secunia reported HP-UX patches that were not highlighted when using swainv

[Fenglin]

uname -a shows HP-UX nspdcqp3 B.11.11 U 9000/800 4285217958 unlimited-user license,fyi.

[Dennis Handly]

>But the truth is how come I don't see the patches in the patchlist.txt that I created?

When you put the patches into a bundle they "disappear". I assume the thought behind this is if you download a patch bundle with 100s of patches, they don't want to bother you with each individual name.
If you want to drill down to get the details you can use "-l product", etc.

Hmm, when I use "swlist -l patch" on that "depot" file, I do see the patches, down to the fileset level.

[Dennis Handly]

>HP-UX nspdcqp3 B.11.11 U 9000/800

Ah, you are on 11.11 and PHCO_37291 and PHNE_36193 were for 11.23.
PHCO_37290 is the 11.11 equivalent for PHCO_37291. The other doesn't have one.

[Fenglin]

What are the pre-requisites before I upgrade HP-UX B.11.11 to HP-UX B.11.23?

Kindly asap. Thank you.

[Dennis Handly]

>What are the prerequisites before I upgrade HP-UX B.11.11 to HP-UX B.11.23?

This is not a patch.
The opinion of others on this forum is to not upgrade but cold load to 11.23.
But before you attempt this, you should make sure your existing hardware and cards will support 11.23.

There are lots of threads about moving to 11.23. You can search for more.
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1209055
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1206413
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1202554
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1197568
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1196725

[Fenglin]

I understand this is not a patch.

What happened was some servers in our staging environment have HP UX B.11.11 and some have HP UX B.11.23. Would you recommend to upgrade to all HP UX B.11.23?

The same apply to our production environment. That's why I was wondering whether we should upgrade all to HP UX B.11.23 so that every OS is at the same level.

For your necessary advice pls.

[Dennis Handly]

>What happened was some servers in our staging environment have HP UX B.11.11 and some have HP-UX B.11.23. Would you recommend to upgrade to all HP-UX B.11.23?

This is entirely up to you.
Obviously Mark Hurd wants you to go all the way to 11.31 and Integrity. :-)

>That's why I was wondering whether we should upgrade all to HP UX B.11.23 so that every OS is at the same level.

Do you have applications that don't run on 11.23?
If you are not limited by software issues and your machines/cards can all support 11.23, going to one OS version would be easier to support.

Of course if you are a software developer (ISV), you may need a 11.11 system to do development and testing.

[Fenglin]

If I were to upgrade all to HP UX B.11.23, is there any precaution I need to take for those HP UX B.11.11 servers before I proceed in case the system does not bring up?

[Dennis Handly]

>If I were to upgrade all to B.11.23, is there any precaution I need to take for those B.11.11 servers before I proceed in case the system does not bring up?

If you have extra machines, you could try to cold install to that machine to see what issues you have.
Otherwise you would need a full backup and an Ignite backup so you can quickly go back.

But the most important thing is planning.

[Fenglin]

Just heard from my colleague that we will have to maintain our set of servers,meaning some will run on HP UX B.11.11 and the rest on HP UX B.11.23, so I would like to know the following

1) PHNE_36193 will work only on HP UX B.11.23. Is there such a patch for HP UX B.11.11? If yes, where to download the patch?Pls give full details so that I just need to click and download the patch?

2) AM I correct to say that PHCO_37291 will fix 9) on HP UX B.11.23 and PHCO_37290 will do the same on HP UX B.11.11? If yes, pls indicate full details where to download PHCO_37290. I have PHCO_37291.

3) Patch PHSS_37703 will fix no. 10 on both OS?

4) Can anybody tell me whether there are existing patches for 3) - 8) ? and whether they are compatible on both OS? 6) and 8) are more urgent. Thank you.

A million thankssssss......

[Dennis Handly]

1) PHNE_36193 will work only on B.11.23. Is there such a patch for B.11.11?

There is no obvious equivalent ftp patch:
http://www.itrc.hp.com/service/patch/patchDetail.do?patchid=PHNE_36193#Equivalent%20Patches:

2) AM I correct to say that PHCO_37291 will fix 9) on HP UX B.11.23 and PHCO_37290 will do the same on HP UX B.11.11?

That's what equivalence means.

>pls indicate full details where to download PHCO_37290. I have PHCO_37291.

The same as the others, the Patch database:
http://www.itrc.hp.com/service/patch/mainPage.do
http://www.itrc.hp.com/service/patch/patchDetail.do?patchid=PHCO_37290

>3) Patch PHSS_37703 will fix #10 on both OS?

You need PHSS_37702 for 11.11.

>4) Can anybody tell me whether there are existing patches for 3) - 8)? and whether they are compatible on both OS?

I would suggest you look at HP's security bulletin link I gave above. Or go back to secunia's web site. All this info should be there. Secunia gives info by OS version.

See Ivan's reply to your other thread:
http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1239459

[Fenglin]

Sorry ,sometimes I am confused when i am given the option to download either via http or ftp. How should I download them? I realise only the http works. But then, i can save the file as .txt file. How come they do not come up as a zip file?I am wondering whether its correct in downloading the file as a txt file.

need your expertise,thanks.

[Dennis Handly]

>sometimes I am confused when i am given the option to download either via http or ftp. How should I download them?

It may depend on which is easier to push, which is faster or ftp may not be allowed in your org.

>i can save the file as .txt file. How come they do not come up as a zip file?

You can get them as zip, if you put more than one patch in your shopping cart.

>I am wondering whether its correct in downloading the file as a txt file.

A possible problem would be if you didn't use binary mode to transfer from your PC to HP-UX. The contents of an individual patch is a shar(1) file, with patch-ID.text and patch-ID.depot.

[Fenglin]

So its safe to say that saving the file as .txt, and transferring the file to the server in binary mode will successfully install the patch. Am I right?

[Dennis Handly]

>So it's safe to say that saving the file as .txt, and transferring the file to the server in binary mode will successfully install the patch.

The simplest way is to not add the .txt suffix. Then when it gets to the HP-UX system, you can just follow what the README says.

[Torsten.]

Do you download to a windows pc?

Within the "download patches" window, *right* click on the "download via http" button and select "save target as ...".
Now select "save as type" to all files.


But the better solution:

click on

"+ Expand to view additional download options"

and select

gzip package
or
tar package
format.

[Fenglin]

Thanks Torsten.

I am deploying T1471AA_A.05.00.024_HP-UX_B.11.11_32_64.depot in my spare server running on HP UX B.11.11 to solve 5), after extracting the file, I saw 2 folders, catalog and Secure_Shell, how to proceed with the installation?

Thanks.

[Dennis Handly]

>after extracting the file, I saw 2 folders, catalog and Secure_Shell, how to proceed with the installation?

You should not have "extracting the file". If you see "catalog", you have gone too far.

You should simply use:
swinstall -s $PWD/T1471AA_A.05.00.024_HP-UX_B.11.11_32_64.depot

[Fenglin]

I would also like to check where to download Netscape Directory Server vB07.10.40. I am not sure how to do it when I access the software depot website.

Thanks.

[Dennis Handly]

>where to download Netscape Directory Server vB07.10.40.

I don't see it? Why do you think it exists?
Staring here:
http://docs.hp.com/en/B1031-90062/ch01s03.html
It talks about v7 for Red Hat.
For HP-UX, I only see V6:
http://h20392.www2.hp.com/portal/swdepot/displayProductsList.do?category=ISS

[Fenglin]

Thanks Dennis.

When I do 'swlist|more', I see

PHNE_35351 1.0 cumulative ARPA Transport patch. However , when I do 'swlist -l patch|grep PHNE_35351', I See
# PHNE_35351 1.0 cumulative ARPA Transport patch

Is the patch installed on the server?

[Dennis Handly]

>Is the patch installed on the server?

It sure looks like it. Both commands show it's there.

[Fenglin]

When I use 'swlist -l patch', some of the patches I see the word 'applied' at the end and '#' at the beginning.

What is the difference when there is 'applied' at the end and '#' at the beginning?

I was thinking '#' is the same as comment,wrong?

[Dennis Handly]

>When I use 'swlist -l patch', some of the patches I see the word 'applied' at the end and '#' at the beginning.

There are more details when you say "patch".

>What is the difference when there is 'applied' at the end and '#' at the beginning?
>I was thinking '#' is the same as comment, wrong?

Technically if a patch isn't applied or configured it may not be valid, so "-l patch" is giving more details. You could use the "-a patch_state" option to get more of them. It could also list that a patch is superseded or corrupt.

No, that "#" is just formatting it differently, something like indentation.

[Fenglin]

Thanks Dennis.

I am trying to install PHSS_37702 on HP UX B.11.11. I got the following errors

* "nspdcqp3:/": The software dependencies for 3 products or
filesets cannot be resolved.
* "nspdcqp3:/": 1 bundles have the selected revision already
installed.
* "nspdcqp3:/": 1 bundles cannot be installed because none of
their filesets can be installed.
* Analysis and Execution succeeded.

Any resolution?