PATCHES with WARNINGS

[Raperswil]

Hello All
I ran the shell script SWAINV and collected the output in INVENTORY.XML.

Please note that I have not consciously installed any patches.

After running an analysis against this (on the HP ITRC site), I have the following questions:

1. What am I supposed to do for the foll recommendations:
installed patch with critical warning: PHCO_27408 (critical warnings)
installed patch with critical warning: PHKL_28984 (critical warnings)

Does this mean the above patches were already installed by the installer?

2. PHCO_36507 : latest quality pack patch bundle GOLDBASE11i:B.11.11.0706.467 has patch with non-critical warning: PHCO_26005 (quality pack)

THere is a box to tick and download PHCO36507. What am I supposed to do with PHCO_26005, install it, or check if it is installed already and remove it?

3. PHNE_35351:
security patch PHNE_29887 is not installed (security)
security patch PHNE_35351 is not installed (security)
latest quality pack patch bundle GOLDBASE11i:B.11.11.0706.467 has patch with critical warning: PHNE_35183 (quality pack)

Again, should I download and install seperately PHNE_29887? Why does the script not give me a check box so I can downlaod it?

4. Does HP-UX come with unzip?

5. How do I apply these patches, in what order, do I need to reboot after every patch application?

I will greatly appreciate all help.
Many thanks in advance
TK

[James R. Ferguson]

Hi:

There is a new replace product for the Security Patch Check and Patch Assessment tool that is far easier to use. SWA supersedes the predecesor products.

Download and install the new Software Assistant Tool (SWA). Newly released in January 2007, SWA can perform a number of checks including those related to published security issues, installed patches with warnings, and missing patches with critical fixes. Once an analysis has been performed, SWA can download any recommended patches or patch bundles and create a depot ready for installation. The tool obviates more manual, tedious patch analysis and collection.

The manpages that accompany the product are straightforward and show how to configure and use the product.

http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B6834AA

With this tool, you can download everything you need to bring your server up-to-date. A single patch depot will be created and you will only need to reboot once to apply its contents.

Regards!

...JRF...

[Torsten.]

Regarding the "critical warning" (for PHNE_35183):

Warning: 07/08/06 - This Critical Warning has been issued by HP.
... details ...

see
http://www8.itrc.hp.com/service/patch/patchDetail.do?patchid=PHNE_35183&sel={hpux:11.11,}&BC=main|search|

You should use the inventory.xml file to run a patch assessment on ITRC. Patches without a checkmark are already installed.
Add all needed patches to a bundle, download in gziped tar, download and install.
Because it is only 1 bundle, you need only 1 reboot.

[James George_1]

Hi

When you download the patch , you have the option to select the zip format or the tar .

Once you down load the patch ( say in tar format to you pc , then ftp it to your system ( remember to set the binary option on the ftp prompt ) . when you untar it ( tar -xvf XYZ.depot.tar ) it will have the files including the create_depot_hpux_11 script. if you have dwonloaded the patch to the /tmp directory, then execute this script and it will create a depot for you .

Now , go ahead and do swinstall

Rgds / James

[Steven E. Protter]

Shalom,

1) Warnings come out after the fact when a defect is discovered. There is nothing unusual to find a three star QPK patch getting a warning, weeks or even months after release.
2) Sometimes you have to install patches with warnings. You need the functionality. So you read carefully and make the best decision for your organization.


Your questions:
1) Yes but see point 1 above.
2) If you install a patch that supersedes another that patch is essentially overwritten. It can be brought back unless you clean out superseded patches.
3)Security patches that fix critical security problems. Often not part of QPK/Gold releases. You need to get these into production to comply with your responsibilities in your software contract.
4) I don't think so. I have a /usr/contrib/bin library which I've moved from 10.20 to 11.00 and now to 11.11 and beyond. I've had to update some of the utils but thats where I get this stuff.
5)Build a single patch depot with swcopy so you can do one install and one reboot. Go to the site itrc.hp.com Click patch database. Search by patch ID and click to select patches and dependencies into a single patch database. Then download the db, I use ftp script but any method delivers you a create depot script that will let you build a single patch depot.

swinstall -x autoreboot=true -x reinstall=false -s \*

System will reboot at close of install. READ all the notes and warnings before proceeding.

Do an ignite make_tape_recovery or make_net_recovery so you have a back out plan.

SEP

[Bob E Campbell]

Thanks for the kind words for SWA James, the URL https://www.hp.com/go/swa is a little easier for most folks to remember :)

[Raperswil]

Hello ALl
Thanks for your responses.

I have a different question, before I can try out the answers given here.
Thanks again, I will definitely reply.

[James R. Ferguson]

Hi (again):

Bob: >Thanks for the kind words for SWA James.

Your most welcome, Bob. I *really* like SWA. You folks deserve kudos.

Regards!

...JRF...