Adding Patches

We have some patches that is required in our environment (802.1x authentication). These patches are not in the "released" channels for Microsoft, so they do not show in either Windows Update or downloaded patches in ZPM.
My question is, is there a specific format that bundles need to be in before adding them to ZPM? I found the documentation on how to add, but not how to formulate the bundle before adding.
We are running ZENworks 11.3.2.

I am curious about adding a patch remediation bundle/content manually. Do you have a reference for it?
When we have needed to do this sort of thing we usually just create a manual bundle to copy down and launch the .exe or if it is an MSU file we copy the file down, launch WUSA and pass it the required parameters.

Similar Messages

Adding patches to dwm

I have been using wmii for the past year or so, and decided to switch to dwm due to it's even lighter weight, and better handling of dual heads. I have it all up and running, and there is great arch-specific documentation in the wiki, but decided I wanted to add a patch, push. So, I downloaded the build scripts from abs, downloaded push.c, modified source.h to trigger push, and when I try to build it, I get
==> Validating source files with md5sums...
dwm-5.8.2.tar.gz ... Passed
config.h ... FAILED
dwm.desktop ... Passed
==> ERROR: One or more files did not pass the validity check!
How do I implement this patch?
Thanks.
Last edited by chapatt (2011-02-20 17:59:02)

Meyithi wrote:
See below PKGBUILD for example of adding patch.
# $Id: PKGBUILD 18861 2010-06-16 09:09:52Z spupykin $
Are you sure that this works?
When I tried this, the patched config.h got overwritten by the one that comes with the abs.
This Version Worked for me
# $Id: PKGBUILD 18861 2010-06-16 09:09:52Z spupykin $
# Maintainer: Sergej Pupykin <[email protected]>
# Contributor: Dag Odenhall <[email protected]>
# Contributor: Grigorios Bouzakis <[email protected]>
pkgname=dwm
pkgver=5.8.2
pkgrel=2
pkgdesc="A dynamic window manager for X"
url="http://dwm.suckless.org"
arch=('i686' 'x86_64')
license=('MIT')
options=(zipman)
depends=('libx11' 'libxinerama')
install=dwm.install
source=(http://dl.suckless.org/dwm/dwm-$pkgver.tar.gz \
config.h
dwm.desktop
dwm-5.9-uselessgap.diff)
build() {
cd $srcdir/$pkgname-$pkgver
cp $srcdir/config.h config.def.h
patch -Np1 -i ../dwm-5.9-uselessgap.diff || return 1
sed -i 's/CPPFLAGS =/CPPFLAGS +=/g' config.mk
sed -i 's/CFLAGS =/CFLAGS +=/g' config.mk
sed -i 's/LDFLAGS =/LDFLAGS +=/g' config.mk
make X11INC=/usr/include/X11 X11LIB=/usr/lib/X11 || return 1
make PREFIX=/usr DESTDIR=$pkgdir install || return 1
install -m644 -D LICENSE $pkgdir/usr/share/licenses/$pkgname/LICENSE && \
install -m644 -D README $pkgdir/usr/share/doc/$pkgname/README && \
install -m644 -D $srcdir/dwm.desktop $pkgdir//etc/X11/sessions/dwm.desktop
md5sums=('f0b422bfeaa812d66c6dd15c3cc92a6b'
'b2e7ebdeb77ecb075ae67400f70d70b6'
'939f403a71b6e85261d09fc3412269ee'
'bf8bf3ed1edc0a72ab77135b73a0c8cc')

Adding patches to an offline .WIM file

Hi guys
I am trying to update my companies Windows Server 2008 R2 x64 install.wim file with some patches I have downloaded from the Microsoft Catalogue.
So a little background, I have taken the install.wim file from the sources directory of our server image which is saved on our deployment server, and I have copied it locally to my PC. I am a domain admin and I am also a local admin on my PC.
I downloaded the latest ADK and ran the Deployment and Imaging Tools Environment tool as an administrator. I mounted the install.wim file to a mount folder with no problems.
When I try to inject a single patch using this command line DISM /image: <mount_directory> /Add-Package /Packagepath: <msu_file> (obviously replacing mount_directory and msu_file with the correct paths) I get the below error.
Image version: 6.17600.16385Processing 1 of 1 – adding package…………(package path details ect)
99.5%
An error occurred applying the Unattend.xml file from the .msu package.
For more information, review the log file.
Error: 0x80070005
Error: 5
Access is denied.
Edited copy of the log file:
2014-11-13 11:02:46, Error                 DISM   DISM Package Manager: PID=9880 Failed processing package changes - CDISMPackageManager::ProcessChanges(hr:0x80070005)
2014-11-13 11:02:46, Error                 DISM   DISM Package Manager: PID=9880 Failed to process package changes in unattend file. - CPackageManagerUnattendHandler::Apply(hr:0x80070005)
2014-11-13 11:02:46, Error                 DISM   DISM Package Manager: PID=9880 Failed to Apply the unattend. - CDISMPackageManager::Apply(hr:0x80070005)
2014-11-13 11:02:46, Error                 DISM   DISM Unattend Manager: PID=9880 d:\w7rtm\base\ntsetup\opktools\dism\providers\unattendprovider\dll\unattendmanager.cpp:400 - CUnattendManager::Apply(hr:0x80070005)
2014-11-13 11:02:46, Error                 DISM   DISM Package Manager: PID=9880 Failed applying the unattend file from the MSU package. - CMsuPackage::ApplyMsuUnattend(hr:0x80070005)
2014-11-13 11:02:46, Error                 DISM   DISM Package Manager: PID=9880 Failed to apply the MSU unattend file to the image. - CMsuPackage::Install(hr:0x80070005)
When looking at the Security tab under properties of the mount folder I can see that the account CREATOR OWNER has no permissions. When I tried to give it full control I get access is denied on the following folders:
C:\mount\program files
C:\mount\program files (x86)
C:\mount\windows
If I check the permissions for my account name, it does have full control of the mount folder.
I am wondering if anyone can help me get rid of this error?
Or even better still as I have 63 patches to inject into this .wim file, can anyone suggest an easier way, as I wouldn’t like to sit here all day doing one patch at a time?
Thanks in advance.
Dave

Hi David Smale,
From your current description and base on my experience, it usually caused by the WIM file corrupt, please try to copy a new Wim file then try to patch again, if it not work,
please post your DISM error log, you can refer the following KB to get the DISM log.
This error also can caused by the Mcafee AV.
DISM.exe generates an Error: 5 or Access Denied when VSE 8.8 Access Protection is enabled
https://kc.mcafee.com/corporate/index?page=content&id=KB76867&locale=zh_CN
I’m glad to be of help to you!
*** This response contains a reference to a third party World Wide Web site. Microsoft is providing this information as a convenience to you. Microsoft does not control
these sites and has not tested any software or information found on these sites; therefore, Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. There are inherent dangers in the
use of any software found on the Internet, and Microsoft cautions you to make sure that you completely understand the risk before retrieving any software from the Internet. ***
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Adding patch jar file while starting Managed Server through Node Manager

Hi,
I am using Weblogic Express 10.0 on Linux env, Jrockit JVM.
I have a patch jar file from BEA, I added it to Weblogic start script, when I start the Managed server by using startManagedWeblogic.sh script, I can see that patch jar file is added to classpath when I grep for Java process.(ps -ef | grep -i java).
But when I start the Managed server through NodeManager and grep for java process, I dont see the patch jar file added to classpath of Managed server process which is started.
Can someone let me know if I have to add the patch jar file somewhere else along with Weblogic start script if starting Managed server through Node Manager?
Weblogic Consultant

Thanks for your response.
I found another way to do this.
Edit nodemanager.properties file and set StartScriptEnabled=true (By default it is false), and then restart the Node Manager process.
Enabling this setting to true will enable the NodeManager process to use startManagedWeblogic.sh script while starting the managed server, all the added jar files, memory settings will be taken from start script of Weblogic
Weblogic Consultant

Expdp has errors after adding patches set?

Hi there,
After adding Oracle patches set and upgrade the database from 10.2.01 to 10.2.0.3, we got the following errors:
UDE-00008: operation generated ORACLE error 31626
ORA-31626: job does not exist
ORA-06512: at "SYS.DBMS_SYS_ERROR", line 79
ORA-06512: at "SYS.DBMS_DATAPUMP", line 2747
ORA-39086: cannot retrieve job information
ORA-06512: at "SYS.DBMS_SYS_ERROR", line 79
ORA-06512: at "SYS.KUPV$FT_INT", line 1489
ORA-12805: parallel query server died unexpectedly
ORA-06512: at "SYS.DBMS_DATAPUMP", line 3712
ORA-06512: at line 1
Notes: expdp used to work in version 10.2.0.1.
now it has errors above in version 10.2.0.3
What should we do to fix it?
Thanks,

Check this metalink note:
EXPDP CLIENT GETS UDE-00008 ORA-31626 ORA-39086
Doc ID: NOTE:549781.1
Despite of the error stack, expdp may be run successfully.
Werner

Error While adding patches

Hi,
i am trying to add an lppatch to my servers. but eventhough the initial showrev -p does not show the patch installed the patchadd command is failing with the following error.
Checking installed patches...
Verifying sufficient filesystem capacity (dry run method)...
Installing patch packages...
Pkgadd failed. See /var/tmp/109320-16.log.1415 for details
Removing partially installed patch
Checking installed patches...
Patch 109320-16 was installed without backing up the original files.
It cannot be backed out.
Patchrm is terminating.
Failed to remove partially installed patch.
Patchadd is terminating.
The showrev -p after this shows a few of the packages from the patch installed but not all
Please provide a solution for this

Issue Solved..
This error was due to corrupted patches. Dunno how it happened.... Dowloaded a new set and it worked...
Thanks anyway...

Adding patch to kernel

Hi, someone can explane me how to add patch to kernel for a my own personal kernel?
Thanks a lot,
Riccardo

Edit: k i'm compiling my kernel but i see some warning like this:
arch/i386/kernel/apm.c: In function 'suspend':
arch/i386/kernel/apm.c:1192: warning: 'pm_send_all' is deprecated (declared at include/linux/pm_legacy.h:20)
arch/i386/kernel/apm.c:1227: warning: 'pm_send_all' is deprecated (declared at include/linux/pm_legacy.h:20)
arch/i386/kernel/apm.c: In function 'check_events':
arch/i386/kernel/apm.c:1340: warning: 'pm_send_all' is deprecated (declared at include/linux/pm_legacy.h:20)
it's a problem?
Last edited by Bola (2007-10-26 16:10:28)

MB.ACT light OFF --- after Solaris 9 recommended patch cluster applied

After applying the recommended patch cluster to several SunFire V210s/V240s the "system ready" or "activity" light on the front panel no longer illuminates. The systems come up fine and are fully functional, just no light.
While this has absolutely no impact on usability it is a bit disconcerting for the folks in the server room when glancing at the rack and not seeing the typical green light.
I first noticed the problem in mid 2007 and have tried patch clusters as recent as last month, but the light remains out.
One interesting discovery is that if I reset (hard) the ALOM module the light comes back on. However, if the system is subsequently rebooted for any reason the light does not come back on...
If anyone can shed some light on the issue I would greatly appreciate it!
-Sap

continued.
I removed patch 138217-01 (svccfg & svcprop patch) and re-applied it.
Then, after booting into S-mode, I tried to continue with the broken patch 139555-08 (kernel).
It ends with
! root@jumpstart:/var/spool/patch # patchadd 139555-08
Validating patches...
Loading patches installed on the system...
Done!
Loading patches requested to install.
Preparing checklist for non-global zone check...
Checking non-global zones...
This patch passes the non-global zone check.
139555-08
Summary for zones:
Zone oem
Rejected patches:
None.
Patches that passed the dependency check:
139555-08
Patching global zone
Adding patches...
Checking installed patches...
Executing prepatch script...
Installing patch packages...
Pkgadd failed. See /var/tmp/139555-08.log.21103 for details
Patchadd is terminating.
! root@jumpstart:/var/spool/patch #the logfile shows
! root@jumpstart:/var/spool/patch # vi /var/tmp/139555-08.log.21103
Dryrun complete.
No changes were made to the system.
This appears to be an attempt to install the same architecture and
version of a package which is already installed. This installation
will attempt to overwrite this package.
pkgadd: ERROR: couldn't lock in /var/run/.patchSafeMode/root/var/sadm/install (s
erver running?): Resource temporarily unavailable
Installation of <SUNWarc> failed (internal error).
No changes were made to the system.Help!
-- Nick

SAP Bundle Patches VS Orclaes CPU Patches

Fellow admins
Sorry I am new to these Oracle CPU patches what is the difference between SAP Bundle and Oracle Patches besides Oracle CPU's are for Native ORacle systems and the Bundle patches have fixes related to SAP's interaction with Oracle? Is there any other things I should be concerned with?
Thanks
Mike

Hello Mike,
An SBP contains the following:
    o The current Patch Set Update (PSU).
    o SAP-specific single patches and merge patches that are required but not contained in the PSU.
    o Generic patches that are not contained in the PSU.
    o The current SAP-specific optimizer merge patch.
    o README.html: Installation description for the SBP.
    o bugs_fixed.html: List of patches included.
SBPs are cumulative; that is, the next SBP contains all patches of its predecessor plus the newly-added patches.
You can find further information on note [1137346|https://service.sap.com/sap/support/notes/1137346].
Regards,
Eduardo Rezende

Patching and backup process advice

Hello all ,
I have solaris 8 and I had a few questions about patching and backup.
1. Monthly I download the Sun 'Recommended and Security patchset", I then unzip and run patch_add.
When I review the terminal output while this is running I get quite a few :"unable to install patch exit code 8".
Should I be getting this?
Is there another way of applying patches(other than individually)?
2. What are good backup practices? Copy /etc and /var directories to a raid? Or is there a Sun tool for backups?
Thanks for any advice!

I believe this is a list of exit codes for patches. You'll most likely see a lot of return code 8 and 2. Not typically an issue.
# Exit Codes:
# 0 No error
# 1 Usage error
# 2 Attempt to apply a patch that's already been applied
# 3 Effective UID is not root
# 4 Attempt to save original files failed
# 5 pkgadd failed
# 6 Patch is obsoleted
# 7 Invalid package directory
# 8 Attempting to patch a package that is not installed
# 9 Cannot access /usr/sbin/pkgadd (client problem)
# 10 Package validation errors
# 11 Error adding patch to root template
# 12 Patch script terminated due to signal
# 13 Symbolic link included in patch
# 14 NOT USED
# 15 The prepatch script had a return code other than 0.
# 16 The postpatch script had a return code other than 0.
# 17 Mismatch of the -d option between a previous patch
# install and the current one.
# 18 Not enough space in the file systems that are targets
# of the patch.
# 19 $SOFTINFO/INST_RELEASE file not found
# 20 A direct instance patch was required but not found
# 21 The required patches have not been installed on the manager
# 22 A progressive instance patch was required but not found
# 23 A restricted patch is already applied to the package
# 24 An incompatible patch is applied
# 25 A required patch is not applied
# 26 The user specified backout data can't be found
# 27 The relative directory supplied can't be found
# 28 A pkginfo file is corrupt or missing
# 29 Bad patch ID format
# 30 Dryrun failure(s)
# 31 Path given for -C option is invalid
# 32 Must be running Solaris 2.6 or greater
# 33 Bad formatted patch file or patch file not found
# 34 The appropriate kernel jumbo patch needs to be installed
Back up your system before adding any patches (ufsdump). It's recommended that these patches are added in run level one.
There should be a script called something like "install_cluster" command in the 8_Recommended directory that you can use to add the patches.
By default the patches create backout info in /var, but I usually disable this (yeah, livin' on the edge) with the "-nosave" option.

Sun Update Connection install fails on Patch 119574-02

Just finished installing Solaris 10 (3/05) on my brand new Sun Blade 1500. I then downloaded the latest version of Sun Update Connection, but the installer fails as follows:
# ./installUpdateConnection
Adding patch 119574-02
Validating patches...
Loading patches installed on the system...
Done!
Loading patches requested to install.
Done!
Checking patches that you specified for installation.
Done!
Approved patches will be installed in this order:
119574-02
Checking installed patches...
Verifying sufficient filesystem capacity (dry run method)...
Patch 119574-02 failed to install due to a failure produced by pkgadd.
See /var/sadm/patch/119574-02/log for details
Patchadd is terminating.The above log file reads as follow:
# cat /var/sadm/patch/119574-02/log
This appears to be an attempt to install the same architecture and
version of a package which is already installed. This installation
will attempt to overwrite this package.
/export/home/richard.cross/updateConnection/patches/119574-02/SUNWcsu/install/checkinstall: /export/home/richard.cross/updateConnection/patches/119574-02/SUNWcsu/install/checkinstall: cannot open
pkgadd: ERROR: checkinstall script did not complete successfully
Dryrun complete.
No changes were made to the system.Where have I gone wrong? I haven't done anything to my system between installing Solaris 10 and downloading SUC, so why is it complaining about an existing patch?

Solved it. Solution is to move all of the patches into /var/spool/pkg and run patchadd on each one in there (in the right order).

How to check the previous loaded SAP GUI patch number

Hi
now I am installing patch#24 SAP GUI ,now where to check the previous added patches,where I need to check, please mail the path

Yes, Rolf is right.
For every patch run there is a sapsetup<n>.log.
Look at the file timestamp for the sequence.
But what you see is a very indirect clue what you have installed.
You see a very verbose installation protocol which is obviously targeted to developers of SAPGUI to troubleshoot installation issues...
What they forgot to trace is the name of the patch file...
The clues for the versions involved are texts like
File version of source file is: 6405.5.24.1016
File version of target file is: 6405.5.23.1016
In this case I have updated 6.40 GUI Patch 23 to Patch 24
HTH, Rudi

10/22/09 SUN Alert Patch Cluster

I just applied the 10/22/09 SUN Alert Patch Cluster, and only 16 of the 176 patches were applied. Is this reasonable? I've been applying the most recent Alert patch cluster every three months for about 1-1/2 years.

continued.
I removed patch 138217-01 (svccfg & svcprop patch) and re-applied it.
Then, after booting into S-mode, I tried to continue with the broken patch 139555-08 (kernel).
It ends with
! root@jumpstart:/var/spool/patch # patchadd 139555-08
Validating patches...
Loading patches installed on the system...
Done!
Loading patches requested to install.
Preparing checklist for non-global zone check...
Checking non-global zones...
This patch passes the non-global zone check.
139555-08
Summary for zones:
Zone oem
Rejected patches:
None.
Patches that passed the dependency check:
139555-08
Patching global zone
Adding patches...
Checking installed patches...
Executing prepatch script...
Installing patch packages...
Pkgadd failed. See /var/tmp/139555-08.log.21103 for details
Patchadd is terminating.
! root@jumpstart:/var/spool/patch #the logfile shows
! root@jumpstart:/var/spool/patch # vi /var/tmp/139555-08.log.21103
Dryrun complete.
No changes were made to the system.
This appears to be an attempt to install the same architecture and
version of a package which is already installed. This installation
will attempt to overwrite this package.
pkgadd: ERROR: couldn't lock in /var/run/.patchSafeMode/root/var/sadm/install (s
erver running?): Resource temporarily unavailable
Installation of <SUNWarc> failed (internal error).
No changes were made to the system.Help!
-- Nick

Easiest way to get patches

A couple of years ago we started using Solaris 11/06. We were able to fairly easily setup smpatch and perform the patches. For a while it worked beautifully.
Now, everytime we setup a new server, the patching seems to be harder to implement. Right now I am again unable to get patches via smpatch, and I quite honestly frustrated beyond belief. I can't even register the system at this point, and I'm using credentials that are being used by our other systems that do manage to work correctly.
I've spent hours manually adding patches and packages, restarting different services, trying to register with sconadm again and again, logging in to sunsolve.sun.com to approve a new agreement with oracle, checking java versions, checking to make sure different packages are installed, only to have it fail again, this time with a more obscure message. I tried pca. It won't download anything. Everything comes back 403. I again checked the credentials. They still match other servers currently able to receive patches.
What is the easiest way to get patches to a Solaris 10 11/06 server without having to spend hours manually resolving dependencies (which I thought smpatch was supposed to solve but doesn't appear to work reliably).
I just need something I can run that will figure out what is on the server, what it needs, and then download and install them.

Boingo wrote:
I tried pca. It won't download anything. Everything comes back 403. I again checked the credentials. They still match other servers currently able to receive patches.403 means that SunSolve thinks that your Sun Online Account is not connected to a support contract (which is required to download any patch after a recent change in Oracle's patch policy for Solaris). It has happened in the past that SunSolve "forgets" about connected contracts, but I've never received a report that pca works on one system and returns 403's on another when the same SOA is used.
Anyway - this isn't the forum for PCA, I recommend subscribing to its mailing list if you want follow this route further.
Martin.

CE interface and IP exclusive recent patches cause more damage?

recently configured a v490 with 2 zones one with shared ip and one with exclusive ip using CE interface by adding patches (118777-12 & 137042-01)
after adding the last patch 137042-01 all zones even global became degraded and seem to be dragging to a halt it is weird anyone else run it this ?

I've experienced a slow down on our v440 using Solaris 10 08/07 after installing these patches. However, I've only seen it on the internal copper ethernet ports ce0 and ce1. I've not been able to test if the same occurs on fibre cards. Have you found a solution?

Adding Patches

Similar Messages

Maybe you are looking for