Why doesn't smpatch analyze match patchdiag output?

Can someone explain this and if it will change in the future. If so, when ca we expect it?

First, I understand that the patchdiag.xref file is commonly more current than patchdb.zip (by a day) but that's not what I am talking about.

I see across most hosts and OS versions patches that aren't flagged for update by smpatch analyze but are by patchdiag. Many are obviously important files (not obscure), a good example I have seen on other boxes are the SUNWsan patches, sd patches, etc.

Below is an example from a Solaris 10 box.

# smpatch analyze

No patches required.

#

# ./patchdiag -l | grep "^1" | grep -v CURR | grep -v Obsol

1138862732OpenGL 1.3: OpenGL Patch for Solaris (32-bit)

1138872732OpenGL 1.3: OpenGL Patch for Solaris (64-bit)

1162980817Sun One Application Server 7.0: Java API for XML Parsing 1.2 Patch

11630202

1190730203SunOS 5.10: ldapclient patch

1191151314Mozilla 1.7 patch

1191300613SunOS 5.10: Sun Fibre Channel Device Drivers

1193130304SunOS 5.10: WBEM Patch

1193660405GNOME 2.6.0: Display Manager Patch

1193700809GNOME 2.6.0: GNOME panel and support libraries Patch

1195480203GNOME 2.6.0: Gnome Multi-protocol instant messaging client Patch

1196870102SunOS 5.10: in.mpathd patch

1199820103SunOS 5.10: ufsboot patch

1204690203SunOS 5.10: kerberos patch

118666 S SUNWj5cfg 04 43 J2SE 5.0: update 5 patch

118667 S SUNWj5dmx 04 43 J2SE 5.0: update 5 patch, 64bit

118676SUNWsprot 01 239 SunOS 5.10: patch for Solaris make and sccs utilities

118683SUNWsprot 01 190 SunOS 5.10: Patch for assembler

119213 * SUNWjss06 57 SunOS 5.10: NSPR 4.5.2 / NSS 3.10.1 / JSS 4.1

119586SUNWcpcu022 SunOS 5.10: pcbe Patch

119963SUNWlibC048 SunOS 5.10: Shared library patch for C++

119974SUNWcfpl02 64 SunOS 5.10: fp plug-in for cfgadm

120195SUNWcakr01 142 SunOS 5.10: schpc sc_gptwocfg gptwo_pci patch

120201SUNWxorg-clientlibs 01 143 X11 6.8.0: Xorg client libraries patch

120338SUNWkiu804 93 SunOS 5.10: Asian CCK locales patch

120560SUNWxwpl01 93 SunOS 5.10: sun4u platform links patch

120706SUNWxildh 01 57 SunOS 5.10: XIL 1.4.2 Loadable Pipeline Libraries

120753SUNWlibm028 SunOS 5.10: Microtasking libraries (libmtsk) patch

120998SUNWhea013 SunOS 5.10: sd headers patch

121211SUNWmcon013 SunOS 5.10: Sun Java Web Console (Lockhart) Patch

#

[2487 byte] By [jwbledsoe] at [2007-11-26 6:04:55]
# 1

Can you please check what version, if any, you have installed of any of the patches? For example;

$ showrev -p 113886

Can you also check the last time the current.zip database file was updated;

$ ls -l /var/sadm/spool/cache/Database/https%3A%2F%2Fgetupdates.sun.com%2Fsolaris%2F%2F Database%2Fcurrent.zip

ForumModerator at 2007-7-6 13:31:27 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 2

These are from yesterday and I installed the patches from patchdiag the same day.

The patchdb.zip would be the one available yesterday at the same time.

This isn't something new, and I have seen it across most or all of my systems (Solaris 8/9/10)

You can test with most any host. Just run patchdiag -l with a current xref file and smpatch analyze. If the patch diag shows lots more patches, then patch with smpatch until it shows no patches needed. Now run patchdiag -l again and you'll have lots of patches to install (about 15-30 depending on OS and HW)

jwbledsoe at 2007-7-6 13:31:27 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 3
I have noticed that patchdb seems to be about a day behind patchdiag, so this will account for some of the patches.What I am talking about are patches that have been out for days/weeks/...
jwbledsoe at 2007-7-6 13:31:27 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 4

Here's some output from today.

new install Solaris 10 3/05

applied rec patch cluster, then smpatch update to current

# smpatch analyze

No patches required.

patchdb.zip:

93 11-30-05 22:05patchlist.properties

1623621 12-01-05 00:15patchlist.delimited

patchdiag.xref header:

## PATCHDIAG TOOL CROSS-REFERENCE FILE AS OF Dec/12/05 ##

Patchdiag output showing full info (current rev, needed, etc)

# ./patchdiag -l | grep "^1" | grep -v CURR | grep -v Obsol

1138862732OpenGL 1.3: OpenGL Patch for Solaris (32-bit)

1138872732OpenGL 1.3: OpenGL Patch for Solaris (64-bit)

1162980817Sun One Application Server 7.0: Java API for XML Parsing 1.2 Patch

11630202

1174610608SunOS 5.10: ld Patch

1187070304SunOS 5.10: Expert3D IFB Graphics Patch

1190730203SunOS 5.10: ldapclient patch

1191151314Mozilla 1.7 patch

1193130304SunOS 5.10: WBEM Patch

1193660405GNOME 2.6.0: Display Manager Patch

1193700809GNOME 2.6.0: GNOME panel and support libraries Patch

1194140203GNOME 2.6.0: Gnome Accessibility Libraries Patch

1195480203GNOME 2.6.0: Gnome Multi-protocol instant messaging client Patch

1195980304GNOME 2.6.0: Gnome Screen Reader and Magnifier Patch

1196810305SunOS 5.10: patch platform/sun4u/wanboot

1196870102SunOS 5.10: in.mpathd patch

1197120102SunOS 5.10: usr/sbin/in.routed Patch

1199820103SunOS 5.10: ufsboot patch

1201330203GNOME 2.6.0: Gnome themes Patch

1204690203SunOS 5.10: kerberos patch

1208870102SunOS 5.10: cdrw patch

118666 S SUNWj5cfg 04 48 J2SE 5.0: update 5 patch

118667 S SUNWj5dmx 04 48 J2SE 5.0: update 5 patch, 64bit

118676SUNWsprot 01 244 SunOS 5.10: patch for Solaris make and sccs utilities

118683SUNWsprot 01 195 SunOS 5.10: Patch for assembler

119213 * SUNWjss06 62 SunOS 5.10: NSPR 4.5.2 / NSS 3.10.1 / JSS 4.1

119586FJSVcpcu027 SunOS 5.10: pcbe Patch

119728FJSVfmd02 187 SunOS 5.10: FJSV,GPUU platform fmd.conf patch

119963SUNWlibC04 13 SunOS 5.10: Shared library patch for C++

119974SUNWcfpl02 69 SunOS 5.10: fp plug-in for cfgadm

120195SUNWcakr01 147 SunOS 5.10: schpc sc_gptwocfg gptwo_pci patch

120201SUNWxorg-clientlibs 01 148 X11 6.8.0: Xorg client libraries patch

120338SUNWkiu804 98 SunOS 5.10: Asian CCK locales patch

120560SUNWxwpl01 98 SunOS 5.10: sun4u platform links patch

120706SUNWxildh 01 62 SunOS 5.10: XIL 1.4.2 Loadable Pipeline Libraries

120753SUNWlibm02 13 SunOS 5.10: Microtasking libraries (libmtsk) patch

120998SUNWhea025 SunOS 5.10: sd headers

121104 S SUNWacroread 011 Adobe Acrobat Reader patch

121136 S SUNWacroread-plugin 011 Adobe Acrobat Reader patch

121211SUNWmcon018 SunOS 5.10: Sun Java Web Console (Lockhart) Patch

#

Obviously a difference in reference file dates, but not sure if these patchdiag patches are since the patchdb dates. I'll leave that to you all to research.

Hope this ouput helps. JB

jwbledsoe at 2007-7-6 13:31:27 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 5

I always got the impression that qualification for the smpatch/update manager system was an extra step, presumably with some extra qualification.

Its pretty much always been the case theres been a few days gap between a patch being visible in sunsolve and it appearing in smpatch analyze.

And not all patches make it into smpatch. Normally patches for unbundled products like the java enterprise stuff don't get installed by smpatch. And compiler patches except for library patches ones don't either.

So I assumed that after a patch is produced, someone makes a decision if it was appropriate for autoinstall.

I have to admit the bundled/unbundled lines are blurring though.

Ive now seen a couple of JES patches eg Sun Message server etc come through smpatch.

They never used to.

robertcohen at 2007-7-6 13:31:27 > top of Java-index,Administration Tools,Sun Update Connection-System...
# 6

yeah, me too. That's why I figured I'd ask here and hopefully get a response from Sun.

I'm sure everyone would benefit from knowing not only their intentions, but direction too.

I'd just assume it patch everything it can that's OS related, might want to review patching applications as sometimes you want to wait for various reasons.

jwbledsoe at 2007-7-6 13:31:27 > top of Java-index,Administration Tools,Sun Update Connection-System...