Patch Level

[RParker]

When applying patches, is there a way to see ALL the patches that have been applied, and also what build/version should I be at with ESX 3.0 on my server once all is said and done?

[acr]

Look at this link..

http://www.vmware.com/community/message.jspa?messageID=558429

vmware -v will tell you your finished build level..

Nice article re: Patching..

http://virtrix.blogspot.com/2007/03/vmware-autopatching-your-esx-host.html

[MR-T]

I don't have a box in front of me to test this, but...

try

esxupdate -query

I think this is the correct command. It will list every patch you've applied including a description of what it does.

[acr]

Close MR-T.. its..

\[root@ESX_1 root]# esxupdate -l query[/b]

Installed software bundles:

\---- Name \---- --- Install Date --- --- Summary ---

3.0.1-32039 12:05:36 02/08/07 Full 3.0.1 release of VMware ESX Server

ESX-1006511 14:24:05 02/16/07 Fixing TX hang in 80003ES2LAN Controller

ESX-1410076 14:45:32 02/16/07 BSOD 0x109 during 64-bit Windows install

ESX-2158032 14:49:04 02/16/07 Add LFENCE for RWO on AMD K8 before RevF

ESX-2066306 15:04:49 02/16/07 Patch for VM crashes and possible freeze

ESX-6921838 15:09:08 02/16/07 hot removal of a virtual disk thru SDK

ESX-8173580 15:11:42 02/16/07 Fix COS Oops running Dell OM5 w/ QLogic

ESX-9986131 15:14:57 02/16/07 Updated openssh, python, and openssl

ESX-1271657 15:28:12 02/16/07 Open IPMI improvement for slowness.

ESX-1917602 15:30:11 02/16/07 To improve compatibility for Windows NT.

ESX-2031037 15:31:50 02/16/07 To provide LUN an unique ID Name

ESX-2092658 15:34:29 02/16/07 SNMP agent returns full VM config file.

ESX-3996003 15:35:46 02/16/07 To support the latest time zone rules.

ESX-5497987 15:37:49 02/16/07 Fixes a misleading locking message.

ESX-6075798 15:39:44 02/16/07 Force vmxnet module to be installed 1st.

New packages:

LGTOaama-5.1.2-1

LGTOaamvm-5.1.2-1

VMware-vpxa-2.0.1-33643

\[root@ESX_1 root]#

[RParker]

OK, but what build level am I \*SUPPOSED* to be at when all is said and done?

How do I know if I am on the latest build (w/o looking at website for latest patches)?

In Windows I can see a list of patches in add/remove programs. But that information amounts to zip, when I look at Windows it has SP1, SP2, etc..

So at least I have a place to start from. ESX has no SP level (or does it?) to determine a point where the build is at.

Yes, I can see a lovely list of patches that were applied, but what build is that going to be if I am done? Let's assume I did EVERY patch out there, what build is that? I just want to see what build number is the most up to date.

Do you see what I am asking now?

[RParker]

OK, dude that link is awesome for the auto patch, I am going to use that, that totally rocks.

How did you get that last part?

<< New packages:

LGTOaama-5.1.2-1

LGTOaamvm-5.1.2-1

VMware-vpxa-2.0.1-33643 >>

Does the ESX automatically query the server for newly update or available patches? That esxupdate -l query command didn't show this part..

[markwolf]

I was able to get all 25 patches installed using the perl script, but after the reboot I did the "esxupdate -l query" command and at the end it said:

Missing packages:

VMware-esx-debug-tools-3.0.1-34176

Is there anything I need/should do about this? Is there a log that shows if one of the patches failed or was missing something?

[markwolf]

Anyone?

[MR-T]

If you wait another 30 mins I'll let you know.

I'm about to apply all 25 patches to a clean ESX 3.0.1 install.

[kri-2]

We do have the same problem. I'm working on it

http://www.vmware.com/community/thread.jspa?threadID=78922&tstart=0

[letoatrads]

I have all patches installed on a new 3.0.1 install, and an install that was only missing this months patches.

The new install is good, the box that had all the patches installed EXCEPT the latest round came back with the missing package

VMware-esx-debug-tools-3.0.1-34176

I'de bet my breakfast that is due to the repackaged older updates. Lemme figure which one that was, re-install it on that host, and see if the issue goes away.

[kri-2]

@letoatrads: so the new box, that doesnt show any missing packages had no updates before and you just installed the 5 new patches?

Could you please let me see the output of esxupdate -l query?

I tried to install all the patches sorted (*) by releasedate and then sorted by patchnumber on newly installed 3.01 hosts a few times now, but it always ends with two missing packages after applying the ESX-1541239.tgz patch.

*order of installation, begin at the bottom

ESX-9916286 Patch | 03/29/07 | Security Patch | 7b98cfe1b2e0613c368d4080dcacccb8

ESX-6431040 Patch | 03/29/07 | Security Patch | eb884e22d7e818ad8fa4523c68729f5a

ESX-2559638 Patch | 03/29/07 | Security Patch | 9ee9d9769dfe2668aa6a4be2df284ea6

ESX-2257739 Patch | 03/29/07 | Critical Patch | e49ae9be1c51fef5db641e0654a43117

ESX-1541239 Patch | 03/29/07 | Critical Patch | e8e83b996daedd967ed033f1c1292a3d R

ESX-9865995 Patch | 03/05/07 | General Patch | 9223fe857d94a3bc4098a8c93b753be2 R

ESX-6856573 Patch | 03/05/07 | Security Patch | 16bb030929bb005fe26c09f637cb9cd8

ESX-6050503 Patch | 03/05/07 | General Patch | d1cb2751abb1acb9951c368fd4cccaa0

ESX-5885387 Patch | 03/05/07 | Security Patch | 423e29b266f0d3181f2211dc6679b63e

ESX-5031800 Patch | 03/05/07 | Security Patch | c266474de27c569631b93bf566ad74f2

ESX-3199476 Patch | 03/05/07 | Critical Patch | a12c77bd49c65f7a333dd8e70a6ec729

ESX-6075798 Patch | 01/31/07 | General Patch | c6df2ed7bc6e918ea8a77a220d543948 R

ESX-5497987 Patch | 01/31/07 | General Patch | a72de3579bf0a466ef4f14f3b454b60e

ESX-3996003 Patch | 01/31/07 | General Patch | 58e9581f338c9fb783e72028a6f15ba4

ESX-2092658 Patch | 01/31/07 | General Patch | 8196dd7c0d39fe7bf8147ec198083bbe

ESX-2031037 Patch | 01/31/07 | General Patch | 2df5b252b82f5a33be64513fad8daef7

ESX-1917602 Patch | 01/31/07 | General Patch | 23d76165dc8032ef18f368d983628169

ESX-1271657 Patch | 01/31/07 | General Patch | 3fc76e076d6334b71d4158c123eab4af

ESX-9986131 Patch | 12/28/06 | Security Patch | 239375e107fd4c7af57663f023863fcb R

ESX-8173580 Patch | 12/28/06 | General Patch | 1a4f3e57d1b950dec8401074aaa92490

ESX-6921838 Patch | 12/28/06 | General Patch | 49ae671c886a00dd68ceb4b9e3d9e5ee

ESX-2066306 Patch | 12/28/06 | Critical Patch | 2b8a9a6d9beb82476e1a7e8eafbb18d7

ESX-2158032 Patch | 11/30/06 | Critical Patch | c688275383addb789af1885ef4632b5f R

ESX-1410076 Patch | 11/30/06 | Critical Patch | 0d6baf569bbd653c31772a9302d16752

ESX-1006511 Patch | 11/30/06 | Critical Patch | efa86b4e30e7700e186c8040fde93381

Message was edited by:

kri-2

[letoatrads · Accepted solution]

Nope, installed all patches using Dominic7's script.

http://vmprofessional.com/material/esx-autopatch.pl - Props to him- great script

Started with a clean install of 3.0.1 - Ran the update script - all golden at the end.

\[root@rswesx04 tmp]# esxupdate -l query

Installed software bundles:

\---- Name \---- --- Install Date --- --- Summary ---

3.0.1-32039 12:44:09 04/02/07 Full 3.0.1 release of VMware ESX Server

ESX-2158032 14:50:16 04/02/07 Add LFENCE for RWO on AMD K8 before RevF

ESX-1410076 14:54:10 04/02/07 BSOD 0x109 during 64-bit Windows install

ESX-1006511 14:55:19 04/02/07 Fixing TX hang in 80003ES2LAN Controller

ESX-9986131 14:56:39 04/02/07 Updated openssh, python, and openssl

ESX-8173580 14:58:23 04/02/07 Fix COS Oops running Dell OM5 w/ QLogic

ESX-6921838 15:01:23 04/02/07 hot removal of a virtual disk thru SDK

ESX-2066306 15:02:19 04/02/07 Patch for VM crashes and possible freeze

ESX-6075798 15:03:33 04/02/07 Force vmxnet module to be installed 1st.

ESX-5497987 15:05:18 04/02/07 Fixes a misleading locking message.

ESX-3996003 15:06:16 04/02/07 To support the latest time zone rules.

ESX-2092658 15:07:47 04/02/07 SNMP agent returns full VM config file.

ESX-2031037 15:08:43 04/02/07 To provide LUN an unique ID Name

ESX-1917602 15:09:43 04/02/07 To improve compatibility for Windows NT.

ESX-1271657 15:10:54 04/02/07 Open IPMI improvement for slowness.

ESX-9865995 15:12:40 04/02/07 LUNs of MSA Array disappear and reappear

ESX-6856573 15:13:39 04/02/07 PhysMem_Get() accesses wrong pages

ESX-6050503 15:16:36 04/02/07 Error on "network adapters" tab in VC UI

ESX-5885387 15:17:31 04/02/07 RedHat Moderate: gzip security update

ESX-5031800 15:18:23 04/02/07 RHSA-2006:0749 tar security update

ESX-3199476 15:19:38 04/02/07 VMXNET shutdown may lead to BSOD

ESX-9916286 15:20:52 04/02/07 To update zlib library for ESX 3.0.1

ESX-2559638 15:21:48 04/02/07 Update info rpm for ESX 3.0.1.

ESX-2257739 15:23:30 04/02/07 To deliver several fixes in vmkernel.

ESX-1541239 15:24:44 04/02/07 Updates Emulex Fibre Channel driver.

\[root@rswesx04 tmp]#

Then I have a clean install of 3.0.1 that I built about 2 weeks ago, and had already patched it to spec. So I ran Dominic7's script - it recognized what packages were already installed and only installed the 5 new patches but I get the error as below

esxupdate -l query

Installed software bundles:

\---- Name \---- --- Install Date --- --- Summary ---

3.0.1-32039 06:01:56 03/13/07 Full 3.0.1 release of VMware ESX Server

ESX-2158032 10:02:21 03/13/07 Add LFENCE for RWO on AMD K8 before RevF

ESX-1410076 10:08:44 03/13/07 BSOD 0x109 during 64-bit Windows install

ESX-1006511 10:18:33 03/13/07 Fixing TX hang in 80003ES2LAN Controller

ESX-9986131 10:36:34 03/13/07 Updated openssh, python, and openssl

ESX-8173580 10:40:11 03/13/07 Fix COS Oops running Dell OM5 w/ QLogic

ESX-6921838 10:48:13 03/13/07 hot removal of a virtual disk thru SDK

ESX-2066306 10:49:28 03/13/07 Patch for VM crashes and possible freeze

ESX-6075798 10:51:47 03/13/07 Force vmxnet module to be installed 1st.

ESX-5497987 10:57:33 03/13/07 Fixes a misleading locking message.

ESX-3996003 11:08:38 03/13/07 To support the latest time zone rules.

ESX-2092658 11:20:51 03/13/07 SNMP agent returns full VM config file.

ESX-2031037 11:26:26 03/13/07 To provide LUN an unique ID Name

ESX-1917602 12:22:47 03/13/07 To improve compatibility for Windows NT.

ESX-1271657 12:26:20 03/13/07 Open IPMI improvement for slowness.

ESX-9865995 12:34:12 03/13/07 LUNs of MSA Array disappear and reappear

ESX-6856573 12:42:06 03/13/07 PhysMem_Get() accesses wrong pages

ESX-6050503 12:49:42 03/13/07 Error on "network adapters" tab in VC UI

ESX-5885387 12:54:38 03/13/07 RedHat Moderate: gzip security update

ESX-5031800 12:58:07 03/13/07 RHSA-2006:0749 tar security update

ESX-3199476 12:59:43 03/13/07 VMXNET shutdown may lead to BSOD

ESX-9916286 10:31:02 04/02/07 To update zlib library for ESX 3.0.1

ESX-2559638 10:32:17 04/02/07 Update info rpm for ESX 3.0.1.

ESX-2257739 10:34:25 04/02/07 To deliver several fixes in vmkernel.

ESX-1541239 10:35:56 04/02/07 Updates Emulex Fibre Channel driver.

Missing packages:

VMware-esx-debug-tools-3.0.1-34176

\[root@rswesxcolo root]#

[kri-2]

hm I think there is a problem with the bundled patch in your installation.

neither the bundled patch (ESX-6431040) nor the included patches are listet in your output?!

[letoatrads]

Yep, you are right. Had to run the ./install_patches script in the bundled patch dir

Now I've got them on

\[root@rswesx04 root]# esxupdate -l query

Installed software bundles:

\---- Name \---- --- Install Date --- --- Summary ---

3.0.1-32039 12:44:09 04/02/07 Full 3.0.1 release of VMware ESX Serve r

ESX-2158032 14:50:16 04/02/07 Add LFENCE for RWO on AMD K8 before Re vF

ESX-1410076 14:54:10 04/02/07 BSOD 0x109 during 64-bit Windows insta ll

ESX-1006511 14:55:19 04/02/07 Fixing TX hang in 80003ES2LAN Controll er

ESX-9986131 14:56:39 04/02/07 Updated openssh, python, and openssl

ESX-8173580 14:58:23 04/02/07 Fix COS Oops running Dell OM5 w/ QLogi c

ESX-6921838 15:01:23 04/02/07 hot removal of a virtual disk thru SDK

ESX-2066306 15:02:19 04/02/07 Patch for VM crashes and possible free ze

ESX-6075798 15:03:33 04/02/07 Force vmxnet module to be installed 1s t.

ESX-5497987 15:05:18 04/02/07 Fixes a misleading locking message.

ESX-3996003 15:06:16 04/02/07 To support the latest time zone rules.

ESX-2092658 15:07:47 04/02/07 SNMP agent returns full VM config file .

ESX-2031037 15:08:43 04/02/07 To provide LUN an unique ID Name

ESX-1917602 15:09:43 04/02/07 To improve compatibility for Windows N T.

ESX-1271657 15:10:54 04/02/07 Open IPMI improvement for slowness.

ESX-9865995 15:12:40 04/02/07 LUNs of MSA Array disappear and reappe ar

ESX-6856573 15:13:39 04/02/07 PhysMem_Get() accesses wrong pages

ESX-6050503 15:16:36 04/02/07 Error on "network adapters" tab in VC UI

ESX-5885387 15:17:31 04/02/07 RedHat Moderate: gzip security update

ESX-5031800 15:18:23 04/02/07 RHSA-2006:0749 tar security update

ESX-3199476 15:19:38 04/02/07 VMXNET shutdown may lead to BSOD

ESX-9916286 15:20:52 04/02/07 To update zlib library for ESX 3.0.1

ESX-2559638 15:21:48 04/02/07 Update info rpm for ESX 3.0.1.

ESX-2257739 15:23:30 04/02/07 To deliver several fixes in vmkernel.

ESX-1541239 15:24:44 04/02/07 Updates Emulex Fibre Channel driver.

ESX-1161870 07:08:40 04/03/07 Several bug fixes in vmware-vmx.

ESX-3416571 07:09:37 04/03/07 Potential Buffer Overflow.

ESX-5011126 07:10:39 04/03/07 Potential Buffer Overflow.

ESX-7737432 07:11:38 04/03/07 Potential Buffer Overflow.

ESX-7780490 07:12:34 04/03/07 Potential Buffer Overflow.

ESX-8174018 07:13:34 04/03/07 Potential Buffer Overflow.

ESX-8852210 07:16:37 04/03/07 Potential Buffer Overflow.

ESX-9617902 07:18:08 04/03/07 Potential Buffer Overflow.

\[root@rswesx04 root]#

With no errors in the patch from scratch.....

Now the box that I was only adding the latest patches to.....

\[root@rswesxcolo root]# esxupdate -l query

Installed software bundles:

\---- Name \---- --- Install Date --- --- Summary ---

3.0.1-32039 06:01:56 03/13/07 Full 3.0.1 release of VMware ESX Server

ESX-2158032 10:02:21 03/13/07 Add LFENCE for RWO on AMD K8 before RevF

ESX-1410076 10:08:44 03/13/07 BSOD 0x109 during 64-bit Windows install

ESX-1006511 10:18:33 03/13/07 Fixing TX hang in 80003ES2LAN Controller

ESX-9986131 10:36:34 03/13/07 Updated openssh, python, and openssl

ESX-8173580 10:40:11 03/13/07 Fix COS Oops running Dell OM5 w/ QLogic

ESX-6921838 10:48:13 03/13/07 hot removal of a virtual disk thru SDK

ESX-2066306 10:49:28 03/13/07 Patch for VM crashes and possible freeze

ESX-6075798 10:51:47 03/13/07 Force vmxnet module to be installed 1st.

ESX-5497987 10:57:33 03/13/07 Fixes a misleading locking message.

ESX-3996003 11:08:38 03/13/07 To support the latest time zone rules.

ESX-2092658 11:20:51 03/13/07 SNMP agent returns full VM config file.

ESX-2031037 11:26:26 03/13/07 To provide LUN an unique ID Name

ESX-1917602 12:22:47 03/13/07 To improve compatibility for Windows NT.

ESX-1271657 12:26:20 03/13/07 Open IPMI improvement for slowness.

ESX-9865995 12:34:12 03/13/07 LUNs of MSA Array disappear and reappear

ESX-6856573 12:42:06 03/13/07 PhysMem_Get() accesses wrong pages

ESX-6050503 12:49:42 03/13/07 Error on "network adapters" tab in VC UI

ESX-5885387 12:54:38 03/13/07 RedHat Moderate: gzip security update

ESX-5031800 12:58:07 03/13/07 RHSA-2006:0749 tar security update

ESX-3199476 12:59:43 03/13/07 VMXNET shutdown may lead to BSOD

ESX-9916286 10:31:02 04/02/07 To update zlib library for ESX 3.0.1

ESX-2559638 10:32:17 04/02/07 Update info rpm for ESX 3.0.1.

ESX-2257739 10:34:25 04/02/07 To deliver several fixes in vmkernel.

ESX-1541239 10:35:56 04/02/07 Updates Emulex Fibre Channel driver.

ESX-1161870 06:48:01 04/03/07 Several bug fixes in vmware-vmx.

ESX-3416571 06:49:24 04/03/07 Potential Buffer Overflow.

ESX-5011126 06:50:45 04/03/07 Potential Buffer Overflow.

ESX-7737432 06:51:57 04/03/07 Potential Buffer Overflow.

ESX-7780490 06:53:08 04/03/07 Potential Buffer Overflow.

ESX-8174018 06:54:25 04/03/07 Potential Buffer Overflow.

ESX-8852210 06:58:13 04/03/07 Potential Buffer Overflow.

ESX-9617902 07:00:03 04/03/07 Potential Buffer Overflow.

Missing packages:

VMware-esx-debug-tools-3.0.1-34176

\[root@rswesxcolo root]#

Still the error from before....hmmmmmmm