This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
aix:aix_internet_updates [2025/02/19 14:59] manu |
aix:aix_internet_updates [2025/09/22 17:00] (current) manu [FLRTVC.ksh (generate security reports)] |
||
---|---|---|---|
Line 214: | Line 214: | ||
invscout fix - CVE-2024-27260 | invscout fix - CVE-2024-27260 | ||
</cli> | </cli> | ||
+ | |||
+ | ===== FLRTVC.ksh (generate security reports) ===== | ||
+ | |||
+ | The [[https://esupport.ibm.com/customercare/sas/f/flrt3/FLRTVC-0.8.12.zip|FLRTVC]] script can generate multiple kind of output | ||
+ | |||
+ | Flags for this script: | ||
+ | <code> | ||
+ | -d = Change delimiter for compact reporting | ||
+ | -f = File selection for *.csv file | ||
+ | -q = Quiet mode, hide compact reporting header | ||
+ | -s = Skip download, use default apar.csv file | ||
+ | -v = Verbose, full report (for piping to email) | ||
+ | -g = Grep for filesets with phrase, useful for verbose mode | ||
+ | -t = Type of APAR [hiper | sec] | ||
+ | -l = Enter a custom LSLPP output file, must match lslpp -Lqc | ||
+ | -e = Enter a custom EMGR output file, must match emgr -lv3 | ||
+ | -x = Skip EFix processing | ||
+ | -a = Show all fixed and non-fixed HIPER/Security vulnerabilities | ||
+ | -p = Convert FTP protocol to HTTP for bulletin and efix download links | ||
+ | -r = Enter PROXY URL to be used by wget or curl, the same can be provided through HTTP_PROXY environment variable. This option value takes precedence over environment variable. Ex: http://user:password@hostIPorName:port or http://hostIPorName:port | ||
+ | </code> | ||
+ | |||
+ | Example, create 2 files whith the output of the following commands, and compare to the latest [[https://esupport.ibm.com/customercare/flrt/doc?page=aparCSV|apar file]] | ||
+ | emgr -lv3 > /tmp/emgr.txt | ||
+ | lslpp -Lcq > /tmp/lslpp.txt | ||
+ | flrtvc.ksh -a -l /tmp/lslpp.txt -e /tmp/emgr.txt -f /path_to_aparcsv/shared_data/APAR.csv | ||
+ | | ||
+ | The **-a** flag, give an output for what is fixed, and what is note, output can be imported in excel. | ||
===== Efix DB location ===== | ===== Efix DB location ===== | ||
Line 231: | Line 259: | ||
1022103a|:|5|:|/usr/bin/openssl64|:|openssl.base|:|1|:|5|:|063008060522|:|1.0.2.2103 | 1022103a|:|5|:|/usr/bin/openssl64|:|openssl.base|:|1|:|5|:|063008060522|:|1.0.2.2103 | ||
</cli> | </cli> | ||
+ | |||
+ | ===== Efix TAR installation ===== | ||
To install an efix based on TAR efix package, use the following command | To install an efix based on TAR efix package, use the following command |