CLUSTER_README

NAME: Solaris 8 Recommended Patch Cluster
DATE: Nov/30/07


INTENT:
-------

This patch cluster is intended to provide a selected set of patches for
the designated Solaris release level.  This is a bundled set of patches
conveniently wrapped for one-step installation.  Only install this
cluster on the appropriate Solaris system.  Carefully read all important
notes and install instructions provided in this README file before
installing the cluster.  A cluster grouping does not necessarily imply
that additional compatibility testing has occured since the individual
patches were released.
 
WARNING!! IT IS HIGHLY RECOMMENDED that the installation of this patch 
cluster be performed in single-user mode (Run Level S).


CLUSTER DESCRIPTION:
--------------------

These Solaris Recommended patches are considered the most important and
highly recommended patches that avoid the most critical system, user, or
security related bugs which have been reported and fixed to date.  In
most cases a Solaris security patch will be included in the recommended
patch set.  
 
During initial installation of the Solaris product other patches or patch
sets may be provided with the product and required with product installation.
Refer to the Solaris product installation documentation to be sure that all
the patches required at product installation are already installed.  This
patch cluster can then be used to update or augment the system with the
recommended patches included.


PATCHES INCLUDED:
-----------------

112396-03  SunOS 5.8: /usr/bin/fgrep patch
111111-07  SunOS 5.8: /usr/bin/nawk patch
110662-24  SunOS 5.8: ksh patch
110380-06  SunOS 5.8: ufssnapshots support, libadm patch
110934-26  SunOS 5.8: package utilities patch
108987-19  SunOS 5.8: Patch for patchadd and patchrm
112668-04  SunOS 5.8: gzip patch
111310-01  SunOS 5.8: /usr/lib/libdhcpagent.so.1 patch
110458-02  SunOS 5.8: libcurses patch
111325-02  SunOS 5.8: /usr/lib/saf/ttymon patch
110901-01  SunOS 5.8: /kernel/drv/sgen and /kernel/drv/sparcv9/sgen patch
112325-01  SunOS 5.8: /kernel/fs/udfs and /kernel/fs/sparcv9/udfs patch
110943-04  SunOS 5.8: /usr/bin/tcsh patch
109277-04  SunOS 5.8: /usr/bin/iostat patch
111234-01  SunOS 5.8: patch finger
110903-07  SunOS 5.8: edit, ex, vedit, vi and view patch
112138-01  SunOS 5.8:: usr/bin/domainname patch
109470-02  CDE 1.4: Actions Patch
109783-03  SunOS 5.8: /usr/lib/nfs/nfsd and /usr/lib/nfs/lockd patch
109951-01  SunOS 5.8: jserver buffer overflow
110453-04  SunOS 5.8: admintool Patch
111071-01  SunOS 5.8: cu patch
111232-01  SunOS 5.8: patch in.fingerd
110939-01  SunOS 5.8: /usr/lib/acct/closewtmp patch
111548-01  SunOS 5.8: catman, man, whatis, apropos and makewhatis patch
110322-02  SunOS 5.8: /usr/lib/netsvc/yp/ypbind patch
109882-06  SunOS 5.8: eri header files patch
111069-01  SunOS 5.8: bsmunconv overwrites root cron tab if cu created /tmp/root
111826-01  SunOS 5.8: /usr/sbin/sparcv7/whodo & /usr/sbin/sparcv9/whodo patch
110386-04  SunOS 5.8: RBAC Feature Patch
111023-03  SunOS 5.8: /kernel/fs/mntfs and /kernel/fs/sparcv9/mntfs patch
111317-07  SunOS 5.8: /sbin/init and /usr/sbin/init patch
113648-04  SunOS 5.8: mount patch
115827-01  SunOS 5.8: /sbin/sulogin and /sbin/netstrategy patch
116602-01  SunOS 5.8: /sbin/uadmin and /sbin/hostconfig patch
109667-07  SunOS 5.8: /usr/lib/inet/xntpd and /usr/sbin/ntpdate patch
110957-02  SunOS 5.8: /usr/bin/mailx patch
114251-01  SunOS 5.8: pkgrm failed if upgrade from S8U7 to upper release with DSR
112459-01  SunOS 5.8: /usr/lib/pt_chmod patch
111879-01  SunOS 5.8: Solaris Product Registry patch SUNWwsr
112611-02  SunOS 5.8: /usr/lib/libz.so.1 patch
112425-01  SunOS 5.8: /usr/lib/fs/ufs/mount and /etc/fs/ufs/mount patch
111958-03  SunOS 5.8: /usr/lib/nfs/statd patch
109154-21  SunOS 5.8: PGX32 Graphics
112796-01  SunOS 5.8: /usr/sbin/in.talkd patch
112846-01  SunOS 5.8: /usr/lib/netsvc/rwall/rpc.rwalld patch
110842-12  SunOS 5.8: hpc3130 driver patch for SUNW,Sun-Fire-880
113792-01  OpenWindows 3.6.2: mailtool patch
110896-03  SunOS 5.8: cachefs/mount patch
113650-02  SunOS 5.8: /usr/lib/utmp_update patch
114152-01  SunOS 5.8: Japanese SunOS 4.x Binary Compatibility(BCP) patch
108899-04  SunOS 5.8: /usr/bin/ftp patch
114673-01  SunOS 5.8: /usr/sbin/wall patch
114162-01  SunOS 5.8: /kernel/drv/lofi drivers and /usr/sbin/lofiadm patch
109152-02  SunOS 5.8: /usr/4lib/libc.so.x.9 and libdbm patch
112609-02  SunOS 5.8: /kernel/drv/le and /kernel/drv/sparcv9/le patch
114984-01  SunOS 5.8: /usr/kernel/fs/namefs patch
110335-03  CDE 1.4: dtprintinfo patch
109149-02  SunOS 5.8:: /usr/sbin/mkdevmaps and /usr/sbin/mkdevalloc patch
109202-06  SunOS 5.8: /kernel/misc/gld and /kernel/misc/sparcv9/gld patch
109695-03  SunOS 5.8: /etc/smartcard/opencard.properties patch
109928-05  SunOS 5.8: pcmem and pcmcia patch
110068-04  CDE 1.4: PDASync patch
111332-08  SunOS 5.8: /usr/lib/dcs patch
111647-01  BCP libmle buffer overflow
112039-01  SunOS 5.8: usr/bin/ckitem patch
114802-02  SunOS 5.8: Patch for assembler
115797-01  CDE 1.4: dtspcd Patch
117049-02  CDE 1.4: sdtwebclient patch
116610-01  SunOS 5.8: audit_warn uses /usr/ucb/mail and writes to the console
109460-10  SunOS 5.8: socal and sf drivers patch
116455-01  SunOS 5.8: Solaris sadmind default security level
109613-07  CDE 1.4: dtmail patch
113682-02  SunOS 5.8: /platform/sun4u/kernel/drv/sparcv9/pmugpio patch
116986-02  SunOS 5.8: /usr/sbin/ping patch
116984-01  SunOS 5.8: in.rwhod Patch
113749-02  SunOS 5.8: User Manager CLI Patch
111098-02  SunOS 5.8: ROC timezone should be avoided for political reasons
109883-02  SunOS 5.8: /usr/include/sys/ecppsys.h patch
110609-04  SunOS 5.8: cdio.h and command.h USB header patch
111302-03  SunOS 5.8: EDHCP libraries patch
111308-05  SunOS 5.8: /usr/lib/libmtmalloc.so.1 patch
116993-01  SunOS 5.8: /usr/bin/newgrp patch
110668-05  SunOS 5.8: telnet patch
108949-09  CDE 1.4: libDtHelp/libDtSvc patch
109931-10  CDE 1.4: sdtimage Patch
116997-01  SunOS 5.8: Federated Naming Service (FNS) X500 patch
110916-06  SunOS 5.8: sort patch
112168-04  SunOS 5.8: dmfe and mii header file patch
111626-04  OpenWindows 3.6.2: Xview Patch
112279-03  SunOS 5.8: pkgrm failed during upgrade from S8 to S9 with DSR
109223-10  SunOS 5.8: kpasswd, libgss.so.1 and libkadm5clnt.so.1 patch
108576-52  SunOS 5.8: Expert3D IFB Graphics Patch
111570-04  SunOS 5.8: uucp patch
112161-04  SunOS 5.8: remove libprtdiag_psr.so.1 of SUNW,Netra-T12 SUNW,Netra-T4 patch
112390-12  SunOS 5.8: Supplemental Encryption Kerberos V5: mech_krb5.so.1 patch
122091-01  SunOS 5.8: perl patch
111883-34  SunOS 5.8: Sun GigaSwift Ethernet 1.0 driver patch
111321-05  SunOS 5.8: klmmod and klmops patch
109764-06  SunOS 5.8: /kernel/fs/hsfs and /kernel/fs/sparcv9/hsfs patch
109147-44  SunOS 5.8: linker patch
109324-09  SunOS 5.8: sh/jsh/rsh/pfsh patch
108806-21  SunOS 5.8: Sun Quad FastEthernet qfe driver
124270-01  SunOS 5.8: PatchPro Core Functionality Patch
110836-06  SunOS 5.8: /platform/sun4u/kernel/misc/sparcv9/gptwocfg patch
110837-06  SunOS 5.8: efcode patch
109778-22  SunOS 5.8: Fix to incorrect pt_BR date format bug
110075-02  SunOS 5.8: /kernel/drv/devinfo and /kernel/drv/sparcv9/devinfo patch
123478-01  SunOS 5.8: fsck patch
110951-07  SunOS 5.8: /usr/sbin/tar and /usr/sbin/static/tar patch
111874-08  SunOS 5.8: usr/bin/mail patch
109320-19  SunOS 5.8: LP Patch
114045-14  Security 3.3.4.8: NSPR 4.1.6 / NSS 3.3.4.8
112345-04  SunOS 5.8: /usr/bin/pax patch
110945-09  SunOS 5.8: /usr/sbin/syslogd patch
110723-09  SunOS 5.8: eri driver patch
111504-02  SunOS 5.8: tip patch
111400-04  SunOS 5.8: kcms_server and kcms_configure patch
110416-07  SunOS 5.8: ATOK12 patch
110286-15  OpenWindows 3.6.2: Tooltalk patch
111844-04  X11 6.4.1 xdm patch
124969-01  SunOS 5.8: rm patch
109328-07  SunOS 5.8: ypserv, ypxfr and ypxfrd patch
109805-18  SunOS 5.8: /usr/lib/security/pam_krb5.so.1 patch
110898-14  SunOS 5.8: csh/pfcsh patch
115298-01  X11 6.4.1: xscreensaver patch
110670-04  SunOS 5.8: /usr/sbin/static/rcp patch
124420-02  X11 6.4.1: freetype2 patch
111313-06  SunOS 5.8: Viper Library Patch
114669-04  SunOS 5.8: /usr/bin/rcp patch
112097-07  SunOS 5.8: /usr/bin/cpio patch
127033-01  SunOS 5.8: pam_roles.so patch
109091-10  SunOS 5.8: /usr/lib/fs/ufs/ufsrestore patch
108869-34  SunOS 5.8: snmp/mibiisa patch
109454-06  SunOS 5.8: connld, fifofs, fifonode patch
114554-36  SunOS 5.8: Sun XVR-1200 and Sun XVR-600 Graphics Accelerator Patch
110910-09  SunOS 5.8: /usr/lib/fs/ufs utilities patch
114536-17  SunOS 5.8: FUJITSU PCI GigabitEthernet 2.0 patch
127548-01  SunOS 5.8: librpcsvc patch
109809-08  SunOS 5.8: timezone data patch
126928-02  SunOS 5.8: rpcsec_gss patch
109862-05  X11 6.4.1 Font Server patch
112438-03  SunOS 5.8: /kernel/drv/random patch
108434-22  SunOS 5.8: 32-Bit Shared library patch for C++
112237-14  SunOS 5.8: mech_krb5.so.1 patch
119067-08  X11 6.4.1: Xsun patch
108773-27  SunOS 5.8: IIIM and X Input & Output Method patch
108435-22  SunOS 5.8: 64-Bit Shared library patch for C++
109354-26  CDE 1.4: dtsession patch
108528-29  SunOS 5.8: kernel update  and Apache patch
108989-02  SunOS 5.8: /usr/kernel/sys/acctctl and /usr/kernel/sys/exacctsys patch
111881-03  SunOS 5.8: /usr/kernel/strmod/telmod patch
109657-11  SunOS 5.8: isp driver patch
108981-14  SunOS 5.8: /kernel/drv/hme and /kernel/drv/sparcv9/hme patch
108993-67  SunOS 5.8: LDAP2 client, libc, libthread and libnsl libraries patch
109238-02  SunOS 5.8: /usr/bin/sparcv7/ipcs and /usr/bin/sparcv9/ipcs patch
109887-18  SunOS 5.8: smartcard and usr/sbin/ocfserv patch
109893-04  SunOS 5.8: stc driver patch
109894-01  SunOS 5.8: /kernel/drv/sparcv9/bpp driver patch
109922-04  SunOS 5.8: pcelx and pcser driver patch
110389-05  SunOS 5.8: cvc CPU signature
110461-03  SunOS 5.8: ttcompat patch
110820-12  SunOS 5.8: /platform/SUNW,Sun-Fire-15000/kernel/drv/sparcv9/dman patch
109326-20  SunOS 5.8: libresolv.so.2 and in.named patch
117000-05  SunOS 5.8: Kernel Patch
113679-08  SunOS 5.8: rmc_comm/rmcadm/rmclomv/librsc.so.1 patch
113685-06  SunOS 5.8: logindmux/ptsl/ms/bufmod/llc1/kb/zs/zsh/ptem patch
111792-16  SunOS 5.8: PICL plugins patch
108835-04  CDE 1.4: dtcm patch
108909-13  CDE 1.4: Smart Card Administration GUI patch
109885-20  SunOS 5.8: glm patch
110953-08  SunOS 5.8: /usr/kernel/drv/llc2 patch
113687-02  SunOS 5.8: /kernel/misc/kbtrans patch
108919-30  CDE 1.4: dtlogin patch
110955-06  SunOS 5.8: /kernel/strmod/timod patch
117350-51  SunOS 5.8: kernel patch
116973-05  SunOS 5.8: Apache Patch
110826-12  SunOS 5.8: SunFire-15K schpc patch
111335-32  SunOS 5.8: Sun-Fire-15000 dr, gptwo_pci & sc_gptwocfg drivers patch
109318-39  SunOS 5.8: suninstall Patch
116962-12  SunOS 5.8: pcisch, pcipsy driver patch
110615-17  SunOS 5.8: sendmail patch
115275-09  SunOS 5.8: mpt driver patch
109023-07  SunOS 5.8: ps command patch
125802-01  SunOS 5.8: Modular Debugger patch
109077-20  SunOS 5.8: dhcp server and admin patch
109007-25  SunOS 5.8: at/atrm/batch/cron/inetd patch
108725-27  SunOS 5.8: st driver patch
116975-07  SunOS 5.8: kadb patch
116965-29  SunOS 5.8: ip/arp/tcp/udp/tun patch
109896-36  SunOS 5.8: USB and Audio Framework patch
116950-15  SunOS 5.8: ufs patch
114537-43  SunOS 5.8: Sun XVR-100 Graphics Accelerator Patch
126373-05  SunOS 5.8: libsldap patch
116959-20  SunOS 5.8: nfs and rpcmod patch
108995-08  SunOS 5.8: /usr/lib/libproc.so.1 patch
111596-03  SunOS 5.8: /usr/lib/netsvc/yp/rpc.yppasswdd patch
108974-56  SunOS 5.8: dada, uata, dad, sd, ssd and scsi drivers patch
108977-04  SunOS 5.8: libsmedia patch
111327-05  SunOS 5.8: libsocket patch
109458-04  SunOS 5.8: /kernel/strmod/ldterm patch
109815-23  SunOS 5.8: se, acebus, pcf8574, pcf8591 and scsb patch
109134-33  SunOS 5.8: WBEM patch
109793-31  SunOS 5.8: su driver patch
111606-07  SunOS 5.8: /usr/sbin/in.ftpd patch
109025-07  SunOS 5.8: truss patch
108968-11  SunOS 5.8: vol/vold/rmmount/dev_pcmem.so.1 patch
108985-03  SunOS 5.8: /usr/sbin/in.rshd patch
108975-10  SunOS 5.8: /usr/bin/rmformat and /usr/sbin/format patch
112792-01  SunOS 5.8: /usr/lib/pcmciad patch


IMPORTANT NOTES AND WARNINGS:
-----------------------------

SYSTEMS WITH LIMITED DISK SPACE SHOULD *NOT* INSTALL PATCHES:
With or without using the save option, the patch installation process 
will still require some amount of disk space for installation and
administrative tasks in the /, /usr, /var, or /opt directories where
patches are typically installed.  The exact amount of space will depend
on the machine's architecture, software packages already installed, and
the difference in the patched objects size.  To be safe, it is not
recommended that a patch cluster be installed on a system with less
than 10 MBytes of available space in each of these directories. Running
out of disk space during installation may result in only partially
loaded patches.  Be sure a recent full system backup is available in
case a problem occurs, and check to be sure adequate disk space is
available before installing the patch cluster.

SAVE AND BACKOUT OPTIONS:
By default, the cluster installation procedure uses the patchadd
command save feature to save the base objects being patched.  Prior to
installing the patches the cluster installation script will first
determine if enough system disk space is available in /var/sadm/patch
to save the base objects and will terminate if not.  Patches can only
be individually backed out with the original object restored if the
save option was used when installing this cluster.  Please later refer
to the patchrm command manual page for instructions and more
information.  It is possible to override the save feature by using the
[-nosave] option when executing the cluster installation script.  Using
the nosave option, however, means that you will not be able to backout
individual patches if the need arises.

SPECIAL INSTALL INSTRUCTIONS:
As with any patch individually applied, there may be additional special
installation instructions which are documented in the individual patch
README file.  It is recommended that each individual patch readme is
reviewed before installing this cluster to determine if any additional
installation steps are necessary for a patch.  Otherwise it is possible
that an individual patch may still not be completely installed in all
respects after the cluster has been installed.

DISKLESS CLIENT SYSTEMS:
On server machines that service diskless clients, a
patch is NOT applied to existing clients or to the client root template
space.  Therefore, all client machines of the server that will need
this cluster will have to individually apply this cluster.  Install
this cluster on the client machines first, then the server.

A PATCH MAY NOT BE APPLIED:
Under certain circumstances listed below, a particular patch provided in
this cluster may not be installed if:
 
- The patch applies to a package that has not originally been installed
- The same or newer revision of the patch has already been installed
- The patch was obsoleted by another patch that has already been installed
- The package database is corrupt or missing
 
Use the 'showrev -p' command to compare the list of patches already 
installed on the system with the patch list and revision levels provided
in this cluster.  During installation, the install process will indicate
if a patch was not applied and more detailed installation messages will
be logged to the installation log file.  The README file with each patch
also provides documentation regarding install and backout messages.

OLDER VERSIONS OF PATCHES ALREADY INSTALLED:
Backout of older versions of patches provided in the cluster is not
required in order for the newer version to be installed.  However
not backing out an older rev before installing a newer rev will
cause showrev -p to continue to show the older rev along with the
newer rev.  And, if the older rev was previously installed with
the save option, the older rev will continue to occupy disk space
in /var/sadm/patch even though it has been obsoleted by the new rev.
The patchrm command will only allow the most recently saved
objects to be restored, thus there are no serious risks associated
with leaving an older rev on the system.  It just may, however,
avoid confusion and be more economical to first backout an older
patch revision before installing a newer revision.


INSTALL INSTRUCTIONS:
---------------------

First, be sure the patch cluster has been unzipped
if the cluster was received as a .zip file, then proceed as follows:
 
 
1)      Decide on which method you wish to install the cluster:
 
Recommended Method Using Save Feature:
 
By default, the cluster installation procedure uses the patchadd
save feature to save the original objects being patched.  Prior
to installing the patches the cluster installation script will
first determine if enough system disk space is available in
/var/sadm/patch to save the objects and will terminate if not.
Using the default save feature is recommended. 
 
Method Using No Save Option:
 
It is possible to override the save feature by using the [-nosave]
option when executing the cluster installation script.  Using the
nosave option means that you will not be able to backout individual
patches if the need arises.
 
 
2)      Run the install_cluster script
 
        cd <patch cluster directory>
        ./install_cluster
 
By default, a message warning the user to check for minimum disk
space allowance (separate from the save feature) will appear
and allow the user to abort if inadequate space exists.  To
suppress this interactive message the "-q" (quiet) option can
be used when invoking install_cluster.
 
The progress of the script will be displayed on your terminal.
It should look something like:
 
# ./install_cluster
 
Patch cluster install script for <cluster name>
 
Determining if sufficient save space exists...
Sufficient save space exists, continuing...
Installing patches located in <patch cluster directory>
Installing <patch-id>
Installing <patch-id>
.
.
.
Installing <patch-id>
 
For more installation messages refer to the installation logfile:
   /var/sadm/install_data/<cluster name>_log
 
Use '/usr/bin/showrev -p' to verify installed patch-ids.
Refer to individual patch README files for more patch detail.
Rebooting the system is usually necessary after installation.
#
 
 
3)      Check the logfile if more detail is needed.
 
If errors are encountered during the installation of this cluster,
error messages will be displayed during installation.  More details
about the causes of failure can be found in the detail logfile:
 
        more /var/sadm/install_data/<cluster name>_log
 
If this log file previously existed the latest cluster installation
data will be concatenated to the file, so check the end of the file.
 
 
4)      THE MACHINE SHOULD BE REBOOTED FOR ALL PATCHES TO TAKE EFFECT!!

