# CLUSTER_README
NAME: Solaris 7_x86 Sun Alert Patch Cluster
DATE: May 17 2005
########################################################################
This patch cluster is intended to provide a selected set of patches for
the designated Solaris release level. This is a bundled set of patches
conveniently wrapped for one-step installation. Only install this
cluster on the appropriate Solaris system. Carefully read all important
notes and install instructions provided in this README file before
installing the cluster. A cluster grouping does not necessarily imply
that additional compatibility testing has occurred since the individual
patches were released.
WARNING!! IT IS HIGHLY RECOMMENDED that the installation of this patch
cluster be performed in single-user mode (Run Level S).
########################################################################
CLUSTER DESCRIPTION
-------------------
This cluster contain the minimum set of Sun Alert patches that contribute
to the concerned Solaris Release. It also contain all the required dependency
patches, which may or may not Sun Alert patches. These Sun Alert Solaris patches
are considered the most important and highly recommended patches that avoid
the most critical system, user, or security related bugs which have been
reported and fixed to date. In particular, Sun Alert patches are to resolve
issues regarding to Data Loss, Availability and Security.
This cluster is updated whenever there are new Sun Alert patches or any
updates to existing member patches. This cluster may contain obsoleted
patches.
For more information about corresponding Sun Alert notification, please
reference the Sun Alert Patch Report at
http://sunsolve.sun.com/pub-cgi/show.pl?target=sunalert_patches
PATCHES INCLUDED:
-----------------
112591-01 SunOS 5.7_x86: fgrep Patch
111114-02 SunOS 5.7_x86: nawk Patch
108163-05 Obsoleted by: 108163-07 SunOS 5.7_x86: jsh, rsh, sh, rksh, ksh patch
106939-07 Obsoleted by: 106939-08 SunOS 5.7_x86: libresolv, in.named, libadm, & nslookup patch
107444-16 Obsoleted by: 107444-17 SunOS 5.7_x86: packaging utilities patch
107172-12 Obsoleted by: 107172-13 SunOS 5.7_x86: Fixes for patchadd and patchrm
107545-03 SunOS 5.7_x86: /usr/lib/fs/ufs/fsck patch
106794-07 SunOS 5.7_x86: ufsdump and ufsrestore patch
106961-01 SunOS 5.7_x86: Manual Pages for patchadd.1m and patchrm.1m
107039-02 SunOS 5.7_x86: apropos/catman/man/whatis patch
108377-40 OpenWindows 3.6.1_x86: Xsun Patch
107703-12 CDE 1.3_x86: dtsession patch
114286-01 SunOS 5.7_x86: nei bug fixes
106542-39 Obsoleted by: 106542-40 SunOS 5.7_x86: Kernel Update Patch
106943-29 SunOS 5.7_x86: libnsl, rpc.nisd and nis_cachemgr Patch
108375-07 CDE 1.3_x86: libDtWidget Patch
107023-11 CDE 1.3_x86: Calendar Manager patch
107888-10 CDE 1.3_x86: Actions Patch
107457-01 SunOS 5.7_x86: /etc/nsswitch.dns patch
107588-01 SunOS 5.7_x86: /usr/lib/acct/lastlogin patch
107637-10 SunOS 5.7_x86: X Input & Output Method patch
107201-16 CDE 1.3_x86: dtmail patch
106945-03 SunOS 5.7_x86: /kernel/fs/fifofs patch
106953-04 SunOS 5.7_x86: /usr/bin/uux patch
106979-12 SunOS 5.7_x86: sysid patch
107260-04 SunOS 5.7_x86: /usr/sbin/vold patch
107452-06 Obsoleted by: 107452-07 SunOS 5.7_x86: /usr/sbin/cron patch
107455-06 SunOS 5.7_x86: /usr/bin/ftp patch
107685-11 SunOS 5.7_x86: sendmail patch
107793-05 SunOS 5.7_x86: /usr/bin/pax patch
107973-02 SunOS 5.7_x86: /usr/sbin/static/rcp patch
108302-02 SunOS 5.7_x86: /usr/sbin/in.tftpd patch
106737-04 OpenWindows 3.6.1_x86: mailtool vacation security patch
107894-10 Obsoleted by: 107894-13 OpenWindows 3.6.1_x86: Tooltalk patch
106935-04 CDE 1.3_x86: libDtSvc Patch
107181-31 CDE 1.3_x86: dtlogin patch
108220-01 CDE 1.3_x86: dtaction Patch
106951-23 SunOS 5.7_x86: Linker Patch
108222-02 CDE 1.3_x86: dtspcd Patch
107886-09 CDE 1.3_x86: dtprintinfo patch
108483-02 SunOS 5.7_x86: /usr/sbin/snoop patch
108663-01 SunOS 5.7_x86: Patch for sadmind
106328-21 SunOS 5.7_x86: Shared library patch for C++
108722-05 SunOS 5.7_x86: admintool patch
108485-01 SunOS 5.7_x86: aset patch
108328-02 SunOS 5.7_x86: /usr/bin/cu patch
109254-07 SunOS 5.7_x86: /usr/bin/mail Patch
109252-02 SunOS 5.7_x86: asy patch
109405-01 SunOS 5.7_x86: /usr/vmsys/bin/chkperm patch
108799-02 SunOS 5.7_x86: /usr/bin/tip patch
109950-01 SunOS 5.7_x86: jserver buffer overflow
107795-01 SunOS 5.7_x86: ASET patch
109710-01 SunOS 5.7_x86: /usr/sbin/arp patch
110282-01 SunOS 5.7_x86: find's expansion of {} is broken
106981-22 Obsoleted by: 106981-23 SunOS 5.7_x86: libthread patch
107651-08 OpenWindows 3.6.1_x86: X11R6.4 Xprint Extension Patch
107655-10 OpenWindows 3.6.1_x86: X11R6.4 LBX & XRX Extensions Patch
110071-01 SunOS 5.7_x86: security: libcurses:setupterm has buffer overflow
110870-01 SunOS 5.7_x86: useradd, usermod do not handle some expiration dates
108552-03 SunOS 5.7_x86: /usr/sbin/rpc.nispasswdd patch
108763-01 SunOS 5.7_x86: /usr/sbin/rpc.nisd_resolv patch
108761-01 Obsoleted by: 108761-02 SunOS 5.7_x86: /usr/sbin/rpcbind patch
108759-01 SunOS 5.7_x86: /usr/sbin/keyserv patch
108757-01 SunOS 5.7_x86: /usr/lib/netsvc/yp/rpc.ypupdated patch
108751-02 SunOS 5.7_x86: /usr/lib/netsvc/yp/ypbind patch
108749-01 Obsoleted by: 108749-02 SunOS 5.7_x86: /usr/lib/nfs/statd patch
107478-03 Obsoleted by: 107478-04 SunOS 5.7_x86: /usr/lib/nfs/mountd patch
108765-01 SunOS 5.7_x86: /usr/sbin/rpc.bootparamd patch
107476-05 SunOS 5.7_x86: /usr/sbin/in.telnetd Patch
107842-02 Obsoleted by: 107842-03 SunOS 5.7_x86: rpcsec patch
108452-06 SunOS 5.7_x86: rpcmod patch
110882-01 SunOS 5.7_x86: semop() hangs due to receipt of a signal
107286-05 Obsoleted by: 107286-06 SunOS 5.7_x86: passwd & pam library patch
111094-01 SunOS 5.7_x86: /etc/security/bsmunconv patch
108055-03 SunOS 5.7_x86: adp bug fixes.
111350-02 SunOS 5.7: Patch for ttymon process modules
108575-03 Obsoleted by: 108575-04 SunOS 5.7_x86: /usr/bin/csh patch
111351-02 SunOS 5.7_x86: Patch for ttymon process modules
111243-01 SunOS 5.7_x86: Patch to /usr/bin/finger
110647-06 SunOS 5.7_x86: /usr/sbin/in.ftpd Patch
111667-01 SunOS 5.7_x86: bzip patch
107149-10 Obsoleted by: 107149-11 SunOS 5.7_x86: /kernel/fs/cachefs patch
111601-01 SunOS 5.7_x86: /usr/sbin/whodo Patch
108344-04 CDE 1.3_x86: sdtperfmeter patch
111591-02 Obsoleted by: 111591-03 SunOS 5.7_x86: rpc.yppasswdd Patch
109204-03 SunOS 5.7_x86: edit & vi patch
111239-01 SunOS 5.7_x86: Patch to /usr/sbin/in.fingerd
111981-01 Obsoleted by: 111981-02 SunOS 5.7_x86: ipcs Patch
109410-03 SunOS 5.7_x86: xntpd and ntpdate Patch
107404-02 Obsoleted by: 107404-03 SunOS 5.7_x86: rlmod & telmod patch
108088-06 SunOS 5.7_x86: Updated video drivers and fixes, S7 FCS Only
107442-03 SunOS 5.7_x86: /usr/bin/mailx Patch
112107-01 SunOS 5.7_x86: mkfs Patch
107375-02 Openwindows 3.6.1_x86: Xview Patch
112301-01 SunOS 5.7_x86:: usr/bin/login Patch
108030-03 SunOS 5.7_x86: prodreg fix for Java 1.1 and Java 1.2 VM
110073-01 SunOS 5.7_x86: Sol7 11/99, can't mount udfs cdrom
112821-01 SunOS 5.7_x86: in.talkd Patch
112900-01 SunOS 5.7_x86: rwall Patch
109745-02 SunOS 5.7_x86: nfsd and lockd Patch
108118-06 OpenWindows 3.6.1_x86: Font Server patch
113753-01 Obsoleted by: 113753-02 SunOS 5.7_x86: buffer-overflow in load_utmpx_struct()
108320-03 SunOS 5.7_x86: /usr/bin/at patch
108801-03 SunOS 5.7_x86: /usr/lib/fs/cachefs patch
114892-01 SunOS 5.7_x86: /usr/sbin/wall patch
114945-01 SunOS 5.7_x86: namefs patch
115566-01 SunOS 5.7_x86: ed creates tempfiles in an insecure manner
107179-03 CDE 1.3_x86: libDtHelp.so.1 patch
108092-05 SunOS 5.7_x86: Updated video drivers and fixes, S7 3/99 Only
108382-02 SunOS 5.7_x86: ptsl driver patch
108839-03 SunOS 5.7_x86: allocate/mkdevmaps/mkdevalloc Patch
109373-02 SunOS 5.7_x86: /kernel/strmod/ldterm patch
109402-05 SunOS 5.7_x86: Updated video drivers and fixes, S7 5/99 & Later
110808-03 SunOS 5.7_x86: llc2 driver patch
111932-02 SunOS 5.7_x86: /kernel/strmod/timod Patch
112449-01 SunOS 5.7_x86: pt_chmod Patch
112673-01 SunOS 5.7_x86: vipw Patch
116457-02 SunOS 5.7_x86: sadmind default security level
118314-01 SunOS 5.7_x86: usr/sbin/ping Patch
118240-01 SunOS 5.7_x86: usr/sbin/in.rwhod Patch
107339-04 SunOS 5.7_x86: kcms_server and kcms_configure security fixes
118738-01 SunOS 5.7_x86: usr/bin/newgrp
107710-19 Obsoleted by: 107710-20 SunOS 5.7_x86: libssasnmp/libssagent/snmpdx/snmpXdmid/mibiisa Patches
119520-01 SunOS 5.7_x86: telnet Patch
107294-02 SunOS 5.7_x86: libgss.so.1 and gsscred patch
118954-02 Openwindow 3.6.1_x86: libtiff patch
107116-14 Obsoleted by: 107116-15 SunOS 5.7_x86: LP Patch
119424-01 SunOS 5.7_x86: X.500 Directory fn_ctx_x500.so.1 Patch
IMPORTANT NOTES AND WARNINGS:
-----------------------------
SYSTEMS WITH LIMITED DISK SPACE SHOULD *NOT* INSTALL PATCHES: With or
without using the save option, the patch installation process will
still require some amount of disk space for installation and
administrative tasks in the /, /usr, /var, or /opt directories where
patches are typically installed. The exact amount of space will depend
on the machine's architecture, software packages already installed, and
the difference in the patched objects size. To be safe, it is not
recommended that a patch cluster be installed on a system with less
than 100 MBytes of available space in each of these directories. Running
out of disk space during installation may result in only partially
loaded patches. Be sure a recent full system backup is available in
case a problem occurs, and check to be sure adequate disk space is
available before installing the patch cluster.
SAVE AND BACKOUT OPTIONS:
By default, the cluster installation procedure uses the patchadd
command save feature to save the base objects being patched. Prior to
installing the patches the cluster installation script will first
determine if enough system disk space is available in /var/sadm/patch
to save the base objects and will terminate if not. Patches can only
be individually backed out with the original object restored if the
save option was used when installing this cluster. Please later refer
to the patchrm command manual page for instructions and more
information. It is possible to override the save feature by using the
[-nosave] option when executing the cluster installation script. Using
the nosave option, however, means that you will not be able to backout
individual patches if the need arises.
SPECIAL INSTALL INSTRUCTIONS:
As with any patch individually applied, there may be additional special
installation instructions which are documented in the individual patch
README file. It is recommended that each individual patch readme is
reviewed before installing this cluster to determine if any additional
installation steps are necessary for a patch. Otherwise it is possible
that an individual patch may still not be completely installed in all
respects after the cluster has been installed.
DISKLESS CLIENT SYSTEMS:
On server machines that service diskless clients, a
patch is NOT applied to existing clients or to the client root template
space. Therefore, all client machines of the server that will need
this cluster will have to individually apply this cluster. Install
this cluster on the client machines first, then the server.
A PATCH MAY NOT BE APPLIED:
Under certain circumstances listed below, a particular patch provided in
this cluster may not be installed if:
- The patch applies to a package that has not originally been installed
- The same or newer revision of the patch has already been installed
- The patch was obsoleted by another patch that has already been installed
- The package database is corrupt or missing
Use the 'showrev -p' command to compare the list of patches already
installed on the system with the patch list and revision levels provided
in this cluster. During installation, the install process will indicate
if a patch was not applied and more detailed installation messages will
be logged to the installation log file. The README file with each patch
also provides documentation regarding install and backout messages.
OLDER VERSIONS OF PATCHES ALREADY INSTALLED:
Backout of older versions of patches provided in the cluster is not
required in order for the newer version to be installed. However
not backing out an older rev before installing a newer rev will
cause showrev -p to continue to show the older rev along with the
newer rev. And, if the older rev was previously installed with
the save option, the older rev will continue to occupy disk space
in /var/sadm/patch even though it has been obsoleted by the new rev.
The patchrm command will only allow the most recently saved
objects to be restored, thus there are no serious risks associated
with leaving an older rev on the system. It just may, however,
avoid confusion and be more economical to first backout an older
patch revision before installing a newer revision.
INSTALL INSTRUCTIONS:
---------------------
First, be sure the patch cluster has been unzipped
if the cluster was received as a .zip file, then proceed as follows:
1) Decide on which method you wish to install the cluster:
Recommended Method Using Save Feature:
By default, the cluster installation procedure uses the patchadd
save feature to save the original objects being patched. Prior
to installing the patches the cluster installation script will
first determine if enough system disk space is available in
/var/sadm/patch to save the objects and will terminate if not.
Using the default save feature is recommended.
Method Using No Save Option:
It is possible to override the save feature by using the [-nosave]
option when executing the cluster installation script. Using the
nosave option means that you will not be able to backout individual
patches if the need arises.
2) Run the install_cluster script
cd <patch cluster directory>
./install_cluster
By default, a message warning the user to check for minimum disk
space allowance (separate from the save feature) will appear
and allow the user to abort if inadequate space exists. To
suppress this interactive message the "-q" (quiet) option can
be used when invoking install_cluster.
The progress of the script will be displayed on your terminal.
It should look something like:
# ./install_cluster
Patch cluster install script for <cluster name>
Determining if sufficient save space exists...
Sufficient save space exists, continuing...
Installing patches located in <patch cluster directory>
Installing <patch-id>
Installing <patch-id>
