Sponsored Content
Operating Systems Solaris Recommended patchset for Solaris and the patch bundle Post 302842731 by abohmeed on Friday 9th of August 2013 06:09:11 PM
Old 08-09-2013
Recommended patchset for Solaris and the patch bundle

Hello
I recently downloaded and installed the latest patchset for Solaris 10 (update 5) running on SPARC.
Actually I am new to Solaris (I come from Red Hat) and the security department asked me to update the system for security fixes.
I logged in to Oracle support and used the recommended patch adviser. I downloaded a 2.5 GB file containing the latest (supposedly) patches available from Oracle for my OS , unziped it and installed it successfully.
When the security dept did a second assessment they found that a lot of vulnerabilities are still there! On a second search on Google i found
Patchset Solaris 10 1/13 SPARC Bundle which is also a 2.2 GB file.
Now should i download and apply this bundle? and what is the difference between this and the one i downloaded?
 

8 More Discussions You Might Find Interesting

1. Solaris

Problem with patch bundle installation on Solairs 10

:mad: :mad: Hello, Could some help me to resolve why i am geting the below errors... :( Just tried installing patch bundle on solairs 10. many patches are been failed. wen i am trying to install it manualy i am geting the below errors.. ... (8 Replies)
Discussion started by: bullz26
8 Replies

2. Solaris

smpatch and recommended bundle

Hello, I am working on patching several systems and have begun working with smpatch as a possibly quicker way to accomplish patching. I have some observations that trouble me. The "smpatch analyze" only shows a small number of patches for a system (yes the registration is complete with a... (0 Replies)
Discussion started by: justme3
0 Replies

3. Solaris

10 Recommended Patch Not Working

Hello, The 10_Recommended update failed on 3 of 191, which was patch 119254-73 (the 1st 2 patches were skipped). I looked up the patch on Sunsolve (http://sunsolve.sun.com/search/document.do?assetkey=1-21-119254), which stated that 121133-02 was a required patch for 119254-73. I did a "showrev... (7 Replies)
Discussion started by: stringman
7 Replies

4. Solaris

Issue while installing: Solaris 10 SPARC Recommended Patch Cluster (2009.10.23)

Hello, As explained, I've encountered an issue while installing Solaris 10 SPARC Recommended Patch Cluster (2009.10.23). Actually, patch no 120011-14 stops with the following error: ERROR: attribute verification of </var/run/.patchSafeMode/root/usr/bin/passwd> failed file type <f>... (6 Replies)
Discussion started by: a.mauger
6 Replies

5. Solaris

Applying Recommended Patch Cluster to Whole Root Zone

Hi there, Apologies if this question has been asked and answered already but I've not been able to find the thread. Question: Is it possible to apply the Solaris 10 Recommended Patch Cluster to a whole root (non-global) zone locally? I.E. apply the patch cluster from the non-global in... (3 Replies)
Discussion started by: nm146332
3 Replies

6. Solaris

Jumpstart and Applying Recommended Patch Cluster

I'm trying to setup our jumpstart server to automatically apply the latest patch cluster during installs, but I'm running into an issue. Every time Jumpstart runs it has this error. Obviously it's processing the patch_order file, so I'm not sure what I'm missing. ... (0 Replies)
Discussion started by: christr
0 Replies

7. Solaris

Recommended Patch Cluster Using ZFS Snapshots

I have a question regarding installing recommended patch clusters via ZFS snapshots. Someone wrote a pretty good blog about it here: Initial Program Load: Live Upgrade to install the recommended patch cluster on a ZFS snapshot The person's article is similar to what I've done in the past. ... (0 Replies)
Discussion started by: christr
0 Replies

8. Solaris

Oracle stopped updating Solaris 10 recommended patch cluster ?

Dear All, Has Oracle stopped updating Solaris 10 recommended patch cluster ? From suport.oracle.com i could see the last patch bundle was released on 11th july and there has been no updates after that. Does anyone know about any official announcement from oracle on this ? Thanks ... (1 Reply)
Discussion started by: abhi_8029
1 Replies
pprosvc(1M)						  System Administration Commands					       pprosvc(1M)

NAME
pprosvc - automation service program for Patch Manager SYNOPSIS
/usr/sbin/pprosvc [-c config-name] [-d [-p patch-id [,patch-id...]]] [-h] [-i [-n] [-p patch-id [,patch-id...]]] [-l] DESCRIPTION
Note - This command is deprecated. Use the smpatch analyze, smpatch download, and smpatch update commands instead. See the smpatch(1M) man page. Use the pprosvc command to analyze a system to determine the list of appropriate patches, download the patches, and apply them. This com- mand invokes patch operations in response to a user request or at a scheduled time. You must run this command as superuser. The pprosvc command enables you to do the following: o Analyze the host system for appropriate patches based on an established configuration o Generate the list of appropriate patches o Download the patches to your host system from the Sun patch server o Apply the patches based on a patch policy Use the pprosvc -i command to analyze a system, download the appropriate patches, and apply them. If analysis determines that patches are needed, the pprosvc command downloads them and applies them. Specify other options to automate a subset of the patch management tasks. If you specify the -d option, your system is analyzed and the appropriate patches are downloaded to your system. If you specify the -l option, your system is analyzed and the appropriate patches are listed. The list of patches that is generated by the analysis is based on all of the available patches from the Sun patch server. No explicit information about your host system or its network configuration is transmitted to Sun. Only a request for the Sun patch set is transmitted. The patch set is scanned for patches that are appropriate for this host system, the results are displayed, and those patches are optionally downloaded. The -d, -i, and -l options are mutually exclusive. Use the -p option to specify the patches on which to operate. You can use the -p option with the -d and -i options. OPTIONS
The following options are supported: -c config-name Uses an alternate configuration for the current patch operation. Use the pprosetup command to create new configura- tions. A configuration named recommended is included. For more information, see ``Specifying Alternate Configurations'' in the pprosetup(1M) man page. Note - This feature is not supported by the smpatch command. -d Downloads the patches that are appropriate for this host system. The patches are downloaded to the designated down- load directory. This option generates a list of appropriate patches, as does the -l option. However, instead of just displaying the list of patches, the -d option displays and downloads the patches from the Sun patch server. The patches are down- loaded using a secure connection, and all patches are authenticated using digital signature technology. Only patches that are signed with a Sun digital signature are stored in your download directory. Note - Specifying this option is equivalent to running the smpatch download command. -h Displays information about the command-line options. -i Applies the patches based on the patch policy. This option analyzes your system to generate a list of appropriate patches. If analysis determines that patches are needed, the patches are downloaded and applied. If no patches are permitted to be applied in automatic mode (by running pprosetup -p none), this option is identical to specifying the -d option. If only standard patches are permitted to be applied in automatic mode (by running pprosetup -p standard), all standard patches are applied. Note - Specifying this option is equivalent to running the smpatch update command. -l Generates a list of the patches that are appropriate for this host system. Note - Specifying this option is equivalent to running the smpatch analyze command. -n Runs pprosvc in automatic mode. The command that the cron job specifies is pprosvc -i -n. To schedule patch opera- tions to run in automatic mode, see the pprosetup(1M) man page. In automatic mode, the patch administrator (specified by the -a option) receives email notifications that describe the patches you downloaded and applied, and any error events that occurred. Do not use this option on the command line. Standard patches do not require any special actions on the part of the user. Such patches can be applied by using the patchadd command (see the patchadd(1M) man page) and do not need the host system to reboot for the patch to take effect. All nonstandard patches are moved to the sequester directory if you use the -n option to run in automatic mode. If you run in manual mode, however, nonstandard patches that have properties that match the policy specified by ppros- etup -i are applied. The rest of the nonstandard patches are moved to the sequester directory. You can apply patches from this directory at a later time. Patches, whether standard or nonstandard, that depend on sequestered patches are not applied under any circumstances. Such patches are placed in the sequester directory. For any patch that is placed in the sequester directory, refer to the patch's README file to determine how to apply it to your system. Note - This feature is not supported by the smpatch command. -p [patch-id[,patch-id,.Designates the specific patches on which to operate. Use this option with the -d option or the -i option. The list of patch IDs must be separated by commas. The specified patches are adjusted to use the current versions based on the patch baseline. Patches that are required by the specified patches are added to the complete list of patches to be applied. Note - Specifying this option is equivalent to specifying the -i option to the smpatch analyze, smpatch download, and smpatch update commands. EXAMPLES
Example 1: Applying Specific Patches in Manual Mode # pprosvc -i -p 102893-01,106895-09,106527-05 Applies patches 102893-01, 106895-09, and 106527-05 to the local system in manual mode. Example 2: Analyzing a System and Downloading Appropriate Patches # pprosvc -i Performs an analysis of the current system and downloads the appropriate patches based on all the patches from the Sun patch server. The resulting list of patches can be very long. Example 3: Applying Patches From the Recommended Configuration # pprosvc -c recommended -i Uses the recommended configuration to perform an analysis of the current system and downloads the appropriate patches. Standard patches and those needed from the recommended configuration are applied to the system based on the established patch policy. For information about set- ting the patch policy for manual mode, see the description of the -i option on the pprosetup(1M) man page. ATTRIBUTES
See the attributes(5) man page for descriptions of the following attributes: +-----------------------------+-----------------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +-----------------------------+-----------------------------+ |Availability |SUNWpprou | +-----------------------------+-----------------------------+ |Interface Stability |Obsolete | +-----------------------------+-----------------------------+ SEE ALSO
patchadd(1M), patchrm(1M), pprosetup(1M), smc(1M), smpatch(1M), attributes(5) SunOS 5.10 7 May 2004 pprosvc(1M)
All times are GMT -4. The time now is 07:11 PM.
Unix & Linux Forums Content Copyright 1993-2022. All Rights Reserved.
Privacy Policy