# CLUSTER_README NAME: Solaris 7 x86_Recommended Patch Cluster DATE: Nov/02/04 ######################################################################## This patch cluster is intended to provide a selected set of patches for the designated Solaris release level. This is a bundled set of patches conveniently wrapped for one-step installation. Only install this cluster on the appropriate Solaris system. Carefully read all important notes and install instructions provided in this README file before installing the cluster. A cluster grouping does not necessarily imply that additional compatibility testing has occured since the individual patches were released. WARNING!! IT IS HIGHLY RECOMMENDED that the installation of this patch cluster be performed in single-user mode (Run Level S). ######################################################################## CLUSTER DESCRIPTION ------------------- These Solaris Recommended patches are considered the most important and highly recommended patches that avoid the most critical system, user, or security related bugs which have been reported and fixed to date. In most cases a Solaris security patch will be included in the recommended patch set. It is possible, however, that a security patch may not be included in the recommended set if it is determined to be a more obscure application specific issue and not generally applicable. During initial installation of the Solaris product other patches or patch sets may be provided with the product and required with product installation. Refer to the Solaris product installation documentation to be sure that all the patches required at product installation are already installed. This patch cluster can then be used to update or augment the system with the recommended patches included. PATCHES INCLUDED: ----------------- 107545-03 SunOS 5.7_x86: /usr/lib/fs/ufs/fsck patch 106794-07 SunOS 5.7_x86: ufsdump and ufsrestore patch 106961-01 SunOS 5.7_x86: Manual Pages for patchadd.1m and patchrm.1m 107039-02 SunOS 5.7_x86: apropos/catman/man/whatis patch 107457-01 SunOS 5.7_x86: /etc/nsswitch.dns patch 107588-01 SunOS 5.7_x86: /usr/lib/acct/lastlogin patch 107637-10 SunOS 5.7_x86: X Input & Output Method patch 107888-10 CDE 1.3_x86: Actions Patch 106945-03 SunOS 5.7_x86: /kernel/fs/fifofs patch 106953-04 SunOS 5.7_x86: /usr/bin/uux patch 106979-12 SunOS 5.7_x86: sysid patch 107116-16 SunOS 5.7_x86: LP Patch 107260-04 SunOS 5.7_x86: /usr/sbin/vold patch 107455-06 SunOS 5.7_x86: /usr/bin/ftp patch 107685-11 SunOS 5.7_x86: sendmail patch 107793-05 SunOS 5.7_x86: /usr/bin/pax patch 107973-02 SunOS 5.7_x86: /usr/sbin/static/rcp patch 108302-02 SunOS 5.7_x86: /usr/sbin/in.tftpd patch 106737-04 OpenWindows 3.6.1_x86: mailtool vacation security patch 107339-03 SunOS 5.7_x86: kcms_server and kcms_configure security fixes 106935-04 CDE 1.3_x86: libDtSvc Patch 108220-01 CDE 1.3_x86: dtaction Patch 108222-02 CDE 1.3_x86: dtspcd Patch 107886-09 CDE 1.3_x86: dtprintinfo patch 108483-02 SunOS 5.7_x86: /usr/sbin/snoop patch 108663-01 SunOS 5.7_x86: Patch for sadmind 108722-05 SunOS 5.7_x86: admintool patch 108485-01 SunOS 5.7_x86: aset patch 108328-02 SunOS 5.7_x86: /usr/bin/cu patch 106939-08 SunOS 5.7_x86: libresolv, in.named, libadm, & nslookup patch 107710-24 SunOS 5.7_x86: libssasnmp/libssagent/snmpdx/snmpXdmid/mibiisa Patches 109254-07 SunOS 5.7_x86: /usr/bin/mail Patch 109405-01 SunOS 5.7_x86: /usr/vmsys/bin/chkperm patch 108799-02 SunOS 5.7_x86: /usr/bin/tip patch 109950-01 SunOS 5.7_x86: jserver buffer overflow 107795-01 SunOS 5.7_x86: ASET patch 107444-23 SunOS 5.7_x86: packaging utilities patch 109710-01 SunOS 5.7_x86: /usr/sbin/arp patch 110282-01 SunOS 5.7_x86: find's expansion of {} is broken 108377-39 OpenWindows 3.6.1_x86: Xsun Patch 107651-08 OpenWindows 3.6.1_x86: X11R6.4 Xprint Extension Patch 107655-10 OpenWindows 3.6.1_x86: X11R6.4 LBX & XRX Extensions Patch 110071-01 SunOS 5.7_x86: security: libcurses:setupterm has buffer overflow 110870-01 SunOS 5.7_x86: useradd, usermod do not handle some expiration dates 108552-03 SunOS 5.7_x86: /usr/sbin/rpc.nispasswdd patch 108763-01 SunOS 5.7_x86: /usr/sbin/rpc.nisd_resolv patch 108759-01 SunOS 5.7_x86: /usr/sbin/keyserv patch 108757-01 SunOS 5.7_x86: /usr/lib/netsvc/yp/rpc.ypupdated patch 108751-02 SunOS 5.7_x86: /usr/lib/netsvc/yp/ypbind patch 108749-02 SunOS 5.7_x86: /usr/lib/nfs/statd patch 107478-04 SunOS 5.7_x86: /usr/lib/nfs/mountd Patch 108765-01 SunOS 5.7_x86: /usr/sbin/rpc.bootparamd patch 107476-05 SunOS 5.7_x86: /usr/sbin/in.telnetd Patch 107842-03 SunOS 5.7_x86: rpcsec patch 108452-06 SunOS 5.7_x86: rpcmod patch 110882-01 SunOS 5.7_x86: semop() hangs due to receipt of a signal 107286-09 SunOS 5.7_x86: passwd & pam Library Patch 111094-01 SunOS 5.7_x86: /etc/security/bsmunconv patch 108055-03 SunOS 5.7_x86: adp bug fixes. 111350-02 SunOS 5.7: Patch for ttymon process modules 108575-04 SunOS 5.7_x86: /usr/bin/csh patch 111351-02 SunOS 5.7_x86: Patch for ttymon process modules 111243-01 SunOS 5.7_x86: Patch to /usr/bin/finger 111114-02 SunOS 5.7_x86: nawk Patch 110647-05 SunOS 5.7_x86: /usr/sbin/in.ftpd Patch 111667-01 SunOS 5.7_x86: bzip patch 107149-11 SunOS 5.7_x86: /kernel/fs/cachefs patch 111601-01 SunOS 5.7_x86: /usr/sbin/whodo Patch 111579-02 SunOS 5.7_x86: arp Patch 111591-03 SunOS 5.7_x86: rpc.yppasswdd Patch 109204-03 SunOS 5.7_x86: edit & vi patch 111239-01 SunOS 5.7_x86: Patch to /usr/sbin/in.fingerd 106951-25 SunOS 5.7_x86: Linker Patch 111981-02 SunOS 5.7_x86: ipcs Patch 109410-03 SunOS 5.7_x86: xntpd and ntpdate Patch 108088-06 SunOS 5.7_x86: Updated video drivers and fixes, S7 FCS Only 107442-03 SunOS 5.7_x86: /usr/bin/mailx Patch 112107-01 SunOS 5.7_x86: mkfs Patch 107375-02 Openwindows 3.6.1_x86: Xview Patch 112301-01 SunOS 5.7_x86:: usr/bin/login Patch 108163-08 SunOS 5.7_x86: jsh, rsh, ksh, rksh, sh Patch 108030-03 SunOS 5.7_x86: prodreg fix for Java 1.1 and Java 1.2 VM 110073-01 SunOS 5.7_x86: Sol7 11/99, can't mount udfs cdrom 112591-01 SunOS 5.7_x86: fgrep Patch 112821-01 SunOS 5.7_x86: in.talkd Patch 112900-01 SunOS 5.7_x86: rwall Patch 109745-02 SunOS 5.7_x86: nfsd and lockd Patch 108118-06 OpenWindows 3.6.1_x86: Font Server patch 113753-02 SunOS 5.7_x86: utmp_update patch 108320-03 SunOS 5.7_x86: /usr/bin/at patch 108801-03 SunOS 5.7_x86: /usr/lib/fs/cachefs patch 114892-01 SunOS 5.7_x86: /usr/sbin/wall patch 114945-01 SunOS 5.7_x86: namefs patch 115566-01 SunOS 5.7_x86: ed creates tempfiles in an insecure manner 107179-03 CDE 1.3_x86: libDtHelp.so.1 patch 108092-05 SunOS 5.7_x86: Updated video drivers and fixes, S7 3/99 Only 108839-03 SunOS 5.7_x86: allocate/mkdevmaps/mkdevalloc Patch 109402-05 SunOS 5.7_x86: Updated video drivers and fixes, S7 5/99 & Later 112449-01 SunOS 5.7_x86: pt_chmod Patch 112673-01 SunOS 5.7_x86: vipw Patch 116457-02 SunOS 5.7_x86: sadmind default security level 114286-01 SunOS 5.7_x86: nei bug fixes 107703-12 CDE 1.3_x86: dtsession patch 106542-36 SunOS 5.7_x86: Kernel Update Patch 108375-07 CDE 1.3_x86: libDtWidget Patch 107201-16 CDE 1.3_x86: dtmail patch 107452-08 SunOS 5.7_x86: /usr/sbin/cron Patch 107181-31 CDE 1.3_x86: dtlogin patch 106328-21 SunOS 5.7_x86: Shared library patch for C++ 109252-02 SunOS 5.7_x86: asy patch 106943-28 SunOS 5.7_x86: libnsl, rpc.nisd and nis_cachemgr Patch 107172-13 SunOS 5.7_x86: Fixes for patchadd and patchrm 106981-23 SunOS 5.7_x86: libthread patch 108761-02 SunOS 5.7_x86: /usr/sbin/rpcbind patch 108344-04 CDE 1.3_x86: sdtperfmeter patch 107404-03 SunOS 5.7_x86: rlmod & telmod patch 108382-02 SunOS 5.7_x86: ptsl driver patch 109373-02 SunOS 5.7_x86: /kernel/strmod/ldterm patch 110808-03 SunOS 5.7_x86: llc2 driver patch 111932-02 SunOS 5.7_x86: /kernel/strmod/timod Patch 107023-11 CDE 1.3_x86: Calendar Manager patch 107894-20 OpenWindows 3.6.1_x86: Tooltalk patch IMPORTANT NOTES AND WARNINGS: ----------------------------- SYSTEMS WITH LIMITED DISK SPACE SHOULD *NOT* INSTALL PATCHES: With or without using the save option, the patch installation process will still require some amount of disk space for installation and administrative tasks in the /, /usr, /var, or /opt directories where patches are typically installed. The exact amount of space will depend on the machine's architecture, software packages already installed, and the difference in the patched objects size. To be safe, it is not recommended that a patch cluster be installed on a system with less than 10 MBytes of available space in each of these directories. Running out of disk space during installation may result in only partially loaded patches. Be sure a recent full system backup is available in case a problem occurs, and check to be sure adequate disk space is available before installing the patch cluster. SAVE AND BACKOUT OPTIONS: By default, the cluster installation procedure uses the patchadd command save feature to save the base objects being patched. Prior to installing the patches the cluster installation script will first determine if enough system disk space is available in /var/sadm/patch to save the base objects and will terminate if not. Patches can only be individually backed out with the original object restored if the save option was used when installing this cluster. Please later refer to the patchrm command manual page for instructions and more information. It is possible to override the save feature by using the [-nosave] option when executing the cluster installation script. Using the nosave option, however, means that you will not be able to backout individual patches if the need arises. SPECIAL INSTALL INSTRUCTIONS: As with any patch individually applied, there may be additional special installation instructions which are documented in the individual patch README file. It is recommended that each individual patch readme is reviewed before installing this cluster to determine if any additional installation steps are necessary for a patch. Otherwise it is possible that an individual patch may still not be completely installed in all respects after the cluster has been installed. DISKLESS CLIENT SYSTEMS: On server machines that service diskless clients, a patch is NOT applied to existing clients or to the client root template space. Therefore, all client machines of the server that will need this cluster will have to individually apply this cluster. Install this cluster on the client machines first, then the server. A PATCH MAY NOT BE APPLIED: Under certain circumstances listed below, a particular patch provided in this cluster may not be installed if: - The patch applies to a package that has not originally been installed - The same or newer revision of the patch has already been installed - The patch was obsoleted by another patch that has already been installed - The package database is corrupt or missing Use the 'showrev -p' command to compare the list of patches already installed on the system with the patch list and revision levels provided in this cluster. During installation, the install process will indicate if a patch was not applied and more detailed installation messages will be logged to the installation log file. The README file with each patch also provides documentation regarding install and backout messages. OLDER VERSIONS OF PATCHES ALREADY INSTALLED: Backout of older versions of patches provided in the cluster is not required in order for the newer version to be installed. However not backing out an older rev before installing a newer rev will cause showrev -p to continue to show the older rev along with the newer rev. And, if the older rev was previously installed with the save option, the older rev will continue to occupy disk space in /var/sadm/patch even though it has been obsoleted by the new rev. The patchrm command will only allow the most recently saved objects to be restored, thus there are no serious risks associated with leaving an older rev on the system. It just may, however, avoid confusion and be more economical to first backout an older patch revision before installing a newer revision. INSTALL INSTRUCTIONS: --------------------- First, be sure the patch cluster has been unzipped if the cluster was received as a .zip file, then proceed as follows: 1) Decide on which method you wish to install the cluster: Recommended Method Using Save Feature: By default, the cluster installation procedure uses the patchadd save feature to save the original objects being patched. Prior to installing the patches the cluster installation script will first determine if enough system disk space is available in /var/sadm/patch to save the objects and will terminate if not. Using the default save feature is recommended. Method Using No Save Option: It is possible to override the save feature by using the [-nosave] option when executing the cluster installation script. Using the nosave option means that you will not be able to backout individual patches if the need arises. 2) Run the install_cluster script cd ./install_cluster By default, a message warning the user to check for minimum disk space allowance (separate from the save feature) will appear and allow the user to abort if inadequate space exists. To suppress this interactive message the "-q" (quiet) option can be used when invoking install_cluster. The progress of the script will be displayed on your terminal. It should look something like: # ./install_cluster Patch cluster install script for Determining if sufficient save space exists... Sufficient save space exists, continuing... Installing patches located in Installing Installing . . . Installing For more installation messages refer to the installation logfile: /var/sadm/install_data/_log Use '/usr/bin/showrev -p' to verify installed patch-ids. Refer to individual patch README files for more patch detail. Rebooting the system is usually necessary after installation. # 3) Check the logfile if more detail is needed. If errors are encountered during the installation of this cluster, error messages will be displayed during installation. More details about the causes of failure can be found in the detail logfile: more /var/sadm/install_data/_log If this log file previously existed the latest cluster installation data will be concatenated to the file, so check the end of the file. 4) THE MACHINE SHOULD BE REBOOTED FOR ALL PATCHES TO TAKE EFFECT!!