As Paul wrote, you'll need to look to Oracle, via My Oracle Support (MOS) for some of the detailed information you are asking about. PCA can help by automatically providing the patch readme file for each missing required or security patch (missingrs).
>From my PCA proxy server the command looks like:
for i in `ls /pca/info`;do echo "## $i ##"; /usr/local/sbin/pca -l -f
/pca/info/${i} missingrs;done
Substitute 'r' for 'l' to get the readme instead of the list but you'll
probably want to get both.
/pca/info/${servername} is where I put the pkginfo.out showrev.out
uname.out files for each of my systems. You see, my PCA proxy is actually a
Sol11 system. :)
Michael
-----Original Message-----
From: pca [mailto:pca-boun...@lists.univie.ac.at] On Behalf Of Martin Paul
Sent: Friday, July 03, 2015 4:11 AM
To: PCA (Patch Check Advanced) Discussion
Subject: Re: [pca] Critical Patch List and its details.
Hi,
> I am doing one patching project in which I need all the critical patch list
> and its severity or detail that why we need to update the patch or impact if
> we don't update. Do you have any such kind of CMDB which will hekp me to
> prepare a patch list for each server?
PCA won't help you with this, as the information source it uses
(patchdiag.xref) doesn't contain such detailed information. Maybe the
Critical Patch Updates provide what you need:
http://www.oracle.com/technetwork/topics/security/alerts-086861.html
ISTR that it refers patches to CVEs in some document.
What PCA can do is show you the list of those patches from the
Recommended Patchset which are not installed on a specific system:
pca --minimal --list missingr
Best,
Martin.
smime.p7s
Description: S/MIME cryptographic signature
