# CLUSTER_README
NAME: Solaris 9 Sun Alert Patch Cluster
DATE: 7/27/2006
########################################################################
This patch cluster is intended to provide a selected set of patches for
the designated Solaris release level. This is a bundled set of patches
conveniently wrapped for one-step installation. Only install this
cluster on the appropriate Solaris system. Carefully read all important
notes and install instructions provided in this README file before
installing the cluster. A cluster grouping does not necessarily imply
that additional compatibility testing has occurred since the individual
patches were released.
WARNING!! IT IS HIGHLY RECOMMENDED that the installation of this patch
cluster be performed in single-user mode (Run Level S).
########################################################################
CLUSTER DESCRIPTION
-------------------
This cluster contains the minimum set of Sun Alert patches that contribute
to the concerned Solaris Release. It also contains all the required dependency
patches, which may or may not be Sun Alert patches. These Sun Alert Solaris
patches are considered the most important and highly recommended patches that
avoid the most critical system, user, or security related bugs which have been
reported and fixed to date. In particular, Sun Alert patches are to resolve
issues regarding to Data Loss, Availability and Security.
This cluster is updated whenever there are new Sun Alert patches or any
updates to existing member patches. This cluster may contain obsoleted
patches.
For more information about corresponding Sun Alert notification, please
reference the Sun Alert Patch Report at
http://sunsolve.sun.com/pub-cgi/show.pl?target=sunalert_patches
PATCHES INCLUDED:
-----------------
113713-21 SunOS 5.9: pkginstall Patch
112951-13 SunOS 5.9: patchadd and patchrm Patch
117480-01 SunOS 5.9: pkgadd Patch
117067-02 Obsoleted by: 117067-03 SunOS 5.9: awk, nawk, oawk patch
121992-01 SunOS 5.9: fgrep Patch
112964-15 SunOS 5.9: ksh patch
114008-01 SunOS 5.9: cachefsd Patch
112998-03 SunOS 5.9: patch /usr/sbin/syslogd
112875-01 SunOS 5.9: patch /usr/lib/netsvc/rwall/rpc.rwalld
113146-05 Obsoleted by: 113146-06 SunOS 5.9: Apache Security Patch
112233-12 SunOS 5.9: Kernel Patch
114131-03 SunOS 5.9: multi-terabyte disk support - libadm.so.1 patch
113068-01 Obsoleted by: 113068-03 SunOS 5.9: hpc3130 patch
113273-10 SunOS 5.9: /usr/lib/ssh/sshd Patch
113279-01 SunOS 5.9: klmmod Patch
113023-01 SunOS 5.9: Broken preremove scripts in S9 ALC packages
113033-02 Obsoleted by: 113033-03 SunOS 5.9: patch /kernel/drv/isp and /kernel/drv/sparcv9/isp
112601-09 SunOS 5.9: PGX32 Graphics
113923-02 X11 6.6.1: security font server patch
113718-01 Obsoleted by: 113718-02 SunOS 5.9: usr/lib/utmp_update Patch
114135-01 Obsoleted by: 114135-03 SunOS 5.9: at utility Patch
114133-01 Obsoleted by: 114133-02 SunOS 5.9: mail Patch
114153-01 SunOS 5.9: Japanese SunOS 4.x Binary Compatibility(BCP) patch
113575-05 SunOS 5.9: sendmail Patch
114636-03 SunOS 5.9: KCMS security fix
114713-01 Obsoleted by: 114713-02 SunOS 5.9: newtask Patch
113240-09 Obsoleted by: 113240-10 CDE 1.5: dtsession patch
114684-03 SunOS 5.9: samba Patch
114861-01 SunOS 5.9: /usr/sbin/wall
114729-01 SunOS 5.9: usr/sbin/in.telnetd Patch
114482-04 SunOS 5.9: Product Registry CLI Revision
114571-01 Obsoleted by: 114571-02 SunOS 5.9: libc.so.*.9/bcp Patch
114569-02 SunOS 5.9: libdbm.so.1 Patch
112907-04 SunOS 5.9: libgss Patch
112908-20 SunOS 5.9: krb5 shared object Patch
112922-02 SunOS 5.9: krb5 lib Patch
114129-02 SunOS 5.9: multi-terabyte disk support -libuuid patch
114127-03 SunOS 5.9: abi_libefi.so.1 and fmthard Patch
115754-02 SunOS 5.9: zlib security Patch
114495-01 CDE 1.5: dtprintinfo patch
113073-14 SunOS 5.9: ufs and fsck patch
115172-01 SunOS 5.9: kernel/drv/le Patch
114971-01 Obsoleted by: 114971-02 SunOS 5.9: usr/kernel/fs/namefs Patch
112923-03 SunOS 5.9: krb5 usr/lib Patch
112617-02 CDE 1.5: rpc.cmsd patch
113451-05 Obsoleted by: 113451-06 SunOS 5.9: IKE Patch
114016-01 tomcat security patch
114049-12 SunOS 5.9: NSPR 4.1.6 / NSS 3.3.4.5
114125-01 SunOS 5.9: IKE config.sample patch
114361-01 SunOS 5.9: /kernel/drv/lofi Patch
114875-01 SunOS 5.9: XML library source patch
116237-01 SunOS 5.9: pfexec Patch
116247-01 SunOS 5.9: audit_warn Patch
116308-01 CDE 1.5: libDtHelp patch
116245-01 SunOS 5.9: uncompress Patch
113226-05 SunOS 5.9: hme Driver Patch
113482-02 SunOS 5.9: sbin/sulogin Patch
113322-02 SunOS 5.9: patch uucp
117071-01 SunOS 5.9: memory leak in llc1_ioctl()
117171-17 SunOS 5.9: Kernel Patch
117114-02 CDE 1.5: sdtwebclient patch
115683-03 SunOS 5.9: Header files Patch
116453-01 Obsoleted by: 116453-02 SunOS 5.9: sadmind default security level vulnerability
112810-06 CDE 1.5: dtmail patch
116538-03 SunOS 5.9: SUNW_disk_link.so Patch
112926-06 SunOS 5.9: smartcard Patch
116774-03 SunOS 5.9: ping patch
117455-01 SunOS 5.9: in.rwhod Patch
113096-03 X11 6.6.1: OWconfig patch
112834-06 SunOS 5.9: patch scsi
116105-04 X11 6.6.1: Freetype patch
117203-05 X11 6.6.1: fontconfig patch
112912-01 SunOS 5.9: libinetcfg Patch
112954-11 Obsoleted by: 112954-12 SunOS 5.9: uata Driver Patch
114332-19 Obsoleted by: 114332-20 SunOS 5.9: c2audit & *libbsm.so.1 Patch
112963-22 Obsoleted by: 112963-23 SunOS 5.9: linker Patch
112785-52 X11 6.6.1: Xsun patch
112874-16 Obsoleted by: 112874-18 SunOS 5.9: patch libc
117418-01 SunOS 5.9: consms patch
113277-24 Obsoleted by: 113277-25 SunOS 5.9: st, sd and ssd Patch
113319-22 SunOS 5.9: libnsl nispasswdd Patch
114128-02 SunOS 5.9: sd_lun patch
116532-03 SunOS 5.9: mpt Patch
117201-09 X11 6.6.1: st patch
115553-19 SunOS 5.9: USB Drivers and Framework Patch
117459-01 SunOS 5.9: routing socket module Patch
112661-08 SunOS 5.9: IIIM and X Input & Output Method patch
112807-10 Obsoleted by: 112807-11 CDE 1.5: dtlogin patch
113579-06 Obsoleted by: 113579-07 SunOS 5.9: ypserv/ypxfrd Patch
118300-01 Obsoleted by: 118300-02 X11 6.6.1: libXpm patch
118335-04 SunOS 5.9: sockfs Patch
112811-02 OpenWindows 3.7.0: Xview Patch
117445-01 SunOS 5.9: newgrp patch
119433-01 SunOS 5.9: telnet
117485-01 SunOS 5.9: fn_ctx_x500.so.1 Patch
112965-02 Obsoleted by: 112965-03 SunOS 5.9: patch /kernel/drv/sparcv9/eri
112921-06 Obsoleted by: 112921-07 SunOS 5.9: libkadm5 Patch
112817-17 Obsoleted by: 112817-18 SunOS 5.9: Sun GigaSwift Ethernet 1.0 driver patch
112925-03 Obsoleted by: 112925-04 SunOS 5.9: ktutil kdb5_util kadmin kadmin.local kadmind Patch
114219-11 CDE 1.5: sdtimage patch
113329-15 SunOS 5.9: lp Patch
114014-10 SunOS 5.9: libxml, libxslt and Freeware man pages Patch
113278-04 Obsoleted by: 113278-06 SunOS 5.9: NFS Daemon , rpcmod Patch
114363-03 SunOS 5.9: sort Patch
113280-06 SunOS 5.9: patch /usr/bin/cpio
113798-02 CDE 1.5: libDtSvc patch
116489-01 SunOS 5.9: ttymux Patch
116494-01 SunOS 5.9: libdevice Patch
116559-01 SunOS 5.9: powerd pmconfig patch
117162-01 SunOS 5.9: patch usr/src/uts/common/sys/cpc_impl.h
117477-01 SunOS 5.9: vol Patch
114344-06 Obsoleted by: 114344-07 SunOS 5.9: kernel/drv/arp Patch
114721-01 Obsoleted by: 114721-03 SunOS 5.9: usr/lib/fs/ufs/ufsrestore Patch
114356-04 Obsoleted by: 114356-05 SunOS 5.9: /usr/bin/ssh Patch
119449-01 SunOS 5.9: Perl Patch
120464-01 SunOS 5.9: network patch
114503-08 Obsoleted by: 114503-09 SunOS 5.9: usr/sadm/lib/usermgr/VUserMgr.jar Patch
116669-11 SunOS 5.9: md Patch
113318-21 Obsoleted by: 113318-22 SunOS 5.9: NFS Patch
116548-03 Obsoleted by: 116548-04 SunOS 5.9: ufsboot Patch
112960-14 Obsoleted by: 112960-16 SunOS 5.9: patch libsldap ldap_cachemgr libldap
116561-02 Obsoleted by: 116561-03 SunOS 5.9: platmod patch
116807-02 SunOS 5.9: /usr/sadm/lib/smc/lib/preload/jsdk21.jar patch
113077-08 Obsoleted by: 113077-09 SunOS 5.9: /platform/sun4u/kernal/drv/su Patch
118305-02 Obsoleted by: 118305-03 SunOS 5.9: TCP Patch
119211-05 SunOS 5.9: NSPR 4.5.2 / NSS 3.10.1 / JSS 4.1
114564-05 Obsoleted by: 114564-08 SunOS 5.9: /usr/sbin/in.ftpd Patch
112808-04 OpenWindows 3.6.3: Tooltalk patch
114555-29 SunOS 5.9: Sun XVR-1200 and Sun XVR-600 Graphics Accelerator Patch
112764-08 SunOS 5.9: Sun Quad FastEthernet qfe driver
115158-04 Obsoleted by: 115158-05 X11 6.6.1: xscreensaver patch
111711-14 SunOS 5.9: 32-bit Shared library patch for C++
118558-06 Obsoleted by: 118558-08 SunOS 5.9: Kernel Patch
111712-14 SunOS 5.9: 64-Bit Shared library patch for C++
112540-25 SunOS 5.9: Expert3D IFB Graphics Patch
112945-19 Obsoleted by: 112945-21 SunOS 5.9: wbem Patch
112970-06 Obsoleted by: 112970-07 SunOS 5.9: patch libresolv
IMPORTANT NOTES AND WARNINGS:
-----------------------------
SYSTEMS WITH LIMITED DISK SPACE SHOULD *NOT* INSTALL PATCHES: With or
without using the save option, the patch installation process will
still require some amount of disk space for installation and
administrative tasks in the /, /usr, /var, or /opt directories where
patches are typically installed. The exact amount of space will depend
on the machine's architecture, software packages already installed, and
the difference in the patched objects size. To be safe, it is not
recommended that a patch cluster be installed on a system with less
than 100 MBytes of available space in each of these directories. Running
out of disk space during installation may result in only partially
loaded patches. Be sure a recent full system backup is available in
case a problem occurs, and check to be sure adequate disk space is
available before installing the patch cluster.
SAVE AND BACKOUT OPTIONS:
By default, the cluster installation procedure uses the patchadd
command save feature to save the base objects being patched. Prior to
installing the patches the cluster installation script will first
determine if enough system disk space is available in /var/sadm/patch
to save the base objects and will terminate if not. Patches can only
be individually backed out with the original object restored if the
save option was used when installing this cluster. Please later refer
to the patchrm command manual page for instructions and more
information. It is possible to override the save feature by using the
[-nosave] option when executing the cluster installation script. Using
the nosave option, however, means that you will not be able to backout
individual patches if the need arises.
SPECIAL INSTALL INSTRUCTIONS:
As with any patch individually applied, there may be additional special
installation instructions which are documented in the individual patch
README file. It is recommended that each individual patch readme is
reviewed before installing this cluster to determine if any additional
installation steps are necessary for a patch. Otherwise it is possible
that an individual patch may still not be completely installed in all
respects after the cluster has been installed.
DISKLESS CLIENT SYSTEMS:
On server machines that service diskless clients, a
patch is NOT applied to existing clients or to the client root template
space. Therefore, all client machines of the server that will need
this cluster will have to individually apply this cluster. Install
this cluster on the client machines first, then the server.
A PATCH MAY NOT BE APPLIED:
Under certain circumstances listed below, a particular patch provided in
this cluster may not be installed if:
- The patch applies to a package that has not originally been installed
- The same or newer revision of the patch has already been installed
- The patch was obsoleted by another patch that has already been installed
- The package database is corrupt or missing
Use the 'showrev -p' command to compare the list of patches already
installed on the system with the patch list and revision levels provided
in this cluster. During installation, the install process will indicate
if a patch was not applied and more detailed installation messages will
be logged to the installation log file. The README file with each patch
also provides documentation regarding install and backout messages.
OLDER VERSIONS OF PATCHES ALREADY INSTALLED:
Backout of older versions of patches provided in the cluster is not
required in order for the newer version to be installed. However
not backing out an older rev before installing a newer rev will
cause showrev -p to continue to show the older rev along with the
newer rev. And, if the older rev was previously installed with
the save option, the older rev will continue to occupy disk space
in /var/sadm/patch even though it has been obsoleted by the new rev.
The patchrm command will only allow the most recently saved
objects to be restored, thus there are no serious risks associated
with leaving an older rev on the system. It just may, however,
avoid confusion and be more economical to first backout an older
patch revision before installing a newer revision.
INSTALL INSTRUCTIONS:
---------------------
First, be sure the patch cluster has been unzipped
if the cluster was received as a .zip file, then proceed as follows:
1) Decide on which method you wish to install the cluster:
Recommended Method Using Save Feature:
By default, the cluster installation procedure uses the patchadd
save feature to save the original objects being patched. Prior
to installing the patches the cluster installation script will
first determine if enough system disk space is available in
/var/sadm/patch to save the objects and will terminate if not.
Using the default save feature is recommended.
Method Using No Save Option:
It is possible to override the save feature by using the [-nosave]
option when executing the cluster installation script. Using the
nosave option means that you will not be able to backout individual
patches if the need arises.
2) Run the install_cluster script
cd <patch cluster directory>
./install_cluster
By default, a message warning the user to check for minimum disk
space allowance (separate from the save feature) will appear
and allow the user to abort if inadequate space exists. To
suppress this interactive message the "-q" (quiet) option can
be used when invoking install_cluster.
The progress of the script will be displayed on your terminal.
It should look something like:
# ./install_cluster
Patch cluster install script for <cluster name>
Determining if sufficient save space exists...
Sufficient save space exists, continuing...
Installing patches located in <patch cluster directory>
Installing <patch-id>
Installing <patch-id>
