ZCM Patches Help

I am having a few issues with our patch management system and I am hoping to find some help here. First issue we are running into is that the patchlink collection folders on our zcm servers keep getting backed up with hundreds of <guid>.tmp files. I found the following document: 7008309 to help with this, but it continues to be an issue. The other issue is that we are not getting MS patches quickly. For example, there were 4 MS patches released on July 13, 2011 and they are not showing up in our patch management system anywhere. Patch management is showing that the service is running and that it downloaded patches on July 18th. We have a valid license and the subscription service history shows completed patch downloads. One strange thing, there is not a Signature Download or Last Signature Download Time. Anyways, any help would be greatly appreciated. Thanks.
-Nate

Thanks for the TID. That is helpful knowledge. And Yes, the "missing" patches from MS are security issues. Here is a link to the exact patches I'm looking for: Microsoft Security Bulletin Summary for July 2011 The patches are listed in the Executive Summary. Thanks for your help.

Similar Messages

  • Features in Patch 6.4 missing from ZCM Patch MGMT 11.2.1.0

    We are migrating from Novell ZENworks Patch Mgmt v. 6.4.2.1592 to the ZCM v. 11.2.1.0 patching service. I've noticed that there are are few features in the Patch mgmt 6.4 that I don't see in ZCM 11.2.1.0 and want to see if I'm just missing them somehow. I've looked throught the zen11_pm_administration manual and could not find any info on the following:
    1) In Patch 6.4 when looking at the vulnerabilities/patches, you could filter by a specific OS in that it would only show patches (for example) for Windows 7 32bit workstations...and those patch results would only display "patched" or "not patched" numbers for that specific OS. In ZCM 11.2 patch mgmt...it appears that it can only filter by Platform: Windows, Vendor: Microsoft. With this filtering it mixes all the XP, Windows 7 32bit, Windows 7 64 bit, and Windows server patches all together. In the patch name field I can put "Windows 7" but it display 32 and 64 bit as well as patches for servers and includes servers in the numbers for "patched vs not patched". I would like to be able to filter the patches to show for example only patches for Windows 7 64bit workstations and have it reflect the workstations with only Windows 7 64 bit as it does in Patch 6.4. We have ZCM servers in our system but are using a different method to patch them. Basically, I currently have to wade throught the patches for Windows 7 (for example)..select the ones I want..and if that patch also is for Server 2008...I have to make sure that after the deployment creation is completed to remove the servers from the deployment. It would be much easier and efficient to be able to filter out the patches for a specific OS and apply those patches to only that specific OS workstations. Any ideas if this is possible under ZCM 11.2.1.0 patching?
    2) In Patch 6.4 you could configure a policy for snooze and reboot options. Then when completing the deployment wizard...you could select "Use policies" for these options. Is there a place to configure these presets in ZCM 11.2.1.0 or does one have to manually change them every time a deployment is created?
    3)Once a deployment is set to a group of test workstations, in Patch 6.4 I could export the list of worksations in the test deployment to send to the helpdesk in case they received any calls. Is there an option to do this in ZCM? There doesnt seem to be one.
    Any info or feedback would be greatly appreciated.
    Thank you,

    Michaelstump,
    is there a reason you posted in the ZCM *10* patch management forum? At
    this time, I agree, some things are better with ZCM patch management,
    some things are not...
    Shaun Pond

  • ZCM Patch Management Patch Status Inaccuracies

    We currently have issues with ZCM Patch Management incorrectly reporting the status of a couple of Microsoft updates. Specifically, we have firm evidence of this for the following patches (but suspect there may be more):
    Microsoft Office 2007 SP3 - Microsoft Baseline Security Analyzer shows it as required, ZCM says its already applied.
    MS11-049 InfoPatch 2007 - Microsoft Baseline Security Analyzer shows it as required, ZCM says it's not applicable.
    We are checking the ZCM status in both the {guid}.state file on the device (which has today's date stamp) and in ZCC - both of these places show the same, incorrect, status.
    We see this issue on multiple managed devices. The zone is 10.3.3. Devices have 10.3.3 with Patch Management Agent Update 2.
    This isn't a timing issue, as we have left things several days before checking the status again.
    I am raising a call with our Novell reseller, but am interested to find out if anyone else is seeing similar issues.
    Thanks,
    Martin

    metheridge,
    It appears that in the past few days you have not received a response to your
    posting. That concerns us, and has triggered this automated reply.
    Has your problem been resolved? If not, you might try one of the following options:
    - Visit http://support.novell.com and search the knowledgebase and/or check all
    the other self support options and support programs available.
    - You could also try posting your message again. Make sure it is posted in the
    correct newsgroup. (http://forums.novell.com)
    Be sure to read the forum FAQ about what to expect in the way of responses:
    http://forums.novell.com/faq.php
    If this is a reply to a duplicate posting, please ignore and accept our apologies
    and rest assured we will issue a stern reprimand to our posting bot.
    Good luck!
    Your Novell Product Support Forums Team
    http://forums.novell.com/

  • Are patches for the adobe suites included in ZCM patch managment?

    I see all the acrobat reader updates, but no updates for Acrobat pro or the
    other components of the creative suites.
    Are these included in patch managment or do we still hve to rely on the
    Adobe update system?

    Originally Posted by spond
    Kevin,
    > So I wonder then if the ZPM in ZCM still uses
    > fingerprinting for its bundles.
    >
    yes it does, the logic's still the same, deep-down, it's just that at
    the moment, there doesn't seem to be enough of a business case to
    recode the PDK for the ZCM-style architecture. For those of us still
    running standalone ZPM, the PDK still works, and since the patch logic
    is the same, i can use it to see what's in the ZCM patches...
    Shaun Pond
    thanks Shaun. Makes me feel better.
    I'll submit an RMS request for the Adobe products. Given that Adobe now surpassed MS in terms of vulnerabilities I think it's a poor decision on Novell's part to NOT patch the "paid for" Adobe stuff like Acrobat Standard, Pro, etc.
    Especially when Adobe 9 incorporated Flash and "Acrobat" together.

  • 10.2.0.3 Patch Help....

    Hi Techies,
    We have installed Oracle 10.2.0.1 and upgraded it to 10.2.0.3. Now for an application installation I have to install 6038241 patch for Oracle 10.2.0.3. When i check the readme notes of it that says that I have to upgrade the timezone to version 4. Now my questions are
    1. Currently there is just a database which is created along with installation with no data on it. So is it necessary to update the same.
    2. When i am trying to update the timezone using opatch it gives me an error opatch version obsolete...
    Please help me through this....
    -Pramod

    >> 1. Currently there is just a database which is created along with installation with no data on it. So is it necessary to update the same.
    If you mean, you have selected the starter database (which has no data) while installing Oracle 10.2.0.1 software, and after upgrading the Oracle Software from 10.2.0.1 to 10.2.0.3.
    Normally, after applying the 10.2.0.3 patch you will have to upgrade your database as well. But in your case, your database has no data. So, you can drop your old database and create a new database after 10.2.0.3 patch applied.
    >> 2. When i am trying to update the timezone using opatch it gives me an error opatch version obsolete...
    You have to have the latest compatible and latest opatch utility on your server. Fore more information on this take a look at the below Oracle Metalink Note.
    Note:602334.1 - Opatch Not Working, Reporting That It Is Obsolete
    Regards,
    Sabdar Syed.

  • Annoying ZCM Patch Module error

    Device Alias: ******* winxp-pro-sp3-x86
    Device IP Address: 192.168.102.248
    Error: [4/6/11 1:24:39 PM] Patch Module Duplicate name found in Anayze
    File: Adobe APSB11-06 Acrobat Professional Extended 9.4.3 for Windows
    (Update) (Multi-Language) (See Notes)
    Is there a point this error message should stop appearing? I've been
    getting them continuously since the morning of the 4th.
    JB

    We are getting them too on more than one ZCM zone. Looks like a flaky patch. I have disabled this patch for now to see if it stops the annoying messages.

  • Sort Dumps All Over in DEV and QAS While Applying Patches - Help Pls

    Applying about 80 patches on DEV and QAS over the weekend with the "Minimize Downtime" option. I got failure at the "TEST_IMPORT" phase and tried to backout and ignore the error but now I keep getting short dumps for any tcode that I use. I can't get past short dumps.
    Here is a sample of short dump that I got when I try to execute SPAM and reapply just one patch. I does not load the patch, it just generates a short dump. I opened an OSS note with SAP and they refused to consider that as high priority. Since my DEV and QAS systems are down, the developers will not have any system to work on today and there will be a lot pressure on me today. Please help.
    Short Dump text below                                                                        
    The following syntax error occurred in the program SAPLKKBL :           
    "The field "GFLG_NESTED_PRINT_ON" is unknown, but there is a field with"
    Error in ABAP application program.                                                                               
    The current ABAP program "CL_GUI_ALV_GRID===============CP" had to be   
    terminated because one of the                                          
    statements could not be executed.                                                                               
    This is probably due to an error in the ABAP program.                                                                               
    What can you do?                                                                               
    Please eliminate the error by performing a syntax check                 
    (or an extended program check) on the program "SAPLKKBL ".              
    You can also perform the syntax check from the ABAP/4 Editor.           
    If the problem persists, proceed as follows:                            
    Print out the error message (using the "Print" function)                
    and make a note of the actions and input that caused the                
    error.                                                                               
    To resolve the problem, contact your SAP system administrator.          
    You can use transaction ST22 (ABAP Dump Analysis) to view and administer
    termination messages, especially those beyond their normal deletion

    Hi
    Please check the following link, it may help you:
    Re: Can not lanche workflow with event
    Can you give me some more details like whether the patch application is complete or its hung in between? Did u tried to restart the patch application? Can you tell me what error you got while patch application in import_proper phase?
    Regards
    Sumit

  • ZCM Patch Management Dashboard blank

    I'm using ZCM 10.2 RC1 and am trying to test Patch Management. I have patch management working, patches have downloaded and DAU is running. One thing that is not working is the dashboard. I have flash installed but the dashboard is blank. Are there any special requirements for the dashboard? Has anyone else got it working?
    BTW, I'm running ZCM under Windows Server 2003 Standard x64 SP2.
    Jim Webb

    Originally Posted by jwebb
    I'm using ZCM 10.2 RC1 and am trying to test Patch Management. I have patch management working, patches have downloaded and DAU is running. One thing that is not working is the dashboard. I have flash installed but the dashboard is blank. Are there any special requirements for the dashboard? Has anyone else got it working?
    BTW, I'm running ZCM under Windows Server 2003 Standard x64 SP2.
    Jim Webb
    Which browser are you running? There is a known bug affecting IE...

  • PSU Finding the correct patches help

    I'm confused on what patches I need to apply.  I can easily find the WLS PSU patch (19182814), and have patched that before without issues. 
    This is what my opatch is telling me I have installed on one server running the web tier:
    Oracle WebTier and Utilities CD                                 
    11.1.1.7.0
    Are these the correct patches to apply: 18603707  18423801 18603703 17664563 18423831?   If so, why are there no patches for October 2014?  Is 11.1.1.7 out of support, or was there just no new patches?
    This is what opatch is telling me I have for a server running Forms and Reports:
    Oracle Portal, Forms, Reports and Discoverer 11g Patchset       
    11.1.1.7.0
    This one I'm not sure, I can't seem to find anything, so is this one out of support?
    Any help would be greatly appreciated, thank you!

    Hello Prakash,
    Thanks for your response.  I have looked at that document.  I am beyond confused.  Am I basically supposed to go through that section (Table 87 Patch Availability for Oracle Fusion Middleware 11.1.1.7), and download any and all patches for Oracle Portal, Forms, Reports and Discoverer 11.1.1.7.0 home or Oracle Web Tier 11.1.1.7.0 home? - If this is correct then all these need to be applied to both my WebTier and Forms and Reports homes:Patch 17337741 Patch 17306880 Patch 17664563  Patch 17617649 Patch 18423801 Patch 19591065
    I got the above patches in my first question from the MOS patches Recommended Patch Advisor by selecting:
    Product: Oracle HTTP Server
    Release: 11.1.1.7.0
    And our platform
    Does the recommended patch advisor not work the way I thought it does?  Also I'm assuming that these are like the DB SPU/PSU patches and that they are accumulative?  OR do I need to go back and apply any and all previous security patches?
    Thank you!

  • No audio hiccups in wine patch help

    I'm trying to implement this patch: http://wiki.winehq.org/Implement_SetThreadPriority by Mike Hearn which will enable wine to work without all the nasty audio glitches when using alsa. However hunk 1 fails on configure.ac as the patch hasn't been updated to any new wine version. Apart from that it seems to work fine.
    Can anyone help me get this baby compiled as i want to play my games without the nasty audio glitches and don't care if i have to be root

    That was a simple fix... I didn't compile it all the way but it should be fine with this rediffed patch for wine 0.9.25.  I'm not sure if this will help or are you saying you haven't even tried compiling it yet?
    Here is the patch.
    Hope that helps you.
    ~jnengland77

  • I Got iPhone 5 BLACK 25 Dayz ago and now the color of its side body is getting fade and started turning into silver PATCHES. help me out

    i m From India.
    i Got iPhone 5 BLACK 25 Dayz ago and now i saw That Suddenly the color of its side body is getting fade and started Leaving SILVER PATCHES.
    i'm Scared Of It
    please help me out

    Put it in a case or stop being so rough on the device.

  • Need to either downgrade X or downgrade video drivers, patching help

    Hi,
    I'm using a matrox g450 which worked in the older version of X server..1.4. Is there a way to downgrade back to this version of X or the drivers.
    I see this on an ubuntu bug list https://bugs.launchpad.net/xorg-server/+bug/292214
    but I can't seem to figure out how to apply the patches there. help, please!

    If you're looking for xorg-server 1.4 you'll need much older packages, since the switch occurred a while back. You might try just downgrading xorg-server, but I would be surprised if you'll have to do the same for most of the packages in xorg to get it to work.

  • Software synth patch help

    Does anyone have a simple way of getting a good "falling pitch" analog sound using the software synths included with Logic Studio 9?
    I am starting to do a lot more project studio work and programming of cover songs, and although it's hard to relay the sound I'm looking for in words, the best examples for the sound I am looking to create is audible in No Doubt's Hella Good & more recently in Kesha's Tik Tok. For lack of better reference, it's reminiscent of a "cartoon space gun" where the pitch drops off at an adjustable rate.
    Any suggestions, help, advice, etc would be greatly appreciated.
    Thanks!

    Basically, you just want a pitch envelope to make the pitch do what you want on the attack, decay or release.
    The ES synths have routable envelopes, so you can route any of them to pitch and do what you want.

  • Did the new patch help you? Yes or

    I was really hoping to post on here that this patch fixed my issue... but alas it has not.
    I tested it by not going into my bios, on first reboot I went to a ytmnd site and the streaming music drove my soundcard nuts (crackling) till firefox crashed, and the sound started cycling... until windows finally forced firefox closed.
    Now, I was wondering if CL or anyone else has any clue why me entering bios during startup would fix my issue for that one startup? Do these soundcards not have enough time during bootup to sync correctly or something?

    No. The patch still didn't address Windows' recognition problems with it. Windows 64 still won't recognize the X-FI even with the drivers. The worst thing is, it ran flawlessly way back before they drivers expired..Message Edited by Chasgn on 07-3-2006 2:38 PM

  • Patching help

    I just installed Solaris 10 1/06 GA on a new PC. I ran Update Manager and it applied a bunch of patches. It still shows four patches in my "Available Updates" tab. Three of these it says will be installed at the next restart but they never are. I reboot and they're still in the "Available Updates" list. The fourth is a kernel patch, 118844-28. This says I need to install it manually.
    If I go to the directory where the patch was downloaded, /var/sadm/spool and type 'patchadd 118844-28,' I get:
    <div class="pre"><pre>Validating patches...
    Loading patches installed on the system...
    Done!
    Loading patches requested to install.
    Cannot locate 118844-28 to install.</pre></div>
    OK. If I try 'patchadd ./118844-28.jar' I get:
    <div class="pre"><pre>Validating patches...
    Loading patches installed on the system...
    Done!
    Loading patches requested to install.
    Cannot open pkginfo file /var/sadm/spool//cache/pkginfo
    Cannot open pkginfo file /var/sadm/spool//patchproSequester/pkginfo
    Cannot open pkginfo file /var/sadm/spool//cache/pkginfo
    Cannot open pkginfo file /var/sadm/spool//patchproSequester/pkginfo
    Cannot open directory /var/sadm/spool/.
    Cannot open directory /var/sadm/spool/.
    Cannot open directory /var/sadm/spool/.
    Packages from patch are not installed on the system.
    Packages from patch are not installed on the system.
    Packages from patch are not installed on the system.
    No patches to check dependency.
    </pre></div>
    What am I doing wrong? Why won't the first three patches (119716-10, 119375-13, 113000-07) install when I reboot and why won't patchadd install 118844-28?
    Thanks.

    I've fixed half of my problem. Upon reading the manual (imagine that!), I discovered this passage:
    <table border="0" align="center" width="90%" cellpadding="3" cellspacing="1"><tr><td class="SmallText"><b>Quote:</b></td></tr><tr><td class="quote">
    If an update you install requires a system reboot to activate it, the update is staged for installation at the next system shutdown. You must use one of the following commands to initiate the system shutdown:
    </td></tr></table>
    I wasn't using one of those commands. When I did, the three patches installed on the next boot. Now, I only have the kernel patch remaining in my "Available Updates" tab. I still can't get that one to install. Any hints?

Maybe you are looking for