# CLUSTER_README NAME: Solaris 8 x86_Recommended Patch Cluster DATE: Nov/11/04 ######################################################################## This patch cluster is intended to provide a selected set of patches for the designated Solaris release level. This is a bundled set of patches conveniently wrapped for one-step installation. Only install this cluster on the appropriate Solaris system. Carefully read all important notes and install instructions provided in this README file before installing the cluster. A cluster grouping does not necessarily imply that additional compatibility testing has occured since the individual patches were released. WARNING!! IT IS HIGHLY RECOMMENDED that the installation of this patch cluster be performed in single-user mode (Run Level S). ######################################################################## CLUSTER DESCRIPTION ------------------- These Solaris Recommended patches are considered the most important and highly recommended patches that avoid the most critical system, user, or security related bugs which have been reported and fixed to date. In most cases a Solaris security patch will be included in the recommended patch set. It is possible, however, that a security patch may not be included in the recommended set if it is determined to be a more obscure application specific issue and not generally applicable. During initial installation of the Solaris product other patches or patch sets may be provided with the product and required with product installation. Refer to the Solaris product installation documentation to be sure that all the patches required at product installation are already installed. This patch cluster can then be used to update or augment the system with the recommended patches included. PATCHES INCLUDED: ----------------- 108653-73 X11 6.4.1_x86: Xsun patch 110284-06 SunOS 5.8_x86: mkfs and newfs patch 110663-17 SunOS 5.8_x86: ksh patch 110952-06 SunOS 5.8_x86: /usr/sbin/tar and /usr/sbin/static/tar patch 110899-10 SunOS 5.8_x86: csh/pfcsh patch 110902-01 SunOS 5.8_x86: /kernel/drv/sgen patch 110459-02 SunOS 5.8_x86: libcurses patch 110076-01 SunOS 5.8_x86: /kernel/drv/devinfo patch 109321-12 SunOS 5.8_x86: LP Patch 109471-02 CDE 1.4_x86: Actions Patch 110287-11 OpenWindows 3.6.2_x86: Tooltalk patch 111072-01 SunOS 5.8_x86: cu patch 109092-07 SunOS 5.8_x86: /usr/lib/fs/ufs/ufsrestore patch 108870-27 SunOS 5.8_x86: snmp/mibiisa patch 111233-01 SunOS 5.8_x86: patch in.fingerd 111235-01 SunOS 5.8_x86: patch finger 111112-04 SunOS 5.8_x86: /usr/bin/nawk patch 111334-01 SunOS 5.8_x86: /kernel/drv/adp patch 110402-05 SunOS 5.8_x86: ufsdump patch 110940-01 SunOS 5.8_x86: /usr/lib/acct/closewtmp patch 111326-02 SunOS 5.8_x86: /usr/lib/saf/ttymon patch 110944-04 SunOS 5.8_x86: /usr/bin/tcsh patch 109784-02 SunOS 5.8_x86: /usr/lib/nfs/nfsd and /usr/lib/nfs/lockd patch 110323-02 SunOS 5.8_x86: /usr/lib/netsvc/yp/ypbind patch 111571-03 SunOS 5.8_x86: uucp patch 111549-01 SunOS 5.8_x86: catman, man, whatis, apropos and makewhatis patch 110454-04 SunOS 5.8_x86: admintool Patch 109325-06 SunOS 5.8_x86: sh/jsh/rsh/pfsh patch 110946-08 SunOS 5.8_x86: /usr/sbin/syslogd patch 111505-01 SunOS 5.8_x86: /usr/bin/tip patch 110917-05 SunOS 5.8_x86: /usr/bin/i86/sort and /usr/xpg4/bin/sort patch 111607-04 SunOS 5.8_x86: /usr/sbin/in.ftpd patch 111070-01 SunOS 5.8_x86: patch /etc/security/bsmunconv 111827-01 SunOS 5.8_x86: /usr/sbin/i86/whodo patch 109148-31 SunOS 5.8_x86: linker patch 111875-06 SunOS 5.8_x86: usr/bin/mail patch 109278-03 SunOS 5.8_x86: /usr/bin/iostat patch 110904-07 SunOS 5.8_x86: edit, ex, vedit, vi and view patch 109668-07 SunOS 5.8_x86: /usr/lib/inet/xntpd and /usr/sbin/ntpdate patch 109401-14 SunOS 5.8_x86: Updated video drivers and fixes 110958-02 SunOS 5.8_x86: /usr/bin/mailx patch 111627-02 OpenWindows 3.6.2_x86: Xview Patch 108950-08 CDE 1.4_x86: litDtHelp/libDtSvc patch 108920-22 CDE 1.4_x86: dtlogin patch 112326-01 SunOS 5.8_x86: /kernel/fs/udfs patch 112397-02 SunOS 5.8_x86: /usr/bin/fgrep patch 110669-04 SunOS 5.8_x86: /usr/sbin/in.telnetd patch 112460-01 SunOS 5.8_x86: /usr/lib/pt_chmod patch 111880-01 SunOS 5.8_x86: Solaris Product Registry patch SUNWwsr 112612-02 SunOS 5.8_x86: /usr/lib/libz.so.1 patch 112669-02 SunOS 5.8_x86: /usr/bin/gzip patch 111959-03 SunOS 5.8_x86: /usr/lib/nfs/statd patch 112797-01 SunOS 5.8_x86: /usr/sbin/in.talkd patch 112847-01 SunOS 5.8_x86: /usr/lib/netsvc/rwall/rpc.rwalld patch 112280-02 SunOS 5.8_x86: pkgrm failed during upgrade from Solaris 8 to Solaris 9 with DSR 111322-04 SunOS 5.8_x86: klmmod and klmops patch 108774-18 SunOS 5.8_x86: IIIM and X Input & Output Method patch 114252-01 SunOS 5.8_x86: pkgrm failed if upgrade from S8U7 to upper release 113793-01 OpenWindows 3.6.2_x86: mailtool patch 109863-03 X11 6.4.1_x86: Font Server patch 113651-02 SunOS 5.8_x86: /usr/lib/utmp_update patch 108900-04 SunOS 5.8_x86: /usr/bin/ftp patch 109329-05 SunOS 5.8_x86: ypserv, ypxfr and ypxfrd patch 110897-03 SunOS 5.8_x86: cachefs/mount patch 109355-23 CDE 1.4_x86: dtsession patch 114674-01 SunOS 5.8_x86: /usr/sbin/wall patch 114617-01 SunOS 5.8_x86: /usr/ucblib/libdbm.a and /usr/ucblib/libdbm.so.1 patch 114163-01 SunOS 5.8_x86: /kernel/drv/lofi drivers and /usr/sbin/lofiadm patch 114985-01 SunOS 5.8_x86: /usr/kernel/fs/namefs patch 110336-03 CDE 1.4_x86: dtprintinfo patch 109150-02 SunOS 5.8_x86:: /usr/sbin/mkdevmaps and /usr/sbin/mkdevalloc patch 109155-01 SunOS 5.8_x86: vgatext and terminal-emulator patch 109952-01 SunOS 5.8_x86: jserver buffer overflow 110069-04 CDE 1.4_x86: PDASync patch 110417-03 SunOS 5.8_x86: ATOK12 patch 110671-02 SunOS 5.8_x86: usr/sbin/static/rcp patch 110672-05 SunOS 5.8_x86: /kernel/misc/gld patch 111401-02 SunOS 5.8_x86: kcms_server and kcms_configure security fixes 111625-05 SunOS 5.8_x86: /usr/sbin/inetd patch 112040-01 SunOS 5.8_x86: usr/bin/ckitem patch 115798-01 CDE 1.4_x86: dtspcd Patch 116611-01 SunOS 5.8_x86: audit_warn uses /usr/ucb/mail and writes to the console 116442-01 SunOS 5.8_x86: Solaris sadmind default security level 111314-02 SunOS 5.8_x86: Viper Library Patch 111845-03 X11 6.4.1_x86: xdm patch 108978-04 SunOS 5.8_x86: libsmedia patch 111307-05 SunOS 5.8_x86: boot.bin, bootconf.exe, bootenv.rc and nbp patch 111311-01 SunOS 5.8_x86: /usr/lib/libdhcpagent.so.1 patch 111099-02 SunOS 5.8_x86: ROC timezone should be avoided for political reasons 110400-03 SunOS 5.8_x86: RBAC Feature Patch 111024-03 SunOS 5.8_x86: /kernel/fs/mntfs patch 111318-05 SunOS 5.8_x86: /sbin/init and /usr/sbin/init patch 113649-03 SunOS 5.8_x86: /usr/sbin/mount patch 115828-01 SunOS 5.8_x86: /sbin/sulogin and /sbin/netstrategy patch 116603-01 SunOS 5.8_x86: /sbin/uadmin and /sbin/hostconfig patch 110403-04 SunOS 5.8_x86: ufssnapshots support, libadm patch 109224-05 SunOS 5.8_x86: kpasswd, libgss.so.1 and libkadm5clnt.so.1 patch 111303-03 SunOS 5.8_x86: EDHCP libraries patch 111309-05 SunOS 5.8_x86: /usr/lib/libmtmalloc.so.1 patch 110610-04 SunOS 5.8_x86: cdio.h and commands.h USB patch 109884-02 SunOS 5.8_x86: /usr/include/sys/ecppsys.h patch 109929-03 SunOS 5.8_x86: pcmem and pcmcia patch 108969-10 SunOS 5.8_x86: vol/vold/rmmount patch 108976-06 SunOS 5.8_x86: /usr/bin/rmformat and /usr/sbin/format patch 108988-13 SunOS 5.8_x86: Patch for patchadd and patchrm 110935-21 SunOS 5.8_x86: package utilites patch 112238-10 SunOS 5.8_x86: mech_krb5.so.1 patch 109806-17 SunOS 5.8_x86: /usr/lib/security/pam_krb5.so.1 patch 112793-01 SunOS 5.8_x86: /usr/lib/pcmciad patch 112240-08 SunOS 5.8_x86: Supplemental Encryption Kerberos V5: mech_krb5.so.1 patch 108529-29 SunOS 5.8_x86: kernel update and Apache patch 108726-16 SunOS 5.8_x86: st driver patch 109459-03 SunOS 5.8_x86: /kernel/strmod/ldterm patch 109895-02 SunOS 5.8_x86: lp driver patch 109897-20 SunOS 5.8_x86: USB and Audio Framework patch 109923-05 SunOS 5.8_x86: pcelx and pcser driver patch 110325-04 SunOS 5.8_x86: /kernel/drv/asy and /usr/include/sys/asy.h patch 110462-03 SunOS 5.8_x86: ttcompat patch 110954-07 SunOS 5.8_x86: /usr/kernel/drv/llc2 patch 110956-05 SunOS 5.8_x86: /kernel/strmod/timod patch 111589-05 SunOS 5.8_x86: /kernel/drv/wc and /kernel/fs/specfs patch 111882-03 SunOS 5.8_x86: /usr/kernel/strmod/telmod patch 112352-02 SunOS 5.8_x86: /kernel/drv/i8042 and /kernel/drv/kb8042 patch 113686-04 SunOS 5.8_x86: logindmux/llc1/ptsl/bufmod/ptem patch 113688-01 SunOS 5.8_x86: /kernel/misc/kbtrans patch 114154-01 SunOS 5.8_x86: vuidm5p/vuidm4p/vuid3ps2/vuid2ps2 patch 117001-05 SunOS 5.8_x86: Kernel Patch 117351-13 SunOS 5.8_x86: kernel patch 116960-04 SunOS 5.8_x86: nfs and rpcmod patch 116974-01 SunOS 5.8_x86: Apache Patch 116966-05 SunOS 5.8_x86: ip/arp/tcp/udp patch 108990-02 SunOS 5.8_x86: acctctl & exacctsys patch 108994-38 SunOS 5.8_x86: LDAP2 client, libc, libthread and libnsl libraries patch 109239-02 SunOS 5.8_x86: /usr/bin/i86/ipcs patch 112139-01 SunOS 5.8_x86:: usr/bin/domainname patch 109327-16 SunOS 5.8_x86: libresolv.so.2 and in.named patch 111328-04 SunOS 5.8_x86: libsocket patch 110512-06 SunOS 5.8_x86: rpc.nisd patch 109319-35 SunOS 5.8_x86: suninstall Patch 111597-03 SunOS 5.8_x86: /usr/lib/netsvc/yp/rpc.yppasswdd patch 109008-18 SunOS 5.8_x86: at/atrm/batch/cron patch 109135-30 SunOS 5.8_x86: WBEM patch 110616-13 SunOS 5.8_x86: sendmail patch 108986-03 SunOS 5.8_x86: /usr/sbin/in.rshd patch 108836-04 CDE 1.4_x86: dtcm patch 109078-17 SunOS 5.8_x86: dhcp server and admin patch IMPORTANT NOTES AND WARNINGS: ----------------------------- SYSTEMS WITH LIMITED DISK SPACE SHOULD *NOT* INSTALL PATCHES: With or without using the save option, the patch installation process will still require some amount of disk space for installation and administrative tasks in the /, /usr, /var, or /opt directories where patches are typically installed. The exact amount of space will depend on the machine's architecture, software packages already installed, and the difference in the patched objects size. To be safe, it is not recommended that a patch cluster be installed on a system with less than 10 MBytes of available space in each of these directories. Running out of disk space during installation may result in only partially loaded patches. Be sure a recent full system backup is available in case a problem occurs, and check to be sure adequate disk space is available before installing the patch cluster. SAVE AND BACKOUT OPTIONS: By default, the cluster installation procedure uses the patchadd command save feature to save the base objects being patched. Prior to installing the patches the cluster installation script will first determine if enough system disk space is available in /var/sadm/patch to save the base objects and will terminate if not. Patches can only be individually backed out with the original object restored if the save option was used when installing this cluster. Please later refer to the patchrm command manual page for instructions and more information. It is possible to override the save feature by using the [-nosave] option when executing the cluster installation script. Using the nosave option, however, means that you will not be able to backout individual patches if the need arises. SPECIAL INSTALL INSTRUCTIONS: As with any patch individually applied, there may be additional special installation instructions which are documented in the individual patch README file. It is recommended that each individual patch readme is reviewed before installing this cluster to determine if any additional installation steps are necessary for a patch. Otherwise it is possible that an individual patch may still not be completely installed in all respects after the cluster has been installed. DISKLESS CLIENT SYSTEMS: On server machines that service diskless clients, a patch is NOT applied to existing clients or to the client root template space. Therefore, all client machines of the server that will need this cluster will have to individually apply this cluster. Install this cluster on the client machines first, then the server. A PATCH MAY NOT BE APPLIED: Under certain circumstances listed below, a particular patch provided in this cluster may not be installed if: - The patch applies to a package that has not originally been installed - The same or newer revision of the patch has already been installed - The patch was obsoleted by another patch that has already been installed - The package database is corrupt or missing Use the 'showrev -p' command to compare the list of patches already installed on the system with the patch list and revision levels provided in this cluster. During installation, the install process will indicate if a patch was not applied and more detailed installation messages will be logged to the installation log file. The README file with each patch also provides documentation regarding install and backout messages. OLDER VERSIONS OF PATCHES ALREADY INSTALLED: Backout of older versions of patches provided in the cluster is not required in order for the newer version to be installed. However not backing out an older rev before installing a newer rev will cause showrev -p to continue to show the older rev along with the newer rev. And, if the older rev was previously installed with the save option, the older rev will continue to occupy disk space in /var/sadm/patch even though it has been obsoleted by the new rev. The patchrm command will only allow the most recently saved objects to be restored, thus there are no serious risks associated with leaving an older rev on the system. It just may, however, avoid confusion and be more economical to first backout an older patch revision before installing a newer revision. INSTALL INSTRUCTIONS: --------------------- First, be sure the patch cluster has been unzipped if the cluster was received as a .zip file, then proceed as follows: 1) Decide on which method you wish to install the cluster: Recommended Method Using Save Feature: By default, the cluster installation procedure uses the patchadd save feature to save the original objects being patched. Prior to installing the patches the cluster installation script will first determine if enough system disk space is available in /var/sadm/patch to save the objects and will terminate if not. Using the default save feature is recommended. Method Using No Save Option: It is possible to override the save feature by using the [-nosave] option when executing the cluster installation script. Using the nosave option means that you will not be able to backout individual patches if the need arises. 2) Run the install_cluster script cd ./install_cluster By default, a message warning the user to check for minimum disk space allowance (separate from the save feature) will appear and allow the user to abort if inadequate space exists. To suppress this interactive message the "-q" (quiet) option can be used when invoking install_cluster. The progress of the script will be displayed on your terminal. It should look something like: # ./install_cluster Patch cluster install script for Determining if sufficient save space exists... Sufficient save space exists, continuing... Installing patches located in Installing Installing . . . Installing For more installation messages refer to the installation logfile: /var/sadm/install_data/_log Use '/usr/bin/showrev -p' to verify installed patch-ids. Refer to individual patch README files for more patch detail. Rebooting the system is usually necessary after installation. # 3) Check the logfile if more detail is needed. If errors are encountered during the installation of this cluster, error messages will be displayed during installation. More details about the causes of failure can be found in the detail logfile: more /var/sadm/install_data/_log If this log file previously existed the latest cluster installation data will be concatenated to the file, so check the end of the file. 4) THE MACHINE SHOULD BE REBOOTED FOR ALL PATCHES TO TAKE EFFECT!!