# CLUSTER_README NAME: Solaris 8 Sun Alert Patch Cluster DATE: 07/27/2006 ######################################################################## This patch cluster is intended to provide a selected set of patches for the designated Solaris release level. This is a bundled set of patches conveniently wrapped for one-step installation. Only install this cluster on the appropriate Solaris system. Carefully read all important notes and install instructions provided in this README file before installing the cluster. A cluster grouping does not necessarily imply that additional compatibility testing has occurred since the individual patches were released. WARNING!! IT IS HIGHLY RECOMMENDED that the installation of this patch cluster be performed in single-user mode (Run Level S). ######################################################################## CLUSTER DESCRIPTION ------------------- This cluster contains the minimum set of Sun Alert patches that contribute to the concerned Solaris Release. It also contains all the required dependency patches, which may or may not be Sun Alert patches. These Sun Alert Solaris patches are considered the most important and highly recommended patches that avoid the most critical system, user, or security related bugs which have been reported and fixed to date. In particular, Sun Alert patches are to resolve issues regarding to Data Loss, Availability and Security. This cluster is updated whenever there are new Sun Alert patches or any updates to existing member patches. This cluster may contain obsoleted patches. For more information about corresponding Sun Alert notification, please reference the Sun Alert Patch Report at http://sunsolve.sun.com/pub-cgi/show.pl?target=sunalert_patches PATCHES INCLUDED: ----------------- 110380-06 SunOS 5.8: ufssnapshots support, libadm patch 110934-24 SunOS 5.8: package utilities patch 111111-06 SunOS 5.8: /usr/bin/nawk patch 110662-22 SunOS 5.8: ksh patch 112396-03 SunOS 5.8: /usr/bin/fgrep patch 108987-18 SunOS 5.8: Patch for patchadd and patchrm 111310-01 SunOS 5.8: /usr/lib/libdhcpagent.so.1 patch 108528-29 SunOS 5.8: kernel update and Apache patch 109223-06 Obsoleted by: 109223-07 SunOS 5.8: kpasswd, libgss.so.1 and libkadm5clnt.so.1 patch 109805-03 Obsoleted by: 109805-04 SunOS 5.8: pam_krb5.so.1 patch 110458-01 Obsoleted by: 110458-02 SunOS 5.8: libcurses patch 111325-02 SunOS 5.8: /usr/lib/saf/ttymon patch 111881-01 Obsoleted by: 111881-02 SunOS 5.8: /usr/kernel/strmod/telmod patch 109657-08 Obsoleted by: 109657-09 SunOS 5.8: isp driver patch 112325-01 SunOS 5.8: /kernel/fs/udfs and /kernel/fs/sparcv9/udfs patch 110943-04 SunOS 5.8: /usr/bin/tcsh patch 110387-04 Obsoleted by: 110387-05 SunOS 5.8: ufssnapshots support, ufsdump patch 110283-05 Obsoleted by: 110283-06 SunOS 5.8: mkfs and newfs patch 109277-04 SunOS 5.8: /usr/bin/iostat patch 111234-01 SunOS 5.8: patch finger 110903-06 Obsoleted by: 110903-07 SunOS 5.8: edit, ex, vedit, vi and view patch 108989-02 SunOS 5.8: /usr/kernel/sys/acctctl and /usr/kernel/sys/exacctsys patch 110386-01 Obsoleted by: 110386-02 SunOS 5.8: RBAC Feature Patch 111023-03 SunOS 5.8: /kernel/fs/mntfs and /kernel/fs/sparcv9/mntfs patch 111317-05 Obsoleted by: 111317-06 SunOS 5.8: /sbin/init and /usr/sbin/init patch 113648-03 Obsoleted by: 113648-04 SunOS 5.8: /usr/sbin/mount patch 115827-01 SunOS 5.8: /sbin/sulogin and /sbin/netstrategy patch 116602-01 SunOS 5.8: /sbin/uadmin and /sbin/hostconfig patch 108993-52 Obsoleted by: 108993-53 SunOS 5.8: LDAP2 client, libc, libthread and libnsl libraries patch 109470-02 CDE 1.4: Actions Patch 109783-02 Obsoleted by: 109783-03 SunOS 5.8: /usr/lib/nfs/nfsd and /usr/lib/nfs/lockd patch 110453-04 SunOS 5.8: admintool Patch 110945-08 SunOS 5.8: /usr/sbin/syslogd patch 111071-01 SunOS 5.8: cu patch 111232-01 SunOS 5.8: patch in.fingerd 110939-01 SunOS 5.8: /usr/lib/acct/closewtmp patch 111548-01 SunOS 5.8: catman, man, whatis, apropos and makewhatis patch 110322-01 Obsoleted by: 110322-02 SunOS 5.8: /usr/lib/netsvc/yp/ypbind patch 111504-01 SunOS 5.8: /usr/bin/tip patch 111606-06 SunOS 5.8: /usr/sbin/in.ftpd patch 110842-08 Obsoleted by: 110842-09 SunOS 5.8: hpc3130 driver patch for SUNW,Sun-Fire-880 112161-02 Obsoleted by: 112161-03 SunOS 5.8: remove libprtdiag_psr.so.1 of SUNW,Netra-T12 SUNW,Netra-T4 111792-13 Obsoleted by: 111792-14 SunOS 5.8: PICL plugins patch 108725-13 Obsoleted by: 108725-14 SunOS 5.8: st driver patch 108974-48 Obsoleted by: 108974-49 SunOS 5.8: dada, uata, dad, sd, ssd and scsi drivers patch 108977-01 Obsoleted by: 108977-02 SunOS 5.8: libsmedia patch 108968-07 Obsoleted by: 108968-08 SunOS 5.8: vol/vold/rmmount/dev_pcmem.so.1 patch 109882-06 SunOS 5.8: eri header files patch 111826-01 SunOS 5.8: /usr/sbin/sparcv7/whodo & /usr/sbin/sparcv9/whodo patch 108981-14 SunOS 5.8: /kernel/drv/hme and /kernel/drv/sparcv9/hme patch 111874-06 Obsoleted by: 111874-07 SunOS 5.8: usr/bin/mail patch 111596-02 Obsoleted by: 111596-03 SunOS 5.8: /usr/lib/netsvc/yp/rpc.yppasswdd patch 109667-04 Obsoleted by: 109667-05 SunOS 5.8: /usr/lib/inet/xntpd and /usr/sbin/ntpdate patch 110957-02 SunOS 5.8: /usr/bin/mailx patch 109147-40 SunOS 5.8: linker patch 109238-02 SunOS 5.8: /usr/bin/sparcv7/ipcs and /usr/bin/sparcv9/ipcs patch 112459-01 SunOS 5.8: /usr/lib/pt_chmod patch 112611-02 SunOS 5.8: /usr/lib/libz.so.1 patch 112425-01 SunOS 5.8: /usr/lib/fs/ufs/mount and /etc/fs/ufs/mount patch 111958-02 Obsoleted by: 111958-03 SunOS 5.8: /usr/lib/nfs/statd patch 109154-20 Obsoleted by: 109154-21 SunOS 5.8: PGX32 Graphics 112796-01 SunOS 5.8: /usr/sbin/in.talkd patch 112846-01 SunOS 5.8: /usr/lib/netsvc/rwall/rpc.rwalld patch 109328-03 Obsoleted by: 109328-04 SunOS 5.8: ypserv, ypxfr and ypxfrd patch 113792-01 OpenWindows 3.6.2: mailtool patch 109862-03 X11 6.4.1 Font Server patch 110896-02 Obsoleted by: 110896-03 SunOS 5.8: cachefs/mount patch 113650-01 Obsoleted by: 113650-02 SunOS 5.8: /usr/lib/utmp_update patch 114152-01 SunOS 5.8: Japanese SunOS 4.x Binary Compatibility(BCP) patch 108899-04 SunOS 5.8: /usr/bin/ftp patch 114673-01 SunOS 5.8: /usr/sbin/wall patch 114162-01 SunOS 5.8: /kernel/drv/lofi drivers and /usr/sbin/lofiadm patch 109778-09 Obsoleted by: 109778-10 SunOS 5.8: Misc loc have errors in CTYPE and lv colln monetary 109152-02 SunOS 5.8: /usr/4lib/libc.so.x.9 and libdbm patch 112609-02 SunOS 5.8: /kernel/drv/le and /kernel/drv/sparcv9/le patch 109326-18 SunOS 5.8: libresolv.so.2 and in.named patch 114984-01 SunOS 5.8: /usr/kernel/fs/namefs patch 110335-03 CDE 1.4: dtprintinfo patch 110820-12 SunOS 5.8: /platform/SUNW,Sun-Fire-15000/kernel/drv/sparcv9/dman patch 111647-01 BCP libmle buffer overflow 114045-12 Security 3.3.4.5: NSPR 4.1.6 / NSS 3.3.4.5 117049-02 CDE 1.4: sdtwebclient patch 116610-01 SunOS 5.8: audit_warn uses /usr/ucb/mail and writes to the console 109460-10 SunOS 5.8: socal and sf drivers patch 117000-05 SunOS 5.8: Kernel Patch 116455-01 SunOS 5.8: Solaris sadmind default security level 109613-07 CDE 1.4: dtmail patch 111844-03 X11 6.4.1 xdm patch 113679-07 Obsoleted by: 113679-08 SunOS 5.8: rmc_comm/rmcadm/rmclomv/librsc.so.1 patch 116986-02 SunOS 5.8: /usr/sbin/ping patch 116984-01 SunOS 5.8: in.rwhod Patch 113749-02 SunOS 5.8: User Manager CLI Patch 111400-03 SunOS 5.8: KCMS configure tool has a security vulnerability 111302-01 Obsoleted by: 111302-02 SunOS 5.8: EDHCP libraries patch 109077-10 Obsoleted by: 109077-11 SunOS 5.8: dhcp server and admin patch 116993-01 SunOS 5.8: /usr/bin/newgrp patch 109318-06 Obsoleted by: 109318-07 SunOS 5.8: Admin/Install patch 109134-31 Obsoleted by: 109134-32 SunOS 5.8: WBEM patch ltiple Synopsis: lines in patch README can cause CIM_ERR_FAILED 110668-05 SunOS 5.8: telnet patch 108949-08 Obsoleted by: 108949-09 CDE 1.4: libDtHelp/libDtSvc patch 110723-06 Obsoleted by: 110723-07 SunOS 5.8: /kernel/drv/sparcv9/eri patch 109931-10 CDE 1.4: sdtimage Patch 116997-01 SunOS 5.8: Federated Naming Service (FNS) X500 patch 112168-03 Obsoleted by: 112168-04 SunOS 5.8: patch dmfe and mii header file 111626-04 OpenWindows 3.6.2: Xview Patch 116973-02 SunOS 5.8: Apache Patch 112279-03 SunOS 5.8: pkgrm failed during upgrade from S8 to S9 with DSR 112237-13 Obsoleted by: 112237-14 SunOS 5.8: mech_krb5.so.1 patch 108576-41 Obsoleted by: 108576-42 SunOS 5.8: Expert3D IFB Graphics Patch 112668-03 SunOS 5.8: gzip patch 111570-04 SunOS 5.8: uucp patch 109320-17 Obsoleted by: 109320-18 SunOS 5.8: LP Patch 109091-06 Obsoleted by: 109091-07 SunOS 5.8: /usr/lib/fs/ufs/ufsrestore patch 110286-10 Obsoleted by: 110286-11 OpenWindows 3.6.2: Tooltalk patch 108869-17 Obsoleted by: 108869-18 SunOS 5.8: snmpdx/mibiisa/libssasnmp/snmplib patch 112390-11 Obsoleted by: 112390-12 SunOS 5.8: Supplemental Encryption Kerberos V5: mech_krb5.so.1 patch 109809-02 Obsoleted by: 109809-03 SunOS 5.8: timezone data patch 117350-33 Obsoleted by: 117350-34 SunOS 5.8: kernel patch 115275-06 Obsoleted by: 115275-07 SunOS 5.8: mpt driver patch 108434-12 Obsoleted by: 108434-13 32-Bit Shared library patch for C++ 122091-01 SunOS 5.8: perl patch 111313-03 Obsoleted by: 111313-04 SunOS 5.8: Viper Library Patch 109885-08 Obsoleted by: 109885-09 SunOS 5.8: glm patch 110898-02 Obsoleted by: 110898-03 SunOS 5.8: csh/pfcsh patch 116965-19 Obsoleted by: 116965-20 SunOS 5.8: ip/arp/tcp/udp/tun patch 108435-12 Obsoleted by: 108435-13 64-Bit Shared library patch for C++ 114554-16 Obsoleted by: 114554-17 SunOS 5.8: Sun XVR-1200 and Sun XVR-600 Graphics Accelerator Patch 111883-24 Obsoleted by: 111883-25 SunOS 5.8: Sun GigaSwift Ethernet 1.0 driver patch 110615-14 SunOS 5.8: sendmail patch 110910-03 SunOS 5.8: /usr/lib/fs/ufs/fsck patch 116950-05 Obsoleted by: 116950-06 SunOS 5.8: ufs patch 111321-03 Obsoleted by: 111321-04 SunOS 5.8: klmmod and klmops patch 109764-06 SunOS 5.8: /kernel/fs/hsfs and /kernel/fs/sparcv9/hsfs patch 108652-24 Obsoleted by: 108652-27 X11 6.4.1 Xsun patch 109354-23 Obsoleted by: 109354-24 CDE 1.4: dtsession patch 108919-21 Obsoleted by: 108919-22 CDE 1.4: dtlogin patch 114537-35 Obsoleted by: 114537-36 SunOS 5.8: Sun XVR-100 Graphics Accelerator Patch 110955-06 SunOS 5.8: /kernel/strmod/timod patch 109023-05 SunOS 5.8: ps cmd patch 109324-09 SunOS 5.8: sh/jsh/rsh/pfsh patch 109793-22 SunOS 5.8: su driver patch 109007-18 Obsoleted by: 109007-19 SunOS 5.8: at/atrm/batch/cron patch 109815-20 Obsoleted by: 109815-21 SunOS 5.8: se, acebus, pcf8574, pcf8591 and scsb patch 116962-03 Obsoleted by: 116962-04 SunOS 5.8: pcisch, pcipsy driver patch 108806-12 Obsoleted by: 108806-14 SunOS 5.8: Sun Quad FastEthernet qfe driver 110826-09 Obsoleted by: 110826-10 SunOS 5.8: platform/SUNW,Sun-Fire-15000/kernel/drv/sparcv9/schpc patch 110836-05 Obsoleted by: 110836-06 SunOS 5.8: /platform/sun4u/kernel/misc/sparcv9/gptwocfg patch 110837-04 Obsoleted by: 110837-05 SunOS 5.8: efcode patch 111335-32 SunOS 5.8: Sun-Fire-15000 dr, gptwo_pci & sc_gptwocfg drivers patch IMPORTANT NOTES AND WARNINGS: ----------------------------- SYSTEMS WITH LIMITED DISK SPACE SHOULD *NOT* INSTALL PATCHES: With or without using the save option, the patch installation process will still require some amount of disk space for installation and administrative tasks in the /, /usr, /var, or /opt directories where patches are typically installed. The exact amount of space will depend on the machine's architecture, software packages already installed, and the difference in the patched objects size. To be safe, it is not recommended that a patch cluster be installed on a system with less than 100 MBytes of available space in each of these directories. Running out of disk space during installation may result in only partially loaded patches. Be sure a recent full system backup is available in case a problem occurs, and check to be sure adequate disk space is available before installing the patch cluster. SAVE AND BACKOUT OPTIONS: By default, the cluster installation procedure uses the patchadd command save feature to save the base objects being patched. Prior to installing the patches the cluster installation script will first determine if enough system disk space is available in /var/sadm/patch to save the base objects and will terminate if not. Patches can only be individually backed out with the original object restored if the save option was used when installing this cluster. Please later refer to the patchrm command manual page for instructions and more information. It is possible to override the save feature by using the [-nosave] option when executing the cluster installation script. Using the nosave option, however, means that you will not be able to backout individual patches if the need arises. SPECIAL INSTALL INSTRUCTIONS: As with any patch individually applied, there may be additional special installation instructions which are documented in the individual patch README file. It is recommended that each individual patch readme is reviewed before installing this cluster to determine if any additional installation steps are necessary for a patch. Otherwise it is possible that an individual patch may still not be completely installed in all respects after the cluster has been installed. DISKLESS CLIENT SYSTEMS: On server machines that service diskless clients, a patch is NOT applied to existing clients or to the client root template space. Therefore, all client machines of the server that will need this cluster will have to individually apply this cluster. Install this cluster on the client machines first, then the server. A PATCH MAY NOT BE APPLIED: Under certain circumstances listed below, a particular patch provided in this cluster may not be installed if: - The patch applies to a package that has not originally been installed - The same or newer revision of the patch has already been installed - The patch was obsoleted by another patch that has already been installed - The package database is corrupt or missing Use the 'showrev -p' command to compare the list of patches already installed on the system with the patch list and revision levels provided in this cluster. During installation, the install process will indicate if a patch was not applied and more detailed installation messages will be logged to the installation log file. The README file with each patch also provides documentation regarding install and backout messages. OLDER VERSIONS OF PATCHES ALREADY INSTALLED: Backout of older versions of patches provided in the cluster is not required in order for the newer version to be installed. However not backing out an older rev before installing a newer rev will cause showrev -p to continue to show the older rev along with the newer rev. And, if the older rev was previously installed with the save option, the older rev will continue to occupy disk space in /var/sadm/patch even though it has been obsoleted by the new rev. The patchrm command will only allow the most recently saved objects to be restored, thus there are no serious risks associated with leaving an older rev on the system. It just may, however, avoid confusion and be more economical to first backout an older patch revision before installing a newer revision. INSTALL INSTRUCTIONS: --------------------- First, be sure the patch cluster has been unzipped if the cluster was received as a .zip file, then proceed as follows: 1) Decide on which method you wish to install the cluster: Recommended Method Using Save Feature: By default, the cluster installation procedure uses the patchadd save feature to save the original objects being patched. Prior to installing the patches the cluster installation script will first determine if enough system disk space is available in /var/sadm/patch to save the objects and will terminate if not. Using the default save feature is recommended. Method Using No Save Option: It is possible to override the save feature by using the [-nosave] option when executing the cluster installation script. Using the nosave option means that you will not be able to backout individual patches if the need arises. 2) Run the install_cluster script cd <patch cluster directory> ./install_cluster By default, a message warning the user to check for minimum disk space allowance (separate from the save feature) will appear and allow the user to abort if inadequate space exists. To suppress this interactive message the "-q" (quiet) option can be used when invoking install_cluster. The progress of the script will be displayed on your terminal. It should look something like: # ./install_cluster Patch cluster install script for <cluster name> Determining if sufficient save space exists... Sufficient save space exists, continuing... Installing patches located in <patch cluster directory> Installing <patch-id> Installing <patch-id>