Patch PHNE_35351

[Matthew Ghofrani]

After installing this patch about 2 weeks ago, 2 of my servers crashed...I did a pacth removal on one of them and that made the server stuck in a crash / panic cycle..I used single user mode and recovered from previous kernel.

Question:
Has anyone run into this issue and was able to successfully remove the patch?
In the patch warning section, it describes the panic might be due to IPFilter version of 3.05.05 (being too old). Has anyone used the path of upgarding this IPFilter as a way of dealing with this issue without attempting to remove the patch?

Matthew From Boston

[rajdev · Accepted solution]

Hi Matthew,

I had the same issue but as the patch is also a critical patch and resolves other security issues, we have decided to upgrade the IP Filter. So i would recommend that if you are not using IP filter, then you can remove it or you can also upgrade to the next version of IPFilter.

--->install IPFilter (B9901AA) version A.03.05.14 or later, which can be obtained from the HP Software Depot:
https://h20293.www2.hp.com/portal/swdepot/try.do?productNumber=B9901AA

so best way will be to upgrade IP Filter and reinstall the patch

Regards,
RD

[apple]

Would like to share my experience.
Couple of weeks ago one of my superdome vpar was crash due to system panic. we are unable to restore from primary and secondary disc, single user and even maintenance mode. final resort, we use the make_tape_recovery tape to restore to the disc.
before that it keeps on restarting on its own. it takes me a little longer time to apply the patch and suddenly the system has crashed. we have upgraded the ip filter to the latest (although we are not using it) and apply the patches (PHNE_35351). so far the system never restart on its own and ok.
it's very dangerous this thing. how can we be more proactive about the need to apply all those critical patch to our system?

[Matthew Ghofrani]

I have upgraded the IPFilter on all of my affected systems and hpoing that would be the final answer. I have also checked with HP's networking folks and they also recommended to do the same.

Thanks again