How to check when the server was patched and what.

[Sudhakar_17]

Hi Exports,

how could i check when the system was patched last, what was patched.

/var/adm/sw/*.log i found all the swinstall log files. is it any specific files related with Patch.

Thanks and Regards
Sudhakar

[Berd]

To check for the regular patch bundles use swlist -l bundle | grep patch

swlist -l bundle | grep -i patch
BUNDLE11i B.11.11.0306.1 Required Patch Bundle for HP-UX 11i, June
2003
FEATURE11-11 B.11.11.0209.5 Feature Enablement Patches for HP-UX 11i,
Sept 2002
GOLDAPPS11i B.11.11.0612.459 Applications Patches for HP-UX 11i v1,
December 2006
GOLDBASE11i B.11.11.0612.459 Base Patches for HP-UX 11i v1, December
2006
HWEnable11i B.11.11.0612.458 Hardware Enablement Patches for HP-UX 1
1i v1, December 2006

HTH

Berd

[Denver Osborn]

Have a look at the output from swlist.

/usr/sbin/swlist -l patch -a install_date -a install_source


The above command will show you what patches have been installed for listed products/filesets and the date the patch was installed. You'll also see where the patch was installed from.

-denver

[Marco A.]

Hello,

I believe that the normal swlist command will not show you the dates in which they were applied.

Try to check that by using the ll command ..

First, check your patches with the swlist, if you have a determine product that want to investigate..., then go to /var/adm/sw/prodcut .. and right there run a ll

ex
#ll PHCO_23550*

That will show you the info about the date in which it was applied.

hope that helps,

Marco ...

[Marco A.]

wow ... good one denver ...
didn't know this .. /usr/sbin/swlist -l patch -a install_date -a install_source
..

Thanks !!!..

Marco

[Sudhakar_17]

Hi Berd

Thaks for your immediate responce.

Regards
Sudhakar

[Brian DelPizzo]

You can check the /var/adm/sw/swinstall.log as well... It will have all of the details of the previous installs which are dated.

[Marco A.]

In addition Sudhakar ...

Also take a look at this link ...

http://forums1.itrc.hp.com/service/forums/helptips.do?#28 ..to see how this works ..

Marco ...!!!

[Bob E Campbell]

Using bundle wrappers and commands provided are good ways to answer your question. The problem is your question was flawed.

When matters much less than what has been fixed and what remains broken. You could use SWA to report the current issues and use that to decide when enough is exposed to require a change.

You might try the command:

# swa report -a SEC -a QPK -a PW -a CRIT -r issue

The HTML report should make it relatively easy to research the security bulletins, patch warnings, and critical fixes that apply to your system.

Go to https://hp.com/go/swa for more information and to download.

[Sudhakar_17]

Hi All,

Thanks for the usefull information.

Regards
Sudhakar

[Sudhakar_17]

Thanks for all the support