[pca] PCA not reporting on patches that may need to be re-installed

[Norman Lyon]

But my point is that the version number stays consistent across all
the patches.  If you take an FCS build of S10 installed with
SUNWCXall, you'll find that the version for SUNWsshr is
"11.10.0,REV=2005.01.21.15.53."  Patch it to the latest rev, and the
version is still "11.10.0,REV=2005.01.21.15.53."  By your logic, it'll
never need to be patched, regardless of any fixes or changes in the
packages.

On the flip side, take your FCS box, but it's built with SUNWCrnet
(and never been patched).  Tomorrow, you get a requirement to add SSH
to the system, so you grab the SSH packages from the media you have on
hand, which is S10U6.  When you do that, you now have 119079-13,
120011-14, 123259-12, 125095-15, 128318-01, 137137-09, 138217-01,
138287-07.  You then notice it's never been patched, so decide it's
time to patch to current levels.  But since these 8 patches are on the
system (even though they're only patching SSH packages), they won't be
picked out by PCA (or most tools out there) as needing to be
installed, since they show up when doing a 'showrev -(a|p) | grep
${PATCH}'.

Now, let's look at just one of these patches, 137137-09.  Isn't that
the latest kernel patch?  You didn't update SUNWarc, SUNWarcr,
SUNWcakr, SUNWcar, SUNWcart200, SUNWckr, SUNWcpcu, SUNWcpr, SUNWcry,
SUNWcsd, SUNWcsl, SUNWcslr, SUNWcsr, SUNWcsu, SUNWdmgtu, SUNWdtrc,
SUNWefc, SUNWefcl, SUNWesu, SUNWfmd, SUNWfruip, SUNWhea, SUNWib,
SUNWiopc, SUNWipfh, SUNWipfu, SUNWiscsitgtr, SUNWiscsitgtu, SUNWkvm,
SUNWkvmt200, SUNWldomr, SUNWldomu, SUNWluxd, SUNWmdb, SUNWmdbr,
SUNWmdr, SUNWmdu, SUNWnfsckr, SUNWnfscu, SUNWnfsskr, SUNWnfssr,
SUNWnfssu, SUNWnisu, SUNWniumx, SUNWnxge, SUNWopenssl-libraries,
SUNWpcu, SUNWpd, SUNWpdu, SUNWpiclu, SUNWpmr, SUNWpmu, SUNWpppd,
SUNWrds, SUNWrsg, SUNWrsgk, SUNWs8brandr, SUNWs8brandu, SUNWs9brandr,
SUNWs9brandu, SUNWsmapi, SUNWssad, SUNWtavor, SUNWtoo, SUNWudapltu,
SUNWus, SUNWusb, SUNWust1, SUNWust2, SUNWwbsup, SUNWxcu4, SUNWypu,
SUNWzfskr, SUNWzfsr, SUNWzfsu, or SUNWzoneu, all of which are packages
that 137137-09 would have patched (if you waited to install SSH after
the patching).

As for comparing release dates of OS versus patches, you can't look at
that.  Testing and release cycles for the OS and patches are
different.  The OS, released in November was assembled Oct 27, but
it's patch levels are chosen earlier to meet a specific freeze and
testing cycle.  Newer patches get applied as required, but not solely
due to the fact that they exist.  On the flip side, some patches get
put into the OS that never officially get released to the service
contract paying public.