Linux·4,539 discussions

Solaris patches

Locked

How to find what are security patches are applied on sun Solaris.

Topic

Solaris patches

In reply to Solaris patches

showrev -p

gives info on all patches installed…

Solaris patches

In reply to Solaris patches

The question was auto-closed by TechRepublic

Solaris patches

In reply to Solaris patches

You might want to enhance the showrev command by using grep. First get a current list of security patches from Sun. Place the list of security patches in file. Run the following command sequence:

showrev -p | /usr/xpg4/bin/grep -f secpatch

secpatch is the filename of the security patches for this example. You can even redirect the output to a file to compare with the original, then you can find which patches aren’t loaded.

Solaris patches

In reply to Solaris patches

The question was auto-closed by TechRepublic

Solaris patches

In reply to Solaris patches

To add to answer number 2, I usually throw an awk command in there as well. I look up my patch info by number, and just grepping for a patch number, 105181-05 for instance, will pull up several entries, since other patches are dependent on it.

showrev -p | nawk ‘{print $2} | grep 105181 is the syntax I use.

Hope this helps.

Solaris patches

In reply to Solaris patches

The question was auto-closed by TechRepublic

Solaris patches

In reply to Solaris patches

you can also use the utility patchdiag provided by sun @ sunsolve.sun.com this utility will show you the current rev of security and recomended patches compared to what you have on your system.

Solaris patches

In reply to Solaris patches

The question was auto-closed by TechRepublic

Solaris patches

In reply to Solaris patches

To get right list of security patches what are installed in your system, you may follow this. Get the full list of security patches required for Solaris 2.6 from sunsolve.sun.com. Keep all those file names ( e.g. 105234-04 ) in a directory. Then execute this :
# for i in `ls -1`
do
showrev -p | grep $i
if [ $? = 0 ]
echo “$i exists” > /tmp/security_patches.lst
fi
done

You will get the list of security patches in your system in /tmp/security_patches.lst.

Hope it will help you.

Solaris patches

In reply to Solaris patches

The question was auto-closed by TechRepublic

Solaris patches

In reply to Solaris patches

http://sunsolve.Sun.COM/ has a tool that you can download called PatchDiag.

It’s easy to install and the instructions are included. Each week you can download what is called the patchdiag.xref file (cross reference) that compares what you have installed on your system, with what is new and recommended for y2k and security.

The patchdiag.xref file takes under a minute to download, you copy it to the location that your patchdiag executable looks for and run it. It’s a quick, easy report to read.

From there, you download the patches that is lists you as needing.

I’m not sure if you can get the patchdiag tool from anywhere else, but I’m sure it’s out there. There are also scripts that will automate the download of the patchdiag.xref file, but I haven’t automated mine (yet)

Good luck

Solaris patches

In reply to Solaris patches

The question was auto-closed by TechRepublic

Solaris patches

In reply to Solaris patches

This question was auto closed due to inactivity

[Author]

Replies