topic Re: How to Check Previously installed hotfix before a new hotfix was installed in Firewall and Security Management

How to Check Previously installed hotfix before a new hotfix was installed

Oreoluwa — Wed, 30 Oct 2024 17:59:05 GMT

Hello,

I recently installed a new hotfix on my gateway, and I need to confirm what was previously installed before the new hotfix. How do I go about this?

I have checked GAIA, status and Actions and i see a couple of hotfixes installed as part of another hotfix. I have also tried to look through the backup file that was taken before the new hotfix was installed but I am not sure what would point to the previously installed hotfix within the backup file. I have used the command //show installer packages installed//, and I see a couple of hotfixes but I am not sure if this captures all the previously installed hotfixes.

Re: How to Check Previously installed hotfix before a new hotfix was installed

AkosBakos — Wed, 30 Oct 2024 19:28:14 GMT

Hi @Oreoluwa

The "Status and Actions" is a perfect way to check the previous version.

If you extract a backup and check this path:

\tmp\installed_hotfixes.txt

In my case this are installed.

CheckPoint#CPUpdates#All#6.0#5#4#BUNDLE_R81_20_JUMBO_HF_MAIN#65
CheckPoint#CPUpdates#All#6.0#5#4#BUNDLE_R81_20_JUMBO_HF_MAIN#76
CheckPoint#fw1#All#6.0#5#4#HOTFIX_R81_20_JHF_T53_BLOCK_INT_MAIN

The take 76 is the patch level when the backup was created.

And this is the same on the GAIA portal

I hope it helps

Akos

Re: How to Check Previously installed hotfix before a new hotfix was installed

the_rock — Wed, 30 Oct 2024 19:53:10 GMT

cpinfo -y fw1 should show you whats there as far as jumbo

[Expert@CP-GW:0]# cpinfo -y fw1

This is Check Point CPinfo Build 914000248 for GAIA
[FW1]
HOTFIX_TEX_ENGINE_R8120_AUTOUPDATE
HOTFIX_INEXT_NANO_EGG_AUTOUPDATE
HOTFIX_R81_20_JUMBO_HF_MAIN Take: 89
HOTFIX_R80_40_MAAS_TUNNEL_AUTOUPDATE
HOTFIX_PUBLIC_CLOUD_CA_BUNDLE_AUTOUPDATE
HOTFIX_GOT_TPCONF_AUTOUPDATE

FW1 build number:
This is Check Point's software version R81.20 - Build 039
kernel: R81.20 - Build 047

[Expert@CP-GW:0]#

Re: How to Check Previously installed hotfix before a new hotfix was installed

AkosBakos — Wed, 30 Oct 2024 19:56:36 GMT

Hi Andy

"I need to confirm what was previously...."

This command shows only the actual info, not the previous from CLI:-)

Re: How to Check Previously installed hotfix before a new hotfix was installed

the_rock — Wed, 30 Oct 2024 20:00:20 GMT

Right lol

But, good to know backup method you gave, let me try that now from the lab appliance.

Andy

Re: How to Check Previously installed hotfix before a new hotfix was installed

the_rock — Wed, 30 Oct 2024 20:02:57 GMT

Just checked the lab and in mine, shows below for that file.

Andy

CheckPoint#CPUpdates#All#6.0#5#4#BUNDLE_R81_20_JUMBO_HF_MAIN#84
CheckPoint#CPUpdates#All#6.0#5#4#BUNDLE_R81_20_JUMBO_HF_MAIN#89
CheckPoint#fw1#All#6.0#5#4#HOTFIX_R81_20_JHF_T53_BLOCK_INT_MAIN