                   C.02.10        HP-UX Security Patch Check Tool

What is this tool?

Patrick Wallek
Honored Contributor

Re: What is SecPatchChk ?

From the security_patch_check (1M) man page:


The security_patch_check utility has been replaced by Software
Assistant.  See swa(1M).  After November 1, 2008 the use of the
security_patch_check -m option will generate a compatible report
through the swa command.  Other options will either be ignored or will
cause security_patch_check to terminate with an error.

Previous versions of Security Patch Check will continue to function as
intended until the security catalog is no longer provided.  The
security catalog will be available until at least November 1, 2008.

Unless otherwise specified, the remainder of this DESCRIPTION section
describes the behavior of Security Patch Check before November 1,

Security Patch Check analyzes the bulletin compliance of an HP-UX
system.  Most of the functionality of Security Patch Check is
superseded by Software Assistant, called using the swa command.
Software Assistant can report on security bulletin compliance and many
other types of issues in a variety of report formats.  In addition,
SWA does automated patch dependency analysis, download, and depot
creation.  See swa(1M) for details.  The security_patch_check command
remains for those features that are not fully implemented in Software
Assistant.  This Security Patch Check man page gives some pointers to
the swa equivalents of security_patch_check options, when applicable.

security_patch_check will determine which minimal security patches,
updates and manual actions have yet to be applied to the system, and
will generate a report listing the patches and actions recommended
that apply to the specific system analyzed.  It is likely that the
analysis will be incomplete for products and operating systems that
are obsolete or unsupported. This includes products from previous OS
versions that remain after an OS update.  If your system was updated
from a prior OS, you may choose to use the -s option to identify
additional issues that may have been announced for the prior OS