01-07-2014 02:17 PM - last edited on 01-08-2014 10:59 PM by Maiko-I
How to list critical patch installed on HP Unix ? Is there any way to list the critical patch installed from Jan 2013 to Dec 2013 ?
P.S. This trhead has been moevd from HP-UX > General to HP-UX > patches. - Hp Forum Moderator
01-07-2014 02:42 PM
What do you consider to be a "critical" patch?
The word "critical" will not appear in the one-line patch description you get from 'swlist'. There may be other queries you can use, but you will need to define what "critical" means to you (or your auditor) with regards to HP-UX patches.
01-07-2014 02:50 PM
I find the below from HP docs,
Critical and noncritical patches
HP-UX patches are considered to be either critical or noncritical. You can determine whether a
patch is labeled as critical by looking at the Critical field on the patch details page or in the patch
text file for the patch. This field identifies newly delivered critical content.
HP considers a patch to be critical if the patch provides a fix for a critical problem. Examples
include patches that provide fixes for the following problems:
• System panic or hang
• Process abort, hang, or failure
• Data corruption
• Severe performance degradation
• Application-specific critical issues
HP considers a patch to be noncritical if the patch provides fixes for only noncritical problems.
Examples of noncritical problems include the following:
• Extraneous debug, warning, or error messages
• Failure to address all documented issues
• Minor regressions in behavior
As what I need is to list all patch which is installed as crtical during particular period. Please do let me know if any further queries.
01-08-2014 08:54 AM
The closest thing I have been able to find is this:
swlist -a install_date -l patch *,c=critical
This will show output like:
# swlist -a install_date -l patch *,c=critical | head -20 # Initializing... # Contacting target "atl5par0"... # # Target: atl5par0:/ # # PHCO_36505 201304081319.59 # PHCO_36505.NLS2-AUX 201304081319.59 # PHCO_36944 201304081319.59 # PHCO_36944.CMDS2-AUX 201304081319.59 # PHCO_37482 201304081319.59 # PHCO_37482.UX-CORE 201304081319.59 # PHCO_37784 201304081320.00 # PHCO_37784.UX2-CORE 201304081320.00 # PHCO_37811 201304081320.00 # PHCO_37811.SOE 201304081320.00 # PHCO_37811.SOE-ENG-A-MAN 201304081320.00 # PHCO_38683 201304081320.07 # PHCO_38683.UX2-CORE 201304081320.07 # PHCO_39485 201304081320.09
If this is an older system that has had patches installed over a long period, then something like:
# swlist -a install_date -l patch *,c=critical | head -20 # Initializing... # Contacting target "atl1"... # # Target: atl1:/ # # PHCO_31548 200910291015.37 # PHCO_31548.PAUX-ENG-A-MAN 200910291015.37 # PHCO_31548.PROG2-AUX 200910291015.37 # PHCO_31561 200910291015.38 # PHCO_31561.CORE-ENG-A-MAN 200910291015.38 # PHCO_31561.UX2-CORE 200910291015.38 # PHCO_31573 200910291015.40 # PHCO_31573.CORE2-64SLIB 200910291015.40 # PHCO_31573.CORE2-SHLIBS 200910291015.40 # PHCO_31577 200910291015.40 # PHCO_31577.UX2-CORE 200910291015.40 # PHCO_31596 200910291015.51 # PHCO_31596.LP2-SPOOL 200910291015.51 # PHCO_31615 200910291015.52 This system has patches that were installed in 2009, so we'll see what happened in 2013: # swlist -a install_date -l patch *,c=critical | grep 2013 # PHKL_42639 201306240822.53 # PHKL_42639.CORE2-KRN 201306240822.53 # PHKL_42639.LVM-KRN 201306240822.53
Hopefully this will get you started.