Solaris sru update

Superseded Fixlets are Fixlets that contain outdated patch packages. If a Fixlet is superseded, a newer Fixlet exists with newer versions of the packages.

You can install an earlier version of a Solaris patch by enabling superseded Fixlets. Patch Management for Solaris supports zone patching on Solaris 10 endpoints. Use the Solaris Live Upgrade tool to manage system downtime and risk when installing patches on alternate boot environments on Solaris 9 and 10 computers.

To better understand BigFix Patch for Solaris, read the following questions and answers. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all SUSE Linux endpoints. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Ubuntu endpoints.

Dashboards, wizards, and reports aid you in managing updates for various endpoint devices. This section discusses how you can use Fixlets to patch a Solaris 11 operating system to a specific SRU with the assumption that a configured local repository is in place. For information about local repositories, see Local repositories. The Fixlets in the Patches for Solaris 11 site use packages to patch SRUs either from the Oracle Solaris release repository or from a local repository, depending on your repository configuration.

By default, the packages are downloaded from the Oracle Solaris release repository. You can set a local repository as the package repository for certain endpoints by using the Solaris Image Packaging System Repository Management dashboard. An alternative method of patching Solaris 11 endpoints is to use the Install packages by using pkg task. This task enables you to deploy individual packages or all the packages for an SRU.

For more information, see Installing packages on Solaris Patching using Fixlets You can apply Solaris patches to your deployment by using the Fixlets on the available Solaris sites. Manage Download Plug-ins dashboard overview Use the Manage Download Plug-ins dashboard to oversee and manage download plug-ins in your deployment. Mirror management IBM BigFix provides tasks to help with the failback options for your mirror management solution. Patching endpoints on Solaris 10 and earlier When deploying patches, the required packages are downloaded from the Oracle repository by using the download plug-in.

Single-user mode patch application You must bring computers into single-user mode to prepare them for kernel-level or cluster-level patching. If you want this package, you must explicitly install it.

This package is not required in order to update to a newer SRU. Advantages to installing this package include:. Easily upgrade to a specific SRU by updating this package to that specific version. All components are moved to the specified SRU level, including any components that are unlocked from their constraint packages.

The following command lists all CVE fixes that are installed on this system if this system has the solariscpu package installed:. If this system does not have the solariscpu package installed, identify the solariscpu package for the SRU that is installed, and query that package remotely. For example, if this system is running Oracle Solaris To check whether additional fixes are available, use the following command to show whether a version of the solariscpu package is available that is newer than the version you have installed:.

If a newer package is available, use the following command to list the CVE fixes that are available from the newer package, and compare that list with the list of installed CVE fixes.

The following command shows all the versions of the solariscpu package that deliver the fix for the specified CVE:. This output shows which version of the solariscpu package first delivered the fix for this CVE and which version most recently delivered this fix. Note that these packages are not necessarily listed in date order because, for example, month 10 sorts older than month 9. See Oracle Solaris BigFix Patch provides an automated, simplified patching process that is administered from a single console.

BigFix Patch for Solaris provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Solaris endpoints.

Use the Fixlets on the various Solaris sites to apply Oracle patches and updates to your deployment. You can apply Solaris patches to your deployment by using the Fixlets on the available Solaris sites. It provides content to update your local repositories with the latest SRU from the Oracle Solaris release repository. Dashboards, wizards, and reports aid you in managing updates for various endpoint devices.

It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all AIX endpoints. BigFix Patch for Red Hat Enterprise Linux provides an automated, simplified patching process that is administered from a single console. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Red Hat Enterprise Linux endpoints.

It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all CentOs endpoints. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Amazon Linux 2 endpoints. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all SUSE Linux endpoints. BigFix Patch for Ubuntu provides an automated, simplified patching process that is administered from a single console.

It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Ubuntu endpoints. It gives you unified, near real-time visibility and enforcement to deploy and manage patches to all Oracle Linux endpoints. BigFix Patch for Solaris provides unified, real-time visibility and enforcement to deploy and manage patches to all Solaris endpoints from a single console.

It keeps your Solaris clients current with the latest Oracle updates. Use the Manage Download Plug-ins dashboard to oversee and manage download plug-ins in your deployment. BigFix provides tasks to help with the failback options for your mirror management solution. These tasks are available only for Solaris 10 endpoints. It is a distributed file system that allows users to access files and directories that are on remote computers and treat those files and directories as if they were local.

Use the Solaris download cacher utility to pre-cache Solaris updates to the BigFix server or to a specified target directory before deploying the Fixlets to targeted endpoints. When deploying patches, the required packages are downloaded from the Oracle repository by using the download plug-in.

BigFix provides a method for using local repositories to store patch updates for Solaris You must bring computers into single-user mode to prepare them for kernel-level or cluster-level patching.

Create a baseline to modify a Solaris patch Fixlet for single-user mode. You can control which packages to deploy to Solaris computers that have the BigFix client installed. You can retrieve a list of all installed packages on Solaris 10 and 11 endpoints by activating analyses on the BigFix console. You can retrieve a list of the Solaris 10 and 11 endpoints that contain packages with available updates by activating analyses on the BigFix console. Superseded Fixlets are Fixlets that contain outdated patch packages.

If a Fixlet is superseded, a newer Fixlet exists with newer versions of the packages. You can install an earlier version of a Solaris patch by enabling superseded Fixlets. Patch Management for Solaris supports zone patching on Solaris 10 endpoints.