We are doing a pilot on BigFix 8.0.627 in our environment to automate patch management tasks. We generally get notified about the patches released from the OS vendors.
The problem we are facing is the identifier for the SUSE patches comes in “PATCH ******” format (eg PATCH 11190) in fixlet messages, whereas the vendor id of SUSE patches are in “SuSE-SA:2001:14” format.
For RHEL, Windows and AIX, the vendor id is mentioned in the fixlets messages and it is possible to filter them with vendor id (eg RHSA or APAR number etc).
Can anyone tell me, how can we map back to the vendor id of the SUSE patches from the patch number given in fixlets ?
Has this been answered elsewhere? I would also like to know since we are looking at patching our SuSE servers with BigFix it would be nice to know what Novell patch that take care of.
There is an action in each fixlet links to the corresponding bulletin page on the Novell website (http://download.novell.com/patch/finder/). There is no link to the mailing list postings. The only way to find the corresponding mailing list posting is to search the site (http://lists.opensuse.org) for the CVE ID mentioned in the fixlet description.
You can also filter fixlets by their CVE ID’s in the console. Edit > Find > Fixlet with the property “CVE ID” contains “CVE-123”.