This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
aix:aix_internet_updates [2024/09/06 13:40] manu |
aix:aix_internet_updates [2025/02/19 14:59] (current) manu [Efix DB location] |
||
---|---|---|---|
Line 6: | Line 6: | ||
* **emgr_check_ifixes** | * **emgr_check_ifixes** | ||
* **emgr_download_ifix** | * **emgr_download_ifix** | ||
+ | * **emgr_sec_patch** | ||
+ | |||
+ | FIXME currently (02-2025) you can't set a proxy to download ! Only direct connections to internet are supported | ||
+ | |||
<cli prompt='#'> | <cli prompt='#'> | ||
# emgr_check_ifixes | # emgr_check_ifixes | ||
Line 57: | Line 61: | ||
</cli> | </cli> | ||
- | ==== Efix detailed info ==== | + | ===== Efix detailed info ===== |
View the content of an efix package | View the content of an efix package | ||
Line 209: | Line 213: | ||
============ | ============ | ||
invscout fix - CVE-2024-27260 | invscout fix - CVE-2024-27260 | ||
+ | </cli> | ||
+ | |||
+ | ===== Efix DB location ===== | ||
+ | |||
+ | Efix inventory is stored in a text file: “/usr/emgrdata/DBS/efix.db” and “/usr/emgrdata/DBS/pkglck.db” | ||
+ | <cli prompt='#'> | ||
+ | [root@aix01]/root# cat /usr/emgrdata/DBS/efix.db | ||
+ | IJ36810s3a|:|IJ36810 Potential security issue|:|.|:|.|:|.|:|.|:|0|:|1|:|00F7CD554C00121710122121|:|1|:|05/02/22 12:21:09|:|S|:|0|:|7|:|.|:|.|:|.|:|0|:|1|:|1|:|. | ||
+ | 1022103a|:|Ifix for Openssl CVE-2022-0778|:|.|:|.|:|.|:|.|:|0|:|1|:|00F787C74C00042206045322|:|5|:|06/30/22 08:52:53|:|S|:|0|:|7|:|.|:|.|:|.|:|0|:|1|:|1|:|. | ||
+ | |||
+ | [root@aix01]/root# cat /usr/emgrdata/DBS/pkglck.db | ||
+ | IJ36810s3a|:|1|:|/usr/bin/lscore|:|bos.rte.security|:|1|:|1|:|050212051122|:|7.2.5.101 | ||
+ | 1022103a|:|1|:|/usr/lib/libcrypto.a|:|openssl.base|:|1|:|5|:|063008060322|:|1.0.2.2103 | ||
+ | 1022103a|:|2|:|/usr/lib/libssl.a|:|openssl.base|:|1|:|5|:|063008060422|:|1.0.2.2103 | ||
+ | 1022103a|:|3|:|/usr/lib/libcrypto.a.min|:|openssl.base|:|1|:|5|:|063008060422|:|1.0.2.2103 | ||
+ | 1022103a|:|4|:|/usr/bin/openssl|:|openssl.base|:|1|:|5|:|063008060422|:|1.0.2.2103 | ||
+ | 1022103a|:|5|:|/usr/bin/openssl64|:|openssl.base|:|1|:|5|:|063008060522|:|1.0.2.2103 | ||
+ | </cli> | ||
+ | |||
+ | ===== Efix TAR installation ===== | ||
+ | |||
+ | To install an efix based on TAR efix package, use the following command | ||
+ | <cli prompt='#'> | ||
+ | # /usr/sbin/emgr_sec_patch kernext_fix.tar | ||
+ | ... | ||
+ | Efix State | ||
+ | +-----------------------------------------------------------------------------+ | ||
+ | Setting efix state to: STABLE | ||
+ | |||
+ | +-----------------------------------------------------------------------------+ | ||
+ | Operation Summary | ||
+ | +-----------------------------------------------------------------------------+ | ||
+ | Log file is /var/adm/ras/emgr.log | ||
+ | |||
+ | EPKG NUMBER LABEL OPERATION RESULT | ||
+ | =========== ============== ================= ============== | ||
+ | 1 IJ52610m2a INSTALL SUCCESS | ||
+ | |||
+ | Return Status = SUCCESS | ||
+ | Done | ||
+ | em+-----------------------------------------------------------------------------+ | ||
+ | Checking System Level Prerequisites | ||
+ | +-----------------------------------------------------------------------------+ | ||
+ | calling emgr -p -e /tmp/emgr_12321112/kernext_fix/IJ52977s2a.241113.epkg.Z | ||
+ | gr -PSkipping ifix | ||
+ | See /var/adm/ras/emgr.log for more details | ||
+ | |||
+ | +-----------------------------------------------------------------------------+ | ||
+ | Checking System Level Prerequisites | ||
+ | +-----------------------------------------------------------------------------+ | ||
+ | calling emgr -p -e /tmp/emgr_12321112/kernext_fix/IJ52977s3a.241113.epkg.Z | ||
+ | Skipping ifix | ||
+ | See /var/adm/ras/emgr.log for more details | ||
</cli> | </cli> |