2091-AIX_patch_management_and_compliancy_without_downtime_ST 101724.pdf

1、October 21-24,2024Mandalay Bay Convention CenterLas Vegas,NevadaSession code 2091AIX patch management and compliancy without downtimeChristian SonnemansDe Volksbank,senior Unix engineerAIX patch management and compliancy without downtime#IBMTechXchangeAgenda&What you will learn2IBM TechXchange|2024

2、IBM CorporationAgenda01020304050607Patch management AIX Patch management toolingCreating patch baselines LU basics LU nim LPP-efix in one runLU with extra checksQ&AIBM TechXchange|2024 IBM Corporation#IBMTechXchange4What you will learn in this sessionIBM TechXchange|2024 IBM Corporation01Why patchin

3、g on regular basis is neededHow to determine the patch levelpatch level What standard tooling can be used?Different type of patches needs different tools?How you can let LU work for you!02030405#IBMTechXchange5Please look carefully at this screenshot and tell me which parts are not correct at the en

4、d of this sessionWhat is wrong on this screenshot?IBM TechXchange|2024 IBM Corporation-bash-5.2#uptime 11:25AM up 1207 days,8:38,1 user,load average:0.88,1.58,1.59-bash-5.2#dateFri Jul 5 11:26:00 CEST 2024-bash-5.2#oslevel-s7200-05-07-2346-bash-5.2#emgr-lID STATE LABEL INSTALL TIME UPDATED BY ABSTRA

5、CT=1 S IJ49093s7 02/23/24 01:28:27 IJ49093 for AIX 7.2 TL5 SP5 to SP7 2 S 301002sa 03/20/24 01:12:22 ifix for openssl CVEs 3 S 92112ma 03/20/24 01:12:39 ifix for openssh Jan CVEs 4 S IJ50424s7a 05/21/24 07:39:25 IJ50424 for AIX 7.2 TL5 SP5 to SP7 5 S IJ50602m7a 06/27/24 06:10:29 IJ50602 POTENTIAL SE

6、CURITY ISSUE 6 S IJ50910s7a 06/27/24 06:10:36 IJ50910 POTENTIAL SECURITY ISSUE 7 S is22026s1a 06/27/24 06:10:41 invscout fix for CVE-2024-27260#IBMTechXchange6Please look carefully at this screenshot and tell me which parts are not correct at the end of this sessionWhat is wrong on this screenshot?I