Security Patches - Keeping up to date?

[Nicholas Brawn_1]

I would like to know the best method of determining installed security patches,
comparing them against the current security patch matrix and identifying which
need to be installed.

Cheers,
Nick

[Dan Hull]

Are you looking for more info than is provided by swlist? There are numerous
switches you can use with it to provide different sets of info.

It wouldn't be too hard to write a little script that would run an swlist and
extract only the patches' names into a list. You could then have it run a diff
between that list and one you set up containing the patches you are concerned
about.