# CLUSTER_README
NAME: Solaris 8 x86_Recommended Patch Cluster
DATE: Sep/18/06
########################################################################
This patch cluster is intended to provide a selected set of patches for
the designated Solaris release level. This is a bundled set of patches
conveniently wrapped for one-step installation. Only install this
cluster on the appropriate Solaris system. Carefully read all important
notes and install instructions provided in this README file before
installing the cluster. A cluster grouping does not necessarily imply
that additional compatibility testing has occured since the individual
patches were released.
WARNING!! IT IS HIGHLY RECOMMENDED that the installation of this patch
cluster be performed in single-user mode (Run Level S).
########################################################################
CLUSTER DESCRIPTION
-------------------
These Solaris Recommended patches are considered the most important and
highly recommended patches that avoid the most critical system, user, or
security related bugs which have been reported and fixed to date. In
most cases a Solaris security patch will be included in the recommended
patch set. It is possible, however, that a security patch may not be
included in the recommended set if it is determined to be a more obscure
application specific issue and not generally applicable.
During initial installation of the Solaris product other patches or patch
sets may be provided with the product and required with product installation.
Refer to the Solaris product installation documentation to be sure that all
the patches required at product installation are already installed. This
patch cluster can then be used to update or augment the system with the
recommended patches included.
PATCHES INCLUDED:
-----------------
112397-03 SunOS 5.8_x86: /usr/bin/fgrep patch
111112-06 SunOS 5.8_x86: /usr/bin/nawk patch
110663-23 SunOS 5.8_x86: ksh patch
110403-06 SunOS 5.8_x86: ufssnapshots support, libadm patch
110935-24 SunOS 5.8_x86: package utilites patch
108988-18 SunOS 5.8_x86: Patch for patchadd and patchrm
111307-07 SunOS 5.8_x86: boot.bin, bootconf.exe, bootenv.rc and nbp patch
111311-01 SunOS 5.8_x86: /usr/lib/libdhcpagent.so.1 patch
108529-29 SunOS 5.8_x86: kernel update and Apache patch
110902-01 SunOS 5.8_x86: /kernel/drv/sgen patch
110459-02 SunOS 5.8_x86: libcurses patch
109471-02 CDE 1.4_x86: Actions Patch
111072-01 SunOS 5.8_x86: cu patch
111233-01 SunOS 5.8_x86: patch in.fingerd
111235-01 SunOS 5.8_x86: patch finger
111334-01 SunOS 5.8_x86: /kernel/drv/adp patch
110940-01 SunOS 5.8_x86: /usr/lib/acct/closewtmp patch
111326-02 SunOS 5.8_x86: /usr/lib/saf/ttymon patch
110944-04 SunOS 5.8_x86: /usr/bin/tcsh patch
109784-03 SunOS 5.8_x86: /usr/lib/nfs/nfsd and /usr/lib/nfs/lockd patch
110323-02 SunOS 5.8_x86: /usr/lib/netsvc/yp/ypbind patch
111549-01 SunOS 5.8_x86: catman, man, whatis, apropos and makewhatis patch
110454-04 SunOS 5.8_x86: admintool Patch
110946-08 SunOS 5.8_x86: /usr/sbin/syslogd patch
111505-01 SunOS 5.8_x86: /usr/bin/tip patch
110917-05 SunOS 5.8_x86: /usr/bin/i86/sort and /usr/xpg4/bin/sort patch
111607-06 SunOS 5.8_x86: /usr/sbin/in.ftpd patch
111070-01 SunOS 5.8_x86: patch /etc/security/bsmunconv
111827-01 SunOS 5.8_x86: /usr/sbin/i86/whodo patch
110400-03 SunOS 5.8_x86: RBAC Feature Patch
111024-03 SunOS 5.8_x86: /kernel/fs/mntfs patch
111318-06 SunOS 5.8_x86: /sbin/init and /usr/sbin/init patch
113649-04 SunOS 5.8_x86: mount patch
115828-01 SunOS 5.8_x86: /sbin/sulogin and /sbin/netstrategy patch
116603-01 SunOS 5.8_x86: /sbin/uadmin and /sbin/hostconfig patch
108990-02 SunOS 5.8_x86: acctctl & exacctsys patch
108994-61 SunOS 5.8_x86: LDAP2 client, libc, libthread and libnsl libraries patch
109278-03 SunOS 5.8_x86: /usr/bin/iostat patch
111597-03 SunOS 5.8_x86: /usr/lib/netsvc/yp/rpc.yppasswdd patch
110904-07 SunOS 5.8_x86: edit, ex, vedit, vi and view patch
109239-02 SunOS 5.8_x86: /usr/bin/i86/ipcs patch
109668-07 SunOS 5.8_x86: /usr/lib/inet/xntpd and /usr/sbin/ntpdate patch
109401-14 SunOS 5.8_x86: Updated video drivers and fixes
110958-02 SunOS 5.8_x86: /usr/bin/mailx patch
112139-01 SunOS 5.8_x86:: usr/bin/domainname patch
112326-01 SunOS 5.8_x86: /kernel/fs/udfs patch
112460-01 SunOS 5.8_x86: /usr/lib/pt_chmod patch
111880-01 SunOS 5.8_x86: Solaris Product Registry patch SUNWwsr
112612-02 SunOS 5.8_x86: /usr/lib/libz.so.1 patch
111959-03 SunOS 5.8_x86: /usr/lib/nfs/statd patch
109148-40 SunOS 5.8_x86: linker patch
119068-03 X11 6.4.1_x86: Xsun patch
112797-01 SunOS 5.8_x86: /usr/sbin/in.talkd patch
112847-01 SunOS 5.8_x86: /usr/lib/netsvc/rwall/rpc.rwalld patch
112280-02 SunOS 5.8_x86: pkgrm failed during upgrade from Solaris 8 to Solaris 9 with DSR
114252-01 SunOS 5.8_x86: pkgrm failed if upgrade from S8U7 to upper release
109327-18 SunOS 5.8_x86: libresolv.so.2 and in.named patch
111328-04 SunOS 5.8_x86: libsocket patch
113793-01 OpenWindows 3.6.2_x86: mailtool patch
109863-03 X11 6.4.1_x86: Font Server patch
109224-08 SunOS 5.8_x86: kpasswd, libgss.so.1 and libkadm5clnt.so.1 patch
113651-02 SunOS 5.8_x86: /usr/lib/utmp_update patch
109884-02 SunOS 5.8_x86: /usr/include/sys/ecppsys.h patch
109929-03 SunOS 5.8_x86: pcmem and pcmcia patch
110610-04 SunOS 5.8_x86: cdio.h and commands.h USB patch
108900-04 SunOS 5.8_x86: /usr/bin/ftp patch
110897-03 SunOS 5.8_x86: cachefs/mount patch
109355-23 CDE 1.4_x86: dtsession patch
114674-01 SunOS 5.8_x86: /usr/sbin/wall patch
114617-01 SunOS 5.8_x86: /usr/ucblib/libdbm.a and /usr/ucblib/libdbm.so.1 patch
114163-01 SunOS 5.8_x86: /kernel/drv/lofi drivers and /usr/sbin/lofiadm patch
114985-01 SunOS 5.8_x86: /usr/kernel/fs/namefs patch
110336-03 CDE 1.4_x86: dtprintinfo patch
108978-04 SunOS 5.8_x86: libsmedia patch
108969-11 SunOS 5.8_x86: vol/vold/rmmount patch
108986-03 SunOS 5.8_x86: /usr/sbin/in.rshd patch
108836-04 CDE 1.4_x86: dtcm patch
109150-02 SunOS 5.8_x86:: /usr/sbin/mkdevmaps and /usr/sbin/mkdevalloc patch
109155-01 SunOS 5.8_x86: vgatext and terminal-emulator patch
109806-17 SunOS 5.8_x86: /usr/lib/security/pam_krb5.so.1 patch
109895-02 SunOS 5.8_x86: lp driver patch
109897-20 SunOS 5.8_x86: USB and Audio Framework patch
109923-05 SunOS 5.8_x86: pcelx and pcser driver patch
109952-01 SunOS 5.8_x86: jserver buffer overflow
110069-04 CDE 1.4_x86: PDASync patch
110325-04 SunOS 5.8_x86: /kernel/drv/asy and /usr/include/sys/asy.h patch
110462-03 SunOS 5.8_x86: ttcompat patch
110671-02 SunOS 5.8_x86: usr/sbin/static/rcp patch
110672-05 SunOS 5.8_x86: /kernel/misc/gld patch
111882-03 SunOS 5.8_x86: /usr/kernel/strmod/telmod patch
112040-01 SunOS 5.8_x86: usr/bin/ckitem patch
112352-02 SunOS 5.8_x86: /kernel/drv/i8042 and /kernel/drv/kb8042 patch
112793-01 SunOS 5.8_x86: /usr/lib/pcmciad patch
113686-05 SunOS 5.8_x86: logindmux/llc1/ptsl/bufmod/ptem patch
114154-01 SunOS 5.8_x86: vuidm5p/vuidm4p/vuid3ps2/vuid2ps2 patch
115798-01 CDE 1.4_x86: dtspcd Patch
117050-02 CDE 1.4_x86: sdtwebclient patch
116611-01 SunOS 5.8_x86: audit_warn uses /usr/ucb/mail and writes to the console
117001-05 SunOS 5.8_x86: Kernel Patch
116442-01 SunOS 5.8_x86: Solaris sadmind default security level
111401-03 SunOS 5.8_x86: kcms_server and kcms_configure security fixes
111845-03 X11 6.4.1_x86: xdm patch
116987-02 SunOS 5.8_x86: /usr/sbin/ping patch
116985-01 SunOS 5.8_x86: in.rwhod Patch
113750-02 SunOS 5.8_x86: User Manager CLI Patch
111099-02 SunOS 5.8_x86: ROC timezone should be avoided for political reasons
111303-03 SunOS 5.8_x86: EDHCP libraries patch
111309-05 SunOS 5.8_x86: /usr/lib/libmtmalloc.so.1 patch
116994-01 SunOS 5.8_x86: /usr/bin/newgrp patch
112098-06 SunOS 5.8_x86: /usr/bin/cpio patch
110669-05 SunOS 5.8_x86: telnet patch
108950-09 CDE 1.4_x86: litDtHelp/libDtSvc patch
116998-01 SunOS 5.8_x86: Federated Naming Service (FNS) X500 patch
109932-10 CDE 1.4_x86: sdtimage Patch
109078-19 SunOS 5.8_x86: dhcp server and admin patch
111627-03 OpenWindows 3.6.2_x86: Xview Patch
117351-39 SunOS 5.8_x86: kernel patch
114046-03 SunOS 5.8_x86: Netscape Portable Runtime(4.1.4)/Network Security System(3.3.4)
109614-07 CDE 1.4_x86: dtmail patch
111589-06 SunOS 5.8_x86: /kernel/drv/wc and /kernel/fs/specfs patch
112669-03 SunOS 5.8_x86: gzip patch
110287-14 OpenWindows 3.6.2_x86: Tooltalk patch
111571-04 SunOS 5.8_x86: uucp patch
116966-20 SunOS 5.8_x86: ip/arp/tcp/udp/tun patch
108726-23 SunOS 5.8_x86: st driver patch
112238-13 SunOS 5.8_x86: mech_krb5.so.1 patch
112240-11 SunOS 5.8_x86: Supplemental Encryption Kerberos V5: mech_krb5.so.1 patch
109008-22 SunOS 5.8_x86: at/atrm/batch/cron/inetd patch
111314-04 SunOS 5.8_x86: Viper Library Patch
109024-05 SunOS 5.8_x86: ps cmd patch
109810-03 SunOS 5.8_x86: timezone data patch
110899-13 SunOS 5.8_x86: csh/pfcsh patch
110954-08 SunOS 5.8_x86: /usr/kernel/drv/llc2 patch
108774-24 SunOS 5.8_x86: IIIM and X Input & Output Method patch
122092-01 SunOS 5.8_x86: perl patch
109765-06 SunOS 5.8_x86: /kernel/fs/hsfs patch
113688-02 SunOS 5.8_x86: /kernel/misc/kbtrans patch
110956-06 SunOS 5.8_x86: /kernel/strmod/timod patch
109325-09 SunOS 5.8_x86: sh/jsh/rsh/pfsh patch
111322-05 SunOS 5.8_x86: klmmod and klmops patch
109319-37 SunOS 5.8_x86: suninstall Patch
110417-06 SunOS 5.8_x86: ATOK12 patch
109644-12 SunOS 5.8_x86: /kernel/drv/sd patch
109092-09 SunOS 5.8_x86: /usr/lib/fs/ufs/ufsrestore patch
108870-32 SunOS 5.8_x86: snmp/mibiisa patch
109459-04 SunOS 5.8_x86: /kernel/strmod/ldterm patch
109135-33 SunOS 5.8_x86: WBEM patch
108920-30 CDE 1.4_x86: dtlogin patch
116960-14 SunOS 5.8_x86: nfs and rpcmod patch
111875-08 SunOS 5.8_x86: usr/bin/mail patch
123479-01 SunOS 5.8_x86: fsck patch
109329-06 SunOS 5.8_x86: ypserv, ypxfr and ypxfrd patch
110952-07 SunOS 5.8_x86: /usr/sbin/tar and /usr/sbin/static/tar patch
110911-05 SunOS 5.8_x86: /usr/lib/fs/ufs utilities patch
110616-16 SunOS 5.8_x86: sendmail patch
116974-04 SunOS 5.8_x86: Apache Patch
110076-02 SunOS 5.8_x86: /kernel/drv/devinfo patch
108976-10 SunOS 5.8_x86: /usr/bin/rmformat and /usr/sbin/format patch
109321-19 SunOS 5.8_x86: LP Patch
109455-05 SunOS 5.8_x86: /kernel/fs/fifofs patch
116951-11 SunOS 5.8_x86: ufs patch
IMPORTANT NOTES AND WARNINGS:
-----------------------------
SYSTEMS WITH LIMITED DISK SPACE SHOULD *NOT* INSTALL PATCHES: With or
without using the save option, the patch installation process will
still require some amount of disk space for installation and
administrative tasks in the /, /usr, /var, or /opt directories where
patches are typically installed. The exact amount of space will depend
on the machine's architecture, software packages already installed, and
the difference in the patched objects size. To be safe, it is not
recommended that a patch cluster be installed on a system with less
than 10 MBytes of available space in each of these directories. Running
out of disk space during installation may result in only partially
loaded patches. Be sure a recent full system backup is available in
case a problem occurs, and check to be sure adequate disk space is
available before installing the patch cluster.
SAVE AND BACKOUT OPTIONS:
By default, the cluster installation procedure uses the patchadd
command save feature to save the base objects being patched. Prior to
installing the patches the cluster installation script will first
determine if enough system disk space is available in /var/sadm/patch
to save the base objects and will terminate if not. Patches can only
be individually backed out with the original object restored if the
save option was used when installing this cluster. Please later refer
to the patchrm command manual page for instructions and more
information. It is possible to override the save feature by using the
[-nosave] option when executing the cluster installation script. Using
the nosave option, however, means that you will not be able to backout
individual patches if the need arises.
SPECIAL INSTALL INSTRUCTIONS:
As with any patch individually applied, there may be additional special
installation instructions which are documented in the individual patch
README file. It is recommended that each individual patch readme is
reviewed before installing this cluster to determine if any additional
installation steps are necessary for a patch. Otherwise it is possible
that an individual patch may still not be completely installed in all
respects after the cluster has been installed.
DISKLESS CLIENT SYSTEMS:
On server machines that service diskless clients, a
patch is NOT applied to existing clients or to the client root template
space. Therefore, all client machines of the server that will need
this cluster will have to individually apply this cluster. Install
this cluster on the client machines first, then the server.
A PATCH MAY NOT BE APPLIED:
Under certain circumstances listed below, a particular patch provided in
this cluster may not be installed if:
- The patch applies to a package that has not originally been installed
- The same or newer revision of the patch has already been installed
- The patch was obsoleted by another patch that has already been installed
- The package database is corrupt or missing
Use the 'showrev -p' command to compare the list of patches already
installed on the system with the patch list and revision levels provided
in this cluster. During installation, the install process will indicate
if a patch was not applied and more detailed installation messages will
be logged to the installation log file. The README file with each patch
also provides documentation regarding install and backout messages.
OLDER VERSIONS OF PATCHES ALREADY INSTALLED:
Backout of older versions of patches provided in the cluster is not
required in order for the newer version to be installed. However
not backing out an older rev before installing a newer rev will
cause showrev -p to continue to show the older rev along with the
newer rev. And, if the older rev was previously installed with
the save option, the older rev will continue to occupy disk space
in /var/sadm/patch even though it has been obsoleted by the new rev.
The patchrm command will only allow the most recently saved
objects to be restored, thus there are no serious risks associated
with leaving an older rev on the system. It just may, however,
avoid confusion and be more economical to first backout an older
patch revision before installing a newer revision.
INSTALL INSTRUCTIONS:
---------------------
First, be sure the patch cluster has been unzipped
if the cluster was received as a .zip file, then proceed as follows:
1) Decide on which method you wish to install the cluster:
Recommended Method Using Save Feature:
By default, the cluster installation procedure uses the patchadd
save feature to save the original objects being patched. Prior
to installing the patches the cluster installation script will
first determine if enough system disk space is available in
/var/sadm/patch to save the objects and will terminate if not.
Using the default save feature is recommended.
Method Using No Save Option:
It is possible to override the save feature by using the [-nosave]
option when executing the cluster installation script. Using the
nosave option means that you will not be able to backout individual
patches if the need arises.
2) Run the install_cluster script
cd <patch cluster directory>
./install_cluster
By default, a message warning the user to check for minimum disk
space allowance (separate from the save feature) will appear
and allow the user to abort if inadequate space exists. To
suppress this interactive message the "-q" (quiet) option can
be used when invoking install_cluster.
The progress of the script will be displayed on your terminal.
It should look something like:
# ./install_cluster
Patch cluster install script for <cluster name>
Determining if sufficient save space exists...
Sufficient save space exists, continuing...
Installing patches located in <patch cluster directory>
Installing <patch-id>
Installing <patch-id>
