ZCM Patches Help
I am having a few issues with our patch management system and I am hoping to find some help here. First issue we are running into is that the patchlink collection folders on our zcm servers keep getting backed up with hundreds of <guid>.tmp files. I found the following document: 7008309 to help with this, but it continues to be an issue. The other issue is that we are not getting MS patches quickly. For example, there were 4 MS patches released on July 13, 2011 and they are not showing up in our patch management system anywhere. Patch management is showing that the service is running and that it downloaded patches on July 18th. We have a valid license and the subscription service history shows completed patch downloads. One strange thing, there is not a Signature Download or Last Signature Download Time. Anyways, any help would be greatly appreciated. Thanks.
-Nate
Thanks for the TID. That is helpful knowledge. And Yes, the "missing" patches from MS are security issues. Here is a link to the exact patches I'm looking for: Microsoft Security Bulletin Summary for July 2011 The patches are listed in the Executive Summary. Thanks for your help.
Similar Messages
-
Features in Patch 6.4 missing from ZCM Patch MGMT 11.2.1.0
We are migrating from Novell ZENworks Patch Mgmt v. 6.4.2.1592 to the ZCM v. 11.2.1.0 patching service. I've noticed that there are are few features in the Patch mgmt 6.4 that I don't see in ZCM 11.2.1.0 and want to see if I'm just missing them somehow. I've looked throught the zen11_pm_administration manual and could not find any info on the following:
1) In Patch 6.4 when looking at the vulnerabilities/patches, you could filter by a specific OS in that it would only show patches (for example) for Windows 7 32bit workstations...and those patch results would only display "patched" or "not patched" numbers for that specific OS. In ZCM 11.2 patch mgmt...it appears that it can only filter by Platform: Windows, Vendor: Microsoft. With this filtering it mixes all the XP, Windows 7 32bit, Windows 7 64 bit, and Windows server patches all together. In the patch name field I can put "Windows 7" but it display 32 and 64 bit as well as patches for servers and includes servers in the numbers for "patched vs not patched". I would like to be able to filter the patches to show for example only patches for Windows 7 64bit workstations and have it reflect the workstations with only Windows 7 64 bit as it does in Patch 6.4. We have ZCM servers in our system but are using a different method to patch them. Basically, I currently have to wade throught the patches for Windows 7 (for example)..select the ones I want..and if that patch also is for Server 2008...I have to make sure that after the deployment creation is completed to remove the servers from the deployment. It would be much easier and efficient to be able to filter out the patches for a specific OS and apply those patches to only that specific OS workstations. Any ideas if this is possible under ZCM 11.2.1.0 patching?
2) In Patch 6.4 you could configure a policy for snooze and reboot options. Then when completing the deployment wizard...you could select "Use policies" for these options. Is there a place to configure these presets in ZCM 11.2.1.0 or does one have to manually change them every time a deployment is created?
3)Once a deployment is set to a group of test workstations, in Patch 6.4 I could export the list of worksations in the test deployment to send to the helpdesk in case they received any calls. Is there an option to do this in ZCM? There doesnt seem to be one.
Any info or feedback would be greatly appreciated.
Thank you,Michaelstump,
is there a reason you posted in the ZCM *10* patch management forum? At
this time, I agree, some things are better with ZCM patch management,
some things are not...
Shaun Pond -
ZCM Patch Management Patch Status Inaccuracies
We currently have issues with ZCM Patch Management incorrectly reporting the status of a couple of Microsoft updates. Specifically, we have firm evidence of this for the following patches (but suspect there may be more):
Microsoft Office 2007 SP3 - Microsoft Baseline Security Analyzer shows it as required, ZCM says its already applied.
MS11-049 InfoPatch 2007 - Microsoft Baseline Security Analyzer shows it as required, ZCM says it's not applicable.
We are checking the ZCM status in both the {guid}.state file on the device (which has today's date stamp) and in ZCC - both of these places show the same, incorrect, status.
We see this issue on multiple managed devices. The zone is 10.3.3. Devices have 10.3.3 with Patch Management Agent Update 2.
This isn't a timing issue, as we have left things several days before checking the status again.
I am raising a call with our Novell reseller, but am interested to find out if anyone else is seeing similar issues.
Thanks,
Martinmetheridge,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://forums.novell.com/ -
Are patches for the adobe suites included in ZCM patch managment?
I see all the acrobat reader updates, but no updates for Acrobat pro or the
other components of the creative suites.
Are these included in patch managment or do we still hve to rely on the
Adobe update system?Originally Posted by spond
Kevin,
> So I wonder then if the ZPM in ZCM still uses
> fingerprinting for its bundles.
>
yes it does, the logic's still the same, deep-down, it's just that at
the moment, there doesn't seem to be enough of a business case to
recode the PDK for the ZCM-style architecture. For those of us still
running standalone ZPM, the PDK still works, and since the patch logic
is the same, i can use it to see what's in the ZCM patches...
Shaun Pond
thanks Shaun. Makes me feel better.
I'll submit an RMS request for the Adobe products. Given that Adobe now surpassed MS in terms of vulnerabilities I think it's a poor decision on Novell's part to NOT patch the "paid for" Adobe stuff like Acrobat Standard, Pro, etc.
Especially when Adobe 9 incorporated Flash and "Acrobat" together. -
10.2.0.3 Patch Help....
Hi Techies,
We have installed Oracle 10.2.0.1 and upgraded it to 10.2.0.3. Now for an application installation I have to install 6038241 patch for Oracle 10.2.0.3. When i check the readme notes of it that says that I have to upgrade the timezone to version 4. Now my questions are
1. Currently there is just a database which is created along with installation with no data on it. So is it necessary to update the same.
2. When i am trying to update the timezone using opatch it gives me an error opatch version obsolete...
Please help me through this....
-Pramod>> 1. Currently there is just a database which is created along with installation with no data on it. So is it necessary to update the same.
If you mean, you have selected the starter database (which has no data) while installing Oracle 10.2.0.1 software, and after upgrading the Oracle Software from 10.2.0.1 to 10.2.0.3.
Normally, after applying the 10.2.0.3 patch you will have to upgrade your database as well. But in your case, your database has no data. So, you can drop your old database and create a new database after 10.2.0.3 patch applied.
>> 2. When i am trying to update the timezone using opatch it gives me an error opatch version obsolete...
You have to have the latest compatible and latest opatch utility on your server. Fore more information on this take a look at the below Oracle Metalink Note.
Note:602334.1 - Opatch Not Working, Reporting That It Is Obsolete
Regards,
Sabdar Syed. -
Annoying ZCM Patch Module error
Device Alias: ******* winxp-pro-sp3-x86
Device IP Address: 192.168.102.248
Error: [4/6/11 1:24:39 PM] Patch Module Duplicate name found in Anayze
File: Adobe APSB11-06 Acrobat Professional Extended 9.4.3 for Windows
(Update) (Multi-Language) (See Notes)
Is there a point this error message should stop appearing? I've been
getting them continuously since the morning of the 4th.
JBWe are getting them too on more than one ZCM zone. Looks like a flaky patch. I have disabled this patch for now to see if it stops the annoying messages.
-
Sort Dumps All Over in DEV and QAS While Applying Patches - Help Pls
Applying about 80 patches on DEV and QAS over the weekend with the "Minimize Downtime" option. I got failure at the "TEST_IMPORT" phase and tried to backout and ignore the error but now I keep getting short dumps for any tcode that I use. I can't get past short dumps.
Here is a sample of short dump that I got when I try to execute SPAM and reapply just one patch. I does not load the patch, it just generates a short dump. I opened an OSS note with SAP and they refused to consider that as high priority. Since my DEV and QAS systems are down, the developers will not have any system to work on today and there will be a lot pressure on me today. Please help.
Short Dump text below
The following syntax error occurred in the program SAPLKKBL :
"The field "GFLG_NESTED_PRINT_ON" is unknown, but there is a field with"
Error in ABAP application program.
The current ABAP program "CL_GUI_ALV_GRID===============CP" had to be
terminated because one of the
statements could not be executed.
This is probably due to an error in the ABAP program.
What can you do?
Please eliminate the error by performing a syntax check
(or an extended program check) on the program "SAPLKKBL ".
You can also perform the syntax check from the ABAP/4 Editor.
If the problem persists, proceed as follows:
Print out the error message (using the "Print" function)
and make a note of the actions and input that caused the
error.
To resolve the problem, contact your SAP system administrator.
You can use transaction ST22 (ABAP Dump Analysis) to view and administer
termination messages, especially those beyond their normal deletionHi
Please check the following link, it may help you:
Re: Can not lanche workflow with event
Can you give me some more details like whether the patch application is complete or its hung in between? Did u tried to restart the patch application? Can you tell me what error you got while patch application in import_proper phase?
Regards
Sumit -
ZCM Patch Management Dashboard blank
I'm using ZCM 10.2 RC1 and am trying to test Patch Management. I have patch management working, patches have downloaded and DAU is running. One thing that is not working is the dashboard. I have flash installed but the dashboard is blank. Are there any special requirements for the dashboard? Has anyone else got it working?
BTW, I'm running ZCM under Windows Server 2003 Standard x64 SP2.
Jim WebbOriginally Posted by jwebb
I'm using ZCM 10.2 RC1 and am trying to test Patch Management. I have patch management working, patches have downloaded and DAU is running. One thing that is not working is the dashboard. I have flash installed but the dashboard is blank. Are there any special requirements for the dashboard? Has anyone else got it working?
BTW, I'm running ZCM under Windows Server 2003 Standard x64 SP2.
Jim Webb
Which browser are you running? There is a known bug affecting IE... -
PSU Finding the correct patches help
I'm confused on what patches I need to apply. I can easily find the WLS PSU patch (19182814), and have patched that before without issues.
This is what my opatch is telling me I have installed on one server running the web tier:
Oracle WebTier and Utilities CD
11.1.1.7.0
Are these the correct patches to apply: 18603707 18423801 18603703 17664563 18423831? If so, why are there no patches for October 2014? Is 11.1.1.7 out of support, or was there just no new patches?
This is what opatch is telling me I have for a server running Forms and Reports:
Oracle Portal, Forms, Reports and Discoverer 11g Patchset
11.1.1.7.0
This one I'm not sure, I can't seem to find anything, so is this one out of support?
Any help would be greatly appreciated, thank you!Hello Prakash,
Thanks for your response. I have looked at that document. I am beyond confused. Am I basically supposed to go through that section (Table 87 Patch Availability for Oracle Fusion Middleware 11.1.1.7), and download any and all patches for Oracle Portal, Forms, Reports and Discoverer 11.1.1.7.0 home or Oracle Web Tier 11.1.1.7.0 home? - If this is correct then all these need to be applied to both my WebTier and Forms and Reports homes:Patch 17337741 Patch 17306880 Patch 17664563 Patch 17617649 Patch 18423801 Patch 19591065
I got the above patches in my first question from the MOS patches Recommended Patch Advisor by selecting:
Product: Oracle HTTP Server
Release: 11.1.1.7.0
And our platform
Does the recommended patch advisor not work the way I thought it does? Also I'm assuming that these are like the DB SPU/PSU patches and that they are accumulative? OR do I need to go back and apply any and all previous security patches?
Thank you! -
No audio hiccups in wine patch help
I'm trying to implement this patch: http://wiki.winehq.org/Implement_SetThreadPriority by Mike Hearn which will enable wine to work without all the nasty audio glitches when using alsa. However hunk 1 fails on configure.ac as the patch hasn't been updated to any new wine version. Apart from that it seems to work fine.
Can anyone help me get this baby compiled as i want to play my games without the nasty audio glitches and don't care if i have to be rootThat was a simple fix... I didn't compile it all the way but it should be fine with this rediffed patch for wine 0.9.25. I'm not sure if this will help or are you saying you haven't even tried compiling it yet?
Here is the patch.
Hope that helps you.
~jnengland77 -
i m From India.
i Got iPhone 5 BLACK 25 Dayz ago and now i saw That Suddenly the color of its side body is getting fade and started Leaving SILVER PATCHES.
i'm Scared Of It
please help me outPut it in a case or stop being so rough on the device.
-
Need to either downgrade X or downgrade video drivers, patching help
Hi,
I'm using a matrox g450 which worked in the older version of X server..1.4. Is there a way to downgrade back to this version of X or the drivers.
I see this on an ubuntu bug list https://bugs.launchpad.net/xorg-server/+bug/292214
but I can't seem to figure out how to apply the patches there. help, please!If you're looking for xorg-server 1.4 you'll need much older packages, since the switch occurred a while back. You might try just downgrading xorg-server, but I would be surprised if you'll have to do the same for most of the packages in xorg to get it to work.
-
Does anyone have a simple way of getting a good "falling pitch" analog sound using the software synths included with Logic Studio 9?
I am starting to do a lot more project studio work and programming of cover songs, and although it's hard to relay the sound I'm looking for in words, the best examples for the sound I am looking to create is audible in No Doubt's Hella Good & more recently in Kesha's Tik Tok. For lack of better reference, it's reminiscent of a "cartoon space gun" where the pitch drops off at an adjustable rate.
Any suggestions, help, advice, etc would be greatly appreciated.
Thanks!Basically, you just want a pitch envelope to make the pitch do what you want on the attack, decay or release.
The ES synths have routable envelopes, so you can route any of them to pitch and do what you want. -
Did the new patch help you? Yes or
I was really hoping to post on here that this patch fixed my issue... but alas it has not.
I tested it by not going into my bios, on first reboot I went to a ytmnd site and the streaming music drove my soundcard nuts (crackling) till firefox crashed, and the sound started cycling... until windows finally forced firefox closed.
Now, I was wondering if CL or anyone else has any clue why me entering bios during startup would fix my issue for that one startup? Do these soundcards not have enough time during bootup to sync correctly or something?No. The patch still didn't address Windows' recognition problems with it. Windows 64 still won't recognize the X-FI even with the drivers. The worst thing is, it ran flawlessly way back before they drivers expired..Message Edited by Chasgn on 07-3-2006 2:38 PM
-
I just installed Solaris 10 1/06 GA on a new PC. I ran Update Manager and it applied a bunch of patches. It still shows four patches in my "Available Updates" tab. Three of these it says will be installed at the next restart but they never are. I reboot and they're still in the "Available Updates" list. The fourth is a kernel patch, 118844-28. This says I need to install it manually.
If I go to the directory where the patch was downloaded, /var/sadm/spool and type 'patchadd 118844-28,' I get:
<div class="pre"><pre>Validating patches...
Loading patches installed on the system...
Done!
Loading patches requested to install.
Cannot locate 118844-28 to install.</pre></div>
OK. If I try 'patchadd ./118844-28.jar' I get:
<div class="pre"><pre>Validating patches...
Loading patches installed on the system...
Done!
Loading patches requested to install.
Cannot open pkginfo file /var/sadm/spool//cache/pkginfo
Cannot open pkginfo file /var/sadm/spool//patchproSequester/pkginfo
Cannot open pkginfo file /var/sadm/spool//cache/pkginfo
Cannot open pkginfo file /var/sadm/spool//patchproSequester/pkginfo
Cannot open directory /var/sadm/spool/.
Cannot open directory /var/sadm/spool/.
Cannot open directory /var/sadm/spool/.
Packages from patch are not installed on the system.
Packages from patch are not installed on the system.
Packages from patch are not installed on the system.
No patches to check dependency.
</pre></div>
What am I doing wrong? Why won't the first three patches (119716-10, 119375-13, 113000-07) install when I reboot and why won't patchadd install 118844-28?
Thanks.I've fixed half of my problem. Upon reading the manual (imagine that!), I discovered this passage:
<table border="0" align="center" width="90%" cellpadding="3" cellspacing="1"><tr><td class="SmallText"><b>Quote:</b></td></tr><tr><td class="quote">
If an update you install requires a system reboot to activate it, the update is staged for installation at the next system shutdown. You must use one of the following commands to initiate the system shutdown:
</td></tr></table>
I wasn't using one of those commands. When I did, the three patches installed on the next boot. Now, I only have the kernel patch remaining in my "Available Updates" tab. I still can't get that one to install. Any hints?
Maybe you are looking for
-
I called the police and they told me they were there to escort me off the premisies. The person who stole my iPad was actually helping me buy accessories for yea go ahead and laugh im not happy. I called my carrier and they said there was nothing I
-
I changed my apple I'd email address and when I log in I use that email and the right password both work. But when my friend iMessage me it only works if they send it to my old email address not my new current one. How can ai change my iCloud and iMe
-
My sister got a nano over the summer (RIGHT before the new ones were released). For Christmas I'd like to get some kind of adapter that will allow her to use her ipod through the home stereo system. She has speakets all through the house and property
-
Grid Control 10.2 and Port 1521
I'm installing Grid Control on a HPUX box that has three Oracle Financials environments, and four non-financials databases. During the install, I'm asked to run a script as root. On that same screen, it says "in order to successfully install the prod
-
What is the difference in case stmt
Hi I'm getting the same output with the following case statements SQL> select (case when empno=7566 then 100 else empno end) 2 from emp; (CASEWHENEMPNO=7566THEN100ELSEEMPNOEND) 7369