Secure Shell update not included in Patch Assessment

[Dennis Rooks]

After doing a Patch Assessment on a new rx2620 and applying all the Recommended patches, I was surprised to see that the version of HP-UX Secure Shell hadn't budged. I eventually found the patch separately elsewhere at HP's website.

I created a custom Assessment Profile turning on every goodie I could find, and even moving "ssh" (under "Lan Services") to the right column, but no help. This all makes me wonder how many other "HP-UX" packages aren't included in the HP-UX Patch Assessment ! Any comments?

[Patrick Wallek]

SSH is not updated via a patch. It is updated via a whole new package. A patch assessment only covers the PH* patches. Things like Glance, OnlineJFS/AdvancedJFS, SSH, and a host of other software are generally not included.

This is where it pays to keep up with HP's security bulletins. If there is a security related issue, then the bulletin will tell you how to go about fixing it. The fix can be a patch install, a new product version install or some sort of manual action.

[Dennis Rooks]

Very helpful clarifications to this UNIX geezer but HP-UX newbie... thanks much Patrick.