hi there,

I would like to get some ideas on how AIX System Administrators track their CVE patching in their AIX environments? For example, multiple LPARs with different AIX OS version in multiple environments such as test, uat, prod, etc?

Is there a simple way to manage that?

Thanks in advance,

Allan S.

------------------------------
Allan Song
------------------------------

Hi!

That depends on your requirements.  For most of our use cases, the FLRTVC Script is good enough.

We basically use ansible flrtvc module to distribution script and the meta data file, run it periodically and have a  check in our general monitoring (Icinga), to report missing patches / updates to us.

With that we can in theory also always create a report of known open issues and their cvss score for a system, or a group of systems; but we rarely have that requirement.

Best regards,

  Alexander