README NAME: Recommended OS Patchset Solaris 10 x86 DATE: 2018.01.11 NOTE: ----- Java 5 is no longer supported and therefore no longer updated with the latest security fixes. Java 5 is NOT recommended for use in production. All Java 5 patches for Solaris have been removed from this patchset (March 25th, 2017). It is recommended that customers remove old Java package versions from their systems. INTENT: ------- Please see "Critical Patch Updates, Security Alerts and Third Party Bulletin", http://www.oracle.com/technetwork/topics/security/alerts-086861.html for information on security vulnerabilities. For information on Solaris, click on the relevant CPU link, and select the "Oracle Sun Product" link. Please note, the Solaris Critical Patch Updates (CPUs) are re-named, archived copies of the Recommended patchset. Subsequent versions of the Recommended patchset will be a superset of the CPU. See: https://blogs.oracle.com/patch/entry/a_solaris_recommended_patchset_to NOTE: From 2011.06.28 some core changes have been made to the Recommended OS Patchset : - The patch inclusion criteria have been extended to include patches for selected issues identified by Oracle Proactive Services and the Oracle Technical Support Center. - The term 'Patch Cluster' has been replaced by 'Patchset', and the associated rebranding has been effected. The patchset install script is now named 'installpatchset'. A symlink to 'installpatchset' is provided in place of the legacy 'installcluster' script for now, but this symlink is purely transitional and will be removed at some future point in time. Where applicable, please update infrastructure to use the 'installpatchset' script directly. - The patchset 'README' file has been renamed '10_x86_Recommended.README'. For further information about these changes, please see: http://blogs.oracle.com/patch/entry/a_solaris_recommended_patchset_to The Recommended OS Patchset Solaris 10 x86 provides the minimum set of patches needed to address security and Sun Alert issues, and selected issues identified by Oracle Proactive Services and the Oracle Technical Support Center, for the Solaris 10 Operating System for x86. The patches contained in this patchset are considered the most important and highly recommended patches for Solaris 10. They provide the least amount of change required to address known security, data corruption and availability issues, as well as other functional issues that have been identified to be commonly encountered in the field. The Recommended OS Patchset comprises: 1. The latest revision of the patch and package utility patches that ensure correct patching operations. 2. The minimum revision of Solaris Operating System patches which address security and Sun Alert (data corruption and availability) issues, and selected issues identified by Oracle Proactive Services and the Oracle Technical Support Center. 3. Any patch that is required to correctly install the above patches. When new patches are released that meet the above criteria, the patchset is updated. If a patch is withdrawn from release due to problems, the patchset is also updated. The withdrawn patches are removed from the patchset. As the patchset contains the minimum revision (as opposed to the latest available revision) of patches meeting criteria two and three above, the patchset is likely to contain some obsoleted patches. This is deliberate and not a cause for concern. The patchset can be installed to a system running Solaris 10 3/05 ("FCS") or a later Solaris 10 Update. Depending on the current patch level of the target system, installation of this patchset can involve applying a number of complex Solaris 10 patches. These complex patches may require the user to follow specific install instructions listed in the Special Install Instructions section of the patches' README files, particularly if the patches are applied to the active boot environment of a system. The key issues are also described below in this README file. The matter of applying complex patches is primarily a concern for systems which are running an early Solaris 10 Update and have not recently been patched. To avoid applying complex patches, and to get full new feature functionality, it is recommended to install or upgrade these systems using the latest Solaris 10 Update install media. Following an install or upgrade operation, it is recommended to install this patchset to ensure the system has all current patches which address security and Sun Alert issues applied, including those patches released after the latest Solaris 10 Update content was finalised. This README contains important information. Please read this README before installing this patchset. PATCHSET DESCRIPTION: --------------------- This patchset is provided as a single zip file. The zip file is named: 10_x86_Recommended.zip Once the zip file has been downloaded, it may be extracted. For example, to extract this patchset in the current working directory, run: # unzip -q 10_x86_Recommended.zip If you experience problems unzipping this patchset please refer to MOS article 1020109.1 'Unzip of Solaris 10 Recommended Patchsets fails', available from: https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&doctype=PROBLEM&id=1020109.1 ************** ATTENTION ************** If this patchset is installed to the active boot environment, then depending on the starting patch level of the system, complete installation of the patchset may require up to three installation phases with intervening reboots. For further information, refer to section 'III. Installing this Patchset to the Active Boot Environment' below. If this patchset is installed to an inactive boot environment, then the need for multiple reboots and some special instructions can be avoided. *************** PASSCODE ************** The install script will only execute when the passcode specified in this README file is provided as a command line flag. This is a safety mechanism to ensure you have read this README. You must follow the Special Install Instructions for key patches such as those highlighted in this README. It is also strongly recommended to read the Special Install Instructions section of the README of patches included in this patchset to check for any special install instructions which may apply to your specific system configuration. PASSCODE: s10patchset PATCHES INCLUDED: ----------------- Note that the patch list order below reflects the patch install order. 120901-03 SunOS 5.10_x86: libzonecfg patch 121334-04 SunOS 5.10_x86: zoneadmd, zlogin and zoneadm patch 119255-93 SunOS 5.10_x86: Install and Patch Utilities Patch 119318-01 SunOS 5.10_x86: SVr4 Packaging Commands (usr) Patch 121297-01 SunOS 5.10_x86: fgrep patch 138216-03 SunOS 5.10_x86: sort patch 147062-02 SunOS 5.10_x86: awk patch 148337-02 SunOS 5.10_x86: awk patch 146055-07 Obsoleted by: 146697-04 SunOS 5.10_x86: ksh patch 142252-02 SunOS 5.10_x86: sh patch 125556-15 SunOS 5.10_x86: patch behavior patch 140797-01 SunOS 5.10_x86: umountall patch 113000-07 SunOS 5.10_x86: SUNWgrub patch 117435-02 SunOS 5.10_x86: biosdev patch 118344-14 SunOS 5.10_x86: Fault Manager Patch 118368-04 Obsoleted by: 118368-05 SunOS 5.10_x86: csh Patch 118778-14 Obsoleted by: 118778-15 SunOS 5.10_x86: Sun GigaSwift Ethernet 1.0 driver patch 121182-05 Obsoleted by: 121182-06 Sun Trunking Utility 1.3_x86: maintenance patch 121264-01 SunOS 5.10_x86: cadp160 driver patch 123840-04 SunOS 5.10_x86: Fault Manager Patch 138218-01 SunOS 5.10_x86: svccfg & svcprop patch 140861-02 SunOS 5.10_x86: su patch 121454-02 SunOS 5.10_x86: Sun Update Connection Client Foundation 121119-21 SunOS 5.10_x86: Update Connection System Client 1.0.20 118844-20 Obsoleted by: 118844-27 SunOS 5.10_x86: kernel Patch 118855-36 SunOS 5.10_x86: kernel patch 118919-21 SunOS 5.10_x86: Solaris Crypto Framework patch 119060-71 Obsoleted by: 119060-72 X11 6.6.2_x86: Xsun patch 119064-02 SunOS 5.10_x86: libXpm patch 119082-25 SunOS 5.10_x86: CD-ROM Install Boot Image Patch 119116-35 Mozilla 1.7_x86: patch 119118-52 Obsoleted by: 119118-53 Evolution 1.4.6_x86 patch 119131-33 SunOS 5.10_x86: Sun Fibre Channel Device Drivers 119214-36 NSS_NSPR_JSS 3.30.2_x86: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.2 119247-36 Obsoleted by: 119247-37 SunOS 5.10_x86: Manual Page updates for Solaris 10 124629-12 Obsoleted by: 124629-13 SunOS 5.10_x86: CD-ROM Install Boot Image Patch 119253-32 Obsoleted by: 119253-33 SunOS 5.10_x86: System Administration Applications Patch 123612-06 X11 6.6.2_x86: Trusted Extensions patch 119281-25 Obsoleted by: 119281-26 CDE 1.6_x86: Runtime library patch for Solaris 10 119279-39 Obsoleted by: 119279-43 CDE 1.6_x86: dtlogin patch 119283-01 CDE 1.6_x86: GNOME/CDE Menu for Solaris 10_x86 140900-01 SunOS 5.10_x86: [ir].manifest patch 119314-43 SunOS 5.10_x86: WBEM Patch 124189-03 SunOS 5.10_x86: Trusted Solaris Attributes Patch 119316-19 Obsoleted by: 119316-20 SunOS 5.10_x86: Solaris Management Applications Patch 122213-46 GNOME 2.6.0_x86: GNOME Desktop Patch 119411-10 GNOME 2.6.0_x86: GNOME Applets Patch 120200-15 Obsoleted by: 120200-16 SunOS 5.10_x86: sysidtool Patch 119535-29 Obsoleted by: 119535-30 SunOS 5.10_x86: Flash Archive Patch 119539-19 GNOME 2.6.0_x86: Window Manager Patch 120100-08 APOC 1.2_x86: Sun Java(tm) Desktop System Configuration Shared Libraries 119547-08 APOC 1.2_x86: APOC Configuration Agent Patch 119549-14 GNOME 2.6.0_x86: Gnome Multi-protocol instant messaging client Patch 119649-03 SunOS 5.10_x86: vlan driver patch 120273-42 SunOS 5.10_x86: SMA patch 122641-06 SunOS 5.10_x86: zfs genesis patch 127756-01 SunOS 5.10_x86: Fault Manager patch 125504-02 SunOS 5.10_x86: package-move-of-IP-objects patch 124205-05 Obsoleted by: 120037-15 SunOS 5.10_x86: zfs patch 122661-08 Obsoleted by: 120012-14 SunOS 5.10_x86: zones patch 125548-02 SunOS 5.10_x86: zoneadm indirect dependency patch 126424-03 SunOS 5.10_x86: bootadm patch 120012-14 SunOS 5.10_x86: kernel patch 139521-02 SunOS 5.10_x86: package specific [ir].manifest removal patch 127128-11 SunOS 5.10_x86: kernel patch 138867-02 SunOS 5.10_x86: sharetab patch 138884-01 SunOS 5.10_x86: GRUB patch 137138-09 SunOS 5.10_x86: kernel patch 141017-01 SunOS 5.10_x86: Dummy Patch 139556-08 SunOS 5.10_x86: Kernel Patch 142293-01 SunOS 5.10_x86: Place Holder patch 141445-09 SunOS 5.10_x86: kernel patch 142912-01 SunOS 5.10_x86: KU Place Holder patch 142934-05 SunOS 5.10_x86: failsafe patch 142910-17 SunOS 5.10_x86: kernel patch 144527-02 Obsoleted by: 144527-03 SunOS 5.10_x86: place holder patch 144501-19 SunOS 5.10_x86: Solaris kernel patch 147443-01 Obsoleted by: 147443-02 SunOS 5.10_x86: place holder patch 147148-26 SunOS 5.10_x86: kernel patch 150511-03 SunOS 5.10_x86: /var/svc/manifest/system/sysidtool.xml patch 150552-03 SunOS 5.10_x86: local-fs.xml patch 148072-19 SunOS 5.10_x86: openssl patch 151913-11 SunOS 5.10_x86: OpenSSL 1.0.2 patch 119758-43 SunOS 5.10_x86: Samba patch 119765-07 Obsoleted by: 119765-08 SunOS 5.10_x86: ipmitool patch 119784-40 SunOS 5.10_x86: BIND patch 119811-08 SunOS 5.10_x86: International Components for Unicode Patch 119813-24 X11 6.6.2_x86: FreeType patch 119901-17 GNOME 2.6.0_x86: GNOME libtiff - library for reading and writing TIFF Patch 119904-02 Openwindows 3.7.3_x86: Xview Patch 119907-22 GNOME 2.6.0_x86: Virtual File System Framework patch 119956-04 Obsoleted by: 143734-03 CDE 1.6_x86: Tooltalk Runtime patch for Solaris 10 119964-24 Obsoleted by: 119964-25 SunOS 5.10_x86: Shared library patch for C++_x86 119967-01 Obsoleted by: 119967-02 SunOS 5.10_x86: Math Libraries (libm+libmvec) patch 119987-03 SunOS 5.10_x86: clri patch 120095-36 X11 6.6.2_x86: xscreensaver patch 120102-01 SunOS 5.10_x86: patch usr/lib/libsmedia.so.1 120202-08 X11 6.8.0_x86: Xorg client libraries patch 120236-01 SunOS 5.10_x86: Live Upgrade Zones Support Patch 120285-07 GNOME 2.6.0_x86: GNOME CORBA ORB and component framework 120461-17 Obsoleted by: 120461-19 GNOME 2.6.0_x86: Gnome libs Patch 119369-04 Obsoleted by: 119369-05 GNOME 2.6.0_x86: Printing Technology Patch 120287-03 Obsoleted by: 120287-04 GNOME 2.6.0_x86: Gnome text editor Patch 120293-02 Obsoleted by: 120293-03 SunOS 5.10_x86: mysql patch 120349-03 Obsoleted by: 146235-01 SunOS 5.10_x86: Fibre Channel HBA Port utility 121976-01 CDE 1.6_x86: Xsession patch 120411-33 Obsoleted by: 120411-34 SunOS 5.10_x86: Internet/Intranet Input Method Framework patch 120413-11 Obsoleted by: 120413-12 SunOS 5.10_x86: Simplified Chinese locale patch 120415-27 Obsoleted by: 120415-28 SunOS 5.10_x86: Asian CCK locales patch 120536-17 SunOS 5.10_x86: Updated video drivers and fixes 120544-36 Obsoleted by: 120544-37 SunOS 5.10_x86: Apache 2 Patch 120720-07 SunOS 5.10_x86: SunFreeware gzip patch 120733-01 SunOS 5.10_x86: libusb patch 120740-08 GNOME 2.6.0_x86: GNOME PDF Viewer based on Xpdf 120754-09 Obsoleted by: 120754-10 SunOS 5.10_x86: Microtasking libraries (libmtsk) patch 120831-06 SunOS 5.10_x86: vi and ex patch 121096-05 GNOME 2.6.0_x86: GNOME EXIF tag parsing library for digital cameras 121212-02 SunOS 5.10_x86: Sun Java Web Console (Lockhart) Patch 121300-03 SunOS 5.10_x86: caplib patch 121309-20 Obsoleted by: 121309-21 SunOS 5.10_x86: Solaris Management Console Patch 121429-15 SunOS 5.10_x86: Live Upgrade Zones Support Patch 121607-04 GNOME 2.6.0_x86: Python patch 122260-09 SunOS 5.10_x86: SunFreeware GNU ESP Ghostscript Patch 122471-03 Obsoleted by: 122471-04 GNOME 2.6.0_x86: GNOME Java Help Patch 122655-05 SunOS 5.10_x86: jumpstart and live upgrade compliance patch 122755-01 SunOS 5.10_x86: libexacct.so.1 fma patch 122912-37 SunOS 5.10_x86: Apache 1.3 Patch 123004-04 SunOS 5.10_x86: SAM module patch 124187-07 Obsoleted by: 124187-08 SunOS 5.10_x86: SCN Base cacao module patch 123631-03 Obsoleted by: 123631-04 SunOS 5.10_x86: HTTP proxy settings patch 123006-07 Obsoleted by: 123006-08 SunOS 5.10_x86: Basic Registration Update 123527-01 Obsoleted by: 148874-02 SunOS 5.10_x86: libcurses patch 123591-12 SunOS 5.10_x86: PostgresSQL patch 123614-02 X11 6.6.2_x86: OpenGL patch 123896-79 Obsoleted by: 123896-80 SunOS 5.9_x86 5.10_x86: Common Agent Container (cacao) runtime 2.4.7.0 upgrade patch 79 123939-05 GNOME 2.6.0_x86: GNU Transport Layer Security Library Patch 124326-01 SunOS 5.10_x86: rcm modules patch 124394-12 CDE 1.6_x86: Dtlogin smf patch 124398-02 CDE 1.6_x86: libDtWidget patch 124458-02 Obsoleted by: 124458-03 X11 6.6.2_x86: xdm patch 124631-42 Obsoleted by: 124631-43 SunOS 5.10_x86: System Administration Applications, Network, and Core Libraries Patch 124939-05 SunOS 5.10 5.10_x86: JDMK 5.1 patch 124998-01 SunOS 5.10_x86: /usr/bin/tip patch 125076-01 SunOS 5.10_x86: svc-volfs patch 125216-07 SunOS 5.10_x86: wget patch 125280-05 Obsoleted by: 125280-06 CDE 1.6_x86: dtsession patch 125333-23 JDS 3_x86: Macromedia Flash Player Plugin Patch 125534-17 Obsoleted by: 125534-18 GNOME 2.6.0_x86: Trusted Extension Runtime Patch 125671-04 SunOS 5.10_x86: Sun x8 10G/1G Ethernet Adapter 1.0 driver patch 125720-70 X11 6.8.0_x86: Xorg server patch 125726-03 X11 6.6.2_x86: xinerama patch 125732-13 Obsoleted by: 125732-14 SunOS 5.10_x86: XML and XSLT libraries patch 125907-02 SunOS 5.10_x86: pcn driver patch 126120-02 CDE 1.6_x86: sys-suspend patch 126207-12 SunOS 5.10_x86: zebra ripd quagga patch 126364-10 SunOS 5.10_x86: X Window System changes - Solaris Trusted Extensions 126366-16 Obsoleted by: 126366-17 SunOS 5.10_x86: CDE Desktop changes - Solaris Trusted Extensions 126426-01 SunOS 5.10_x86: fsckall patch 126441-01 Obsoleted by: 126441-02 SunOS 5.10_x86: rm patch 126547-10 SunOS 5.10_x86: bash patch 126631-06 SunOS 5.10_x86: tcsh patch 126869-06 SunOS 5.10_x86: SunFreeware bzip2 patch 127764-01 Obsoleted by: 148109-01 SunOS 5.10_x86: libtsol patch 127873-02 SunOS 5.10_x86: mailx patch 128293-01 SunOS 5.10_x86: rsm patch 128311-01 SunOS 5.10_x86: hsfs patch 128333-01 SunOS 5.10_x86: conskbd patch 128339-01 SunOS 5.10_x86: biosint patch 128412-01 SunOS 5.10_x86: vuidm patch 136715-01 SunOS 5.10_x86: sysevent_conf_mod.so patch 136883-08 SunOS 5.10_x86: ImageMagick patch 136894-02 SunOS 5.10_x86: runacct patch 136999-10 SunOS 5.10_x86: PostgreSQL 8.2 core patch 137001-08 SunOS 5.10_x86: PostgreSQL 8.2 documentation patch 137005-09 SunOS 5.10_x86: PostgreSQL 8.2 source code patch 137033-01 SunOS 5.10_x86: namefs patch 137081-11 SunOS 5.10_x86: libpng Patch 137094-01 SunOS 5.10_x86: logindevperm patch 137098-02 SunOS 5.10_x86: inetd-upgrade patch 137103-01 SunOS 5.10_x86: flowacct patch 137116-01 SunOS 5.10_x86: SUNWcsr/postinstall patch 137148-08 SunOS 5.10_x86: libexpat patch 137283-01 SunOS 5.10_x86: intpexec patch 137322-04 SunOS 5.10_x86: p7zip patch 137872-02 SunOS 5.10_x86: tk patch 138088-01 SunOS 5.10_x86: audit_binfile.so.1 patch 138097-02 SunOS 5.10_x86: syslogd patch 138182-01 SunOS 5.10_x86: ike.preshared patch 138194-04 Service Tags 1.0: patch for Solaris 10_x86 138246-01 SunOS 5.10_x86: nss_compat patch 138248-01 Obsoleted by: 148382-02 SunOS 5.10_x86: cdrw patch 138266-01 Obsoleted by: 147011-01 SunOS 5.10_x86: picld patch 138353-06 X11 6.6.2_x86: fontconfig patch 138362-01 Obsoleted by: 138362-02 SunOS 5.10_x86: snmpXdmid patch 138633-01 SunOS 5.10_x86: SUNW_md_link.so patch 138648-01 SunOS 5.10_x86: /usr/bin/dircmp patch 138650-01 SunOS 5.10_x86: i.renamenew r.renamenew patch 138767-01 SunOS 5.10_x86: ldap-client manifest patch 138823-12 SunOS 5.10_x86: PostgreSQL 8.3 documentation patch 138825-12 SunOS 5.10_x86: PostgreSQL 8.3 source code patch 138827-12 SunOS 5.10_x86: PostgreSQL 8.3 core patch 138853-01 SunOS 5.10_x86: postreverse patch 138855-01 Obsoleted by: 146293-01 SunOS 5.10_x86: sulogin patch 138883-01 SunOS 5.10_x86: boot-archive-update service manifest patch 139100-04 Obsoleted by: 139100-05 SunOS 5.10_x86: gtar patch 139290-02 SunOS 5.10_x86: pgadmin3 patch 139292-02 SunOS 5.10_x86: pgadmin3 sources patch 139616-01 SunOS 5.10_x86: Foomatic patch 139621-01 Obsoleted by: 119279-43 CDE 1.6_x86: DtHelp patch 139997-03 SunOS 5.10_x86: i.rbac and patch postinstall patch 140102-01 SunOS 5.10_x86: rpc.ypupdated patch 140456-01 Obsoleted by: 140456-02 X11 6.6.2_x86: VNC Viewer patch 140913-01 Obsoleted by: 140913-02 SunOS 5.10_x86: ufsrestore patch 141033-01 SunOS 5.10_x86: audit patch 141105-04 SunOS 5.10_x86: ZFS Administration Java Web Console Patch 141497-01 SunOS 5.10_x86: patchchk patch 141533-04 Obsoleted by: 146076-01 SunOS 5.10_x86: in.mpathd patch 141549-01 SunOS 5.10_x86: svccfg patch 141559-01 SunOS 5.10_x86: acctcom patch 141587-01 Obsoleted by: 148986-01 SunOS 5.10_x86: libgss.so.1 patch 141873-01 Obsoleted by: 142089-03 SunOS 5.10_x86: Sun Enterprise Network Array firmware and utilities Patch 141901-01 Obsoleted by: 148878-01 SunOS 5.10_x86: svc.configd patch 142050-01 Obsoleted by: 149058-01 SunOS 5.10_x86: llc2 patch 142059-01 SunOS 5.10_x86: dnet patch 142089-02 Obsoleted by: 142089-03 SunOS 5.10_x86: fp.so patch 142235-01 Obsoleted by: 148030-01 SunOS 5.10_x86: ntp.xml patch 142241-01 SunOS 5.10_x86: ntpq patch 142248-01 SunOS 5.10_x86: libpicld_pluginutil.so.1 patch 142341-02 SunOS 5.10_x86: libresolv.so.2 patch 142395-01 SunOS 5.10_x86: icmp patch 142398-01 SunOS 5.10_x86: libsasl.so.1 patch 142429-02 SunOS 5.10_x86: unshare patch 142431-01 SunOS 5.10_x86: libscf.so.1 patch 142530-01 SunOS 5.10_x86: uptime w utmp_update whodo patch 142544-01 Obsoleted by: 142544-02 SunOS 5.10_x86: svc-snmpdx libssagent.so.1 mibiisa snmpdx snmpdx.xm patch 143126-02 SunOS 5.10_x86: libsvm.so.1 patch 143318-03 GNOME 2.6.0_x86: Instant Messaging patch 143503-01 GNOME 2.6.0_x86: Trusted Extensions patch 143507-12 GNOME 2.6.0_x86: Python patch 143610-03 Obsoleted by: 143610-04 SunOS 5.10_x86: svc-iscsitgt patch 143644-08 Obsoleted by: 147439-06 SunOS 5.10_x86: libMPAPI.so libmpscsi_vhci.so libMPAPI.so.1 libmpscsi_vhci.so.1 patch 144665-01 SunOS 5.10_x86: ntptrace patch 143726-11 SunOS 5.10_x86: SunFreeware ntp patch 143732-01 SunOS 5.10_x86: libaudiofile patch 143734-01 Obsoleted by: 143734-03 CDE 1.6_x86: ToolTalk RPC patch 143740-01 SunOS 5.10_x86: Gedit patch 143913-01 SunOS 5.10_x86: ucode driver patch 143955-04 Obsoleted by: 149278-01 SunOS 5.10_x86: mpxio-upgrade patch 144048-01 SunOS 5.10_x86: traceroute patch 144107-01 Obsoleted by: 144181-02 SunOS 5.10_x86: usr/lib/nfs/nfslogd patch 144189-02 SunOS 5.10_x86: emlxs patch 144230-02 X11 6.6.2_x86: libpixman patch 144326-01 Obsoleted by: 144326-02 SunOS 5.10_x86: Resource Management User Interface Patch 144328-02 SunOS 5.10_x86: Solaris Product Registry Patch 144456-01 Obsoleted by: 143963-02 SunOS 5.10_x86: audit_syslog.so.1 patch 144461-02 Obsoleted by: 148872-01 SunOS 5.10_x86: scsi.so.1 patch 144493-01 Obsoleted by: 144743-02 SunOS 5.10_x86: JPool.jar patch 144570-01 Obsoleted by: 148224-02 SunOS 5.10_x86: zonecfg patch 144751-01 SunOS 5.10_x86: iprb patch 147003-01 SunOS 5.10_x86: libxnet.so patch 144873-03 SunOS 5.10_x86: ifconfig patch 144910-03 SunOS 5.10_x86: yp method ldap patch 144912-02 Obsoleted by: 148238-01 SunOS 5.10_x86: vold patch 144995-02 Obsoleted by: 144995-03 SunOS 5.10_x86: Ant patch 144997-02 Obsoleted by: 144995-03 SunOS 5.10_x86: Ant source patch 145007-09 SunOS 5.10_x86: Webmin patch 147218-04 SunOS 5.10_x86: SUNWdbus-bindings-priv patch 145081-14 SunOS 5.10_x86: Firefox patch 145097-03 Obsoleted by: 149623-01 SunOS 5.10_x86: oce driver patch 145121-01 SunOS 5.10_x86: auditd.xml patch 145201-13 Obsoleted by: 145201-14 SunOS 5.10_x86: Thunderbird patch 145649-03 Obsoleted by: 145649-04 SunOS 5.10_x86: qlge driver Patch 145930-08 Obsoleted by: 145930-09 SunOS 5.10_x86: igb Patch 147144-17 SunOS 5.10_x86: iSCSI patch 146289-03 SunOS 5.10_x86: dcfs patch 146335-01 Obsoleted by: 146467-02 SunOS 5.10_x86: zlogin patch 146488-02 SunOS 5.10_x86: uuencode patch 146583-05 Obsoleted by: 146583-06 SunOS 5.10_x86: fmadm patch 146674-01 SunOS 5.10_x86: auth_attr prof_attr patch 146680-01 SunOS 5.10_x86: hxge patch 146682-02 Obsoleted by: 147800-03 SunOS 5.10_x86: arp patch 146695-02 Obsoleted by: 146695-03 SunOS 5.10_x86: cron patch 146835-02 Obsoleted by: 149218-02 SunOS 5.10_x86: zones resource controls patch 146955-03 Obsoleted by: 146955-04 SunOS 5.10_x86: routed patch 147160-01 SunOS 5.10_x86: ata patch 147220-01 SunOS 5.10_x86: libgphoto2.so.2.0.3 patch 147228-01 X11 6.6.2_x86: xrdb patch 147273-01 SunOS 5.10_x86: encrypt/decrypt patch 147274-01 Obsoleted by: 147274-02 SunOS 5.10_x86: ntxn patch 147379-01 Obsoleted by: 147379-02 SunOS 5.10_x86: zip patch 147674-11 SunOS 5.10_x86: Oracle Java Web Console 3.1 Patch 147794-22 SunOS 5.10_x86: Kerberos patch 147798-04 Obsoleted by: 147798-05 SunOS 5.10_x86: prstat patch 147806-01 Obsoleted by: 149062-02 SunOS 5.10_x86: tl patch 147993-10 SunOS 5.10_x86: Pidgin patch 148003-01 SunOS 5.10_x86: libdbus-1.so.3.4.2 patch 148005-01 SunOS 5.10_x86: libpixbufloader-gif.so patch 148007-01 SunOS 5.10_x86: libogg and libvorbis patch 148028-03 Obsoleted by: 148028-04 SunOS 5.10_x86: compress cp cpio ln mv pack pax tar patch 148032-05 SunOS 5.10_x86: klmmod patch 148050-04 Obsoleted by: 148050-05 SunOS 5.10_x86: pam_authtok_check patch 148076-18 Obsoleted by: 148076-19 SunOS 5.10_x86: md patch 148105-23 Obsoleted by: 148105-24 SunOS 5.10_x86: last, ssh/sshd patch 148113-02 SunOS 5.10_x86: root_archive patch 148136-01 Obsoleted by: 149396-01 SunVTS 7.0_x86: Patch Set 14 consolidation patch 148166-02 Obsoleted by: 148166-03 SunOS 5.10_x86: password policy migration patch 148242-05 Obsoleted by: 148242-06 SunOS 5.10_x86: statd patch 150313-06 Obsoleted by: 150313-07 SunOS 5.10_x86: iscsi patch 148310-08 SunOS 5.10_x86: dhcp patch 148323-13 Obsoleted by: 148323-14 SunOS 5.10_x86: ixgbe patch 148329-04 Obsoleted by: 148329-05 SunOS 5.10_x86: dladm patch 148384-01 SunOS 5.10_x86: IPv6 patch 148386-02 SunOS 5.10_x86: zonecfg libraries patch 148404-01 SunOS 5.10_x86: strmod/spppcomp patch 148408-01 Obsoleted by: 149172-02 SunOS 5.10_x86: mount patch 148424-01 SunOS 5.10_x86: /usr/ccs/bin/error patch 148560-18 SunOS 5.10_x86: timezone patch 148562-12 SunOS 5.10_x86: Perl patch 148564-08 Obsoleted by: 148564-09 SunOS 5.10_x86: nxge patch 148566-01 SunOS 5.10_x86: fdformat patch 148626-01 SunOS 5.10_x86: in.tnamed patch 148628-02 SunOS 5.10_x86: rmformat patch 148658-01 SunOS 5.10_x86: telnet patch 148694-01 SunOS 5.10_x86: pam_unix_cred patch 148695-06 SunOS 5.10_x86: ehci Patch 148769-02 SunOS 5.10_x86: calendar diff3 spell uupick patch 148871-01 SunOS 5.10_x86: mailx.rc patch 148882-03 SunOS 5.10_x86: xntpd patch 150436-01 Obsoleted by: 150436-02 SunOS 5.10_x86: place holder Patch 148889-05 SunOS 5.10_x86: kernel patch 148949-01 SunOS 5.10_x86: bsmconv bsmunconv patch 148955-01 SunOS 5.10_x86: lx_init_zone patch 148976-01 SunOS 5.10_x86: in.rexecd patch 149068-01 SunOS 5.10_x86: SunFreeware GNU grep 149072-01 SunOS 5.10_x86: Texinfo patch 149076-01 SunOS 5.10_x86: pstools patch 149109-01 SunOS 5.10_x86: libgsf-1.so.1.8.2 patch 149113-01 Obsoleted by: 149113-02 SunOS 5.10_x86: libglib-2.0.so.0.1800.3 patch 149150-01 SunOS 5.10_x86: LP Alerts Patch 149164-01 SunOS 5.10_x86: rlmod patch 149166-01 SunOS 5.10_x86: timod patch 150401-59 SunOS 5.10_x86: Kernel Patch 149174-04 Obsoleted by: 149174-05 SunOS 5.10_x86: emlxs driver patch 149176-13 SunOS 5.10_x86: qlc patch 121082-08 SunOS 5.10_x86: Connected Customer Agents 1.1.0 149454-02 SunOS 5.10_x86: CCR Update 149484-01 SunOS 5.10_x86: Foomatic patch 149497-02 SunOS 5.10_x86: pppd patch 149639-02 Obsoleted by: 149639-03 SunOS 5.10_x86: USB patch 149647-02 Obsoleted by: 149647-03 SunOS 5.10_x86: nscd patch 150114-02 Obsoleted by: 150114-03 SunOS 5.10_x86: sockfs patch 150120-04 SunOS 5.10_x86: kssl patch 150124-01 Obsoleted by: 150124-02 SunOS 5.10_x86: sharefs patch 150126-01 Obsoleted by: 150126-02 SunOS 5.10_x86: intel.esc patch 150158-01 SunOS 5.10_x86: RPC patch 150174-01 Obsoleted by: 150174-02 SunOS 5.10_x86: printer patch 150179-01 Obsoleted by: 150126-02 SunOS 5.10_x86: IvyBridge-ep patch 150378-06 SunOS 5.10_x86: LDAP Patch 150437-03 SunOS 5.10_x86: wanboot server patch 150533-02 Obsoleted by: 150533-03 SunOS 5.10_x86: grub patch 150536-01 SunOS 5.10_x86: libtopo.so.1 patch 150540-01 SunOS 5.10_x86: ip-transport.so patch 150546-02 SunOS 5.10_x86: pam_ldap.so.1 patch 150617-03 SunOS 5.10_x86: Evince Patch 150619-02 Obsoleted by: 150619-03 SunOS 5.10_x86: OCM Patch 150833-12 Obsoleted by: 150833-13 SunOS 5.10_x86: ufs patch 150837-01 Obsoleted by: 150837-02 SunOS 5.10_x86: keyserv patch 150913-03 SunOS 5.10_x86: fabric-xlate.so PCIEX.dict patch 151075-06 SunOS 5.10_x86: sendmail patch 151562-01 SunOS 5.10_x86: libshare_nfs.so.1 patch 151616-01 Obsoleted by: 151616-02 SunOS 5.10_x86: fcp patch 151718-01 SunOS 5.10_x86: zsh patch 151720-01 SunOS 5.10_x86: zsh source patch 151722-01 GNOME 2.6.0_x86: GDK-PixBuf library Patch 151724-01 GNOME 2.6.0_x86: word-list-compress Patch 151915-07 SunOS 5.10_x86: OpenSSL 0.9.7 patch 152078-81 JavaSE 6_x86: update 181 patch (equivalent to JDK 6u181) 152079-81 JavaSE 6_x86: update 181 patch (equivalent to JDK 6u181), 64bit 152084-01 SunOS 5.10_x86: wscons patch 152098-71 JavaSE 7_x86: update 171 patch (equivalent to JDK 7u171) 152099-71 JavaSE 7_x86: update 171 patch (equivalent to JDK 7u171), 64bit 152101-61 Obsoleted by: 152101-62 JavaSE 8_x86: update 161 patch (equivalent to JDK 8u161), 64bit 152249-01 SunOS 5.10_x86: rsync Patch 152251-01 SunOS 5.10_x86: rsync Source Patch 150122-01 Obsoleted by: 150122-02 SunOS 5.10_x86: audit_event patch 152253-02 SunOS 5.10_x86: sudo Patch 152261-03 SunOS 5.10_x86: libnsl patch 152265-01 SunOS 5.10_x86: rpcbind patch 152364-01 SunOS 5.10_x86: tem patch 152368-03 SunOS 5.10_x86: libpicltree patch 152507-01 SunOS 5.10_x86: elfexec patch 152511-06 SunOS 5.10_x86: Tomcat 8 patch 152515-02 Obsoleted by: 152515-04 SunOS 5.10_x86: Tomcat 6 Patch 152644-05 SunOS 5.10_x86: Apache 2.4 Patch 152648-01 SunOS 5.10_x86: nfsmapid patch 152650-02 CDE 1.6_x86: dtappgather patch 152652-01 GNOME 2.6.0_x86: libgdk-x11-2.0.so patch 152725-02 GNOME 2.6.0_x86: libgdk-pixbuf-2.0.so patch 152830-01 SunOS 5.10_x86: nfs_dlboot patch Extra Patches: The patchset contains the following patches which are themselves obsoleted by other patches in the patchset. These patches are required to ensure correct installation of the patchset on Solaris 10 11/06 (Update 3) and earlier Solaris 10 Updates. The obsolete patches will only be applied to those systems where they are necessary, they will not be applied if the system is already at a higher patch level. Patch Reason 118844-20: This kernel patch must be active to ensure compatibility with library changes provided in subsequent patches. 122661-08: Obsolete patch required by 125548-02. 125548-02 is the zoneadm indirect dependency patch, which is needed to resolve an issue applying kernel patch 120012-14 on a system with zones support. See CR 6471974. 124205-05: Obsolete patch required by 122661-08. The patchset contains the following patches for Unbundled Software Products (ie. add on products that are not part of a default Solaris 10 installation). Patches for Unbundled Products are included in the patchset only if their use is required to avoid critical OS problems. These patches will only be applied to systems where the associated Unbundled Product is installed. Patch Reason 121182-05: Patch is required to avoid a kernel panic caused by an incompatibility between Sun Trunking Utility and GigaSwift Ethernet drivers (see MOS article 1000555.1). Live Upgrade patch 121431-XX is included in the patches/ directory of the patchset, but this patch will not be applied during patchset installation. The decision to apply the Live Upgrade patch is left to the user, this is done to accommodate users who wish to independently manage the version of the Live Upgrade patch on their system. Where a user wishes to apply the Live Upgrade patch, this needs to be done manually with the patchadd command. Patches for removed products: Certain products that are components of earlier Solaris 10 Updates were removed from Solaris 10 as it evolved. Patches for removed products are not relevant to later solaris 10 Updates, and therefore have been excluded from this patchset. The excluded patches are listed below, to allow a user to determine if any are applicable to products that may still be installed on their systems. Patch Product 120186 StarOffice 8 125542-06 Mozilla 1.7 Thunderbird email client 125540-06 Mozilla 1.7 Firefox Web browser 122959-06 RealPlayer media application IMPORTANT NOTES AND WARNINGS: ----------------------------- KNOWN ISSUES: When installing the patchset to an inactive boot environment, the install script may abort with the following message: ERROR: Failed to determine zone configuration for target boot environment. Please verify configuration with zoneadm(1M). This will occur when the /etc/zones/index file of the inactive boot environment specifies an invalid state for the global zone. The correct state is 'installed', however the state may have been incorrectly changed to 'configured' as a consequence of CR 6804076. To confirm whether the issue exists, mount the inactive boot environment and run the following command: # grep "^global:configured:" /etc/zones/index global:configured:/ # The issue exists if the grep command outputs a line as above. To resolve the issue, first make a backup copy of /etc/zones/index in the inactive boot environment, then manually edit /etc/zones/index in the inactive boot environment and correct the entry for the global zone by replacing 'configured' with 'installed'. PATCHSET SIZE: This patchset is delivered as a single zip file. The size of this file is approximately 2.1G. In uncompressed form, the size of the patchset is approximately 5.6G. FILESYSTEM FREE SPACE REQUIREMENTS: It is difficult to give a precise estimate of how much free disk space is required to install the patchset. The amount of free space required depends on many factors. The following factors all increase the amount of space needed: - The Solaris 10 Update onto which the patchset is being installed. A Solaris 10 3/05 ("FCS") system will require considerably more free space than a system running the latest Solaris 10 Update. - Whether zones are installed or not. The nature of the zones is important. Each whole root non-global zone will require approximately the same amount of free space as the global zone, while each sparse root non-global zone will require much less space on the filesystems where the zone resides. - Whether the patchset is installed with the "save" feature disabled. It is strongly recommended to use the default "save" feature when installing the patchset even though this requires more disk space. It allows the patches that are applied to be removed in case any issues are found post installation. Disabling the "save" feature with the "-d" flag (described below) will reduce the amount of disk space needed, however this is not the recommended way of installing the patchset. As a guide, the free space required to install this patchset using the default "save" feature to an unpatched Solaris 10 FCS system with the entire distribution plus OEM support metacluster is approximately 2.2G. Each whole root non-global zone would need approximately the same amount of space free in the filesystem that contains the zone's root. The install script will check that sufficient space is free before applying each patch. The script will stop if it estimates there is not enough free space available, and will provide instructions on how to override space checking should the user wish to continue patchset installation anyway. The backout data for patches applied using patchadd's default save mode is stored under the /var/sadm/pkg directory in the target system. The amount of backout data stored builds up as more patches are applied to the system. If the filesystem on which the /var/sadm/pkg directory resides becomes low on free space, MOS article 1005804.1 'Solaris[TM]: Recovering Space Used for Saved Backout Data from Patches' describes a number of options for increasing the amount of free space available. This article is available from: https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&doctype=HOWTO&id=1005804.1 SYSTEMS WITH LIMITED DISK SPACE SHOULD *NOT* INSTALL PATCHES: Whether you use the default "save" feature to store backout data or not, the patch application process still requires disk space for installation and administrative tasks. The disk space is needed in filesystems where patches deliver payload. The exact amount of space depends on the system's architecture, the software packages already installed, and the difference in size of the patched objects. In case a problem occurs, ensure a recent full system backup is available. SAVE AND BACKOUT OPTIONS: By default, the install script uses the patchadd command's default save mode to save a copy of the objects being patched. This is the recommended option. Patches can only be removed and the original objects restored if the default "save" feature is used when installing this patchset. You can override the "save" feature by using the "-d" flag when executing the install script. Using the "-d" flag means that you will not be able to backout the patches. This would be problematic if ever there was a need to remove a patch, therefore use of the "-d" flag is not the recommended option. BOOTING OF NEWLY CREATED NON-GLOBAL ZONES: Newly created non-global zones can fail to boot for a short period (~5 minutes) immediately after having been installed. This problem will typically affect systems running Solaris 10 11/06 (Update 3) and earlier Solaris 10 Updates, where this patchset has been installed but patch 121429-13 (or higher), and required patch 121431-16 (or higher) have not been applied - please refer to the note on patch 121431 in the Extra Patches section above. Resolution is to either manually apply these patches before creating a new non-global zone, or to wait for a sufficient period before booting a newly created non-global zone. SPECIAL INSTALL INSTRUCTIONS: As with any patch individually applied, there might be additional Special Install Instructions. These instructions are documented in the individual patch README file. To determine if any additional installation steps are necessary, it is recommended to read each patch README before installing this patchset. A PATCH MAY NOT BE APPLIED: Some of the patches in the patchset will not apply on particular systems. The following are examples of when a patch might not apply. These situations are nominal and are not a cause for concern. The patch may be one of the obsolete or Unbundled Software Product patches listed in the "PATCHES INCLUDED" section. The patch might patch packages that: - Are only installed on specific hardware. - Were introduced in a later Solaris 10 Update than the Solaris 10 Update installed on the target system. - Are not present in the installation Software Group (metacluster) that was installed on the target system. - Have been deliberately removed from the target system during system hardening. The patchadd command recognises packages that already have a patch applied and will only apply a patch to those packages which aren't already patched. Therefore, if a patch patches several packages and only some of them are present on the target system, then those packages present are patched. If other packages are installed on the system at a later date, then patches for those packages need to be reapplied. OLDER VERSIONS OF PATCHES ALREADY APPLIED: Backing out older revisions of patches provided in the patchset is not required for the newer revision to be applied. If the patchset is installed using the default "save" feature, then the patchadd command will save off the preexisting objects. If a patch is subsequently removed, the objects will be restored to the prior patch level. INSTALL INSTRUCTIONS: --------------------- This patchset can be installed on the active boot environment, or to an inactive boot environment using either the "-B" Live Upgrade flag, or the "-R" alternate root flag. The "-R" alternate root flag can be used to patch alternate boot environments that have been created manually and not necessarily via Live Upgrade. Patching an inactive boot environment is recommended, because the downtime associated with patching is reduced and there's a simple fallback option if needed: reboot back into the original boot environment. Patching an inactive boot environment removes the need to follow a significant number of Special Install Instructions that would be required if you patched the active boot environment. If the patchset is installed to an inactive boot environment then some patches may need to be applied to the active boot environment initially. Further details of this requirement are given in the appropriate sections below. Specific details for the three install methods are given in the following sections. General installation instructions applicable to all methods are given in the "PATCHSET INSTALLATION INSTRUCTIONS" section. I. Installing this Patchset to a Live Upgrade Boot Environment Before installing this patchset to an inactive Live Upgrade boot environment, it is important those patches necessary to ensure the correct functioning of Live Upgrade are applied to the required boot environments. If the intent is use of Live Upgrade on a system running Solaris 10 8/07 (Update 4) or an earlier Solaris 10 Update, then it is recommended to install the Live Upgrade Starter Patchset for Solaris 10. Installing the LU Starter Patchset will provide the system with a level of functionality sufficient to enable use of Live Upgrade. The LU Starter Patchset can be located with the patch search facility under the 'Patches & Updates' tab on MOS. If the intent is use of Live Upgrade on a system running Solaris 10 5/08 (Update 5) or a later Solaris 10 Update, then the list of required patches can be found in MOS article 1004881.1 'Solaris[TM] Live Upgrade Software: Patch Requirements', available from: https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&doctype=HOWTO&id=1004881.1 It is generally recommended to review article 1004881.1 before installing this patchset to an inactive Live Upgrade boot environment. The article provides the most current information on those patches necessary to ensure the correct functioning of Live Upgrade on various different system configurations. When installing this patchset to an inactive Live Upgrade boot environment, the install script may stop and notify the user of the need to invoke the script with the "--apply-prereq" flag to ensure appropriate levels of various patches (including the patch utility patches) are applied to the running system. The patchset will not install to an inactive boot environment if the running system does not have these patches applied. There is no need to bring the running system to single-user mode when installing this patchset to an inactive Live Upgrade boot environment. A discussion of how to use Live Upgrade to create and manage boot environments is outside the scope of this document. The install script accompanying this patchset will not create Live Upgrade boot environments. For information on how to use Live Upgrade please see document "Solaris 10 Installation Guide: Solaris Live Upgrade and Upgrade Planning.", available from: http://download.oracle.com/docs/cd/E18752_01/html/821-1910/index.html The following command installs this patchset to an inactive boot environment that was previously created with Live Upgrade: ./installpatchset -B For example, to install the patchset to an inactive boot environment named 'second_disk', the following command would be run: # lustatus Boot Environment Is Active Active Can Copy Name Complete Now On Reboot Delete Status -------------------------- -------- ------ --------- ------ ---------- first_disk yes yes yes no - second_disk yes no no yes - # ./installpatchset -B second_disk II. Installing this Patchset to an Alternate Root This patchset can be installed to an arbitrary alternate root. This method of installation is not recommended for general users, it is provided for advanced users who recognise situations where this method of installation is beneficial, and have a thorough understanding of the additional complexities involved in setting up the alternate root. When installing this patchset to an alternate root, the install script may stop and notify the user of the need to invoke the script with the "--apply-prereq" flag to ensure appropriate levels of various patches (including the patch utility patches) are applied to the running system. The patchset will not install to an alternate root if the running system does not have these patches applied. There is no need to bring the running system to single-user mode when installing this patchset to an alternate root. The following command installs this patchset to an alternate root: ./installpatchset -R For example, if an alternate boot environment has its root and all subordinate file systems mounted under /mnt/altroot, the following command would be run: # ./installpatchset -R /mnt/altroot III. Installing this Patchset to the Active Boot Environment Patching an inactive boot environment using either the "-B" Live Upgrade flag, or the "-R" alternate root flag is recommended over patching the active boot environment. The following special warnings apply if this patchset is applied to the active boot environment: 1. SINGLE USER MODE Ideally the installation should be performed in single-user mode (run level S), although this in not a strict requirement. Depending on system configuration, it may be necessary to mount local filesystems before installing this patchset (for example, if a system configuration has zone roots on a local filesystem that is not mounted in single-user mode). In most cases, onlining the filesystem/local service will be sufficient to ensure the required filesystems are mounted. This can be accomplished by running the following command: # svcadm enable svc:/system/filesystem/local:default Note that the install script may abort during the setup phase with an indefinite error message if the required filesystems are not mounted. The exact error messaging can vary from one system configuration to another - for illustrative purposes one example of such messaging follows: # ./installpatchset Setup .zoneadm: /export/zones/z1s: No such file or directory could not verify zonepath /export/zones/z1s because of the above errors. zoneadm: zone z1s failed to verify ERROR: Zone verification failed : unable to mount zone 'z1s'. # Should this problem occur, ensure local filesystems are mounted then reinvoke the install script. 2. REBOOTS Some patches specify in their README file that an immediate reboot or reconfiguration reboot ('reboot -- -r') is required when they are applied to an active boot environment. Generally, it is possible to complete patching operations before initiating the reboot, but normal production operations should not be resumed until the reboot is performed. In the rare case where it is not possible to continue patching operations, the specific patches involved will contain logic that prevents further patching operations until a reboot is performed. For further information, please see MOS article 1019921.1 'Definitive interpretation of the "rebootimmediate" and "reconfigimmediate" patch flags', available from: https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&doctype=REFERENCE&id=1019921.1 The install script will stop installation of the patchset when an interim reboot is required, and notify the user that a reboot is needed. The install script should be reinvoked after the reboot and patchset installation will resume. See "PATCHSET INSTALLATION INSTRUCTIONS" for details of the messages that are displayed. The factors that determine how many reboots are necessary are described below. Depending on the starting patch level of the target system, up to three reboots are needed. If the active boot environment is running a kernel at a patch level below 118844-19, the install script needs to be invoked THREE times, with a reboot after each invocation. First reboot: The first reboot is necessary to ensure a kernel at patch level 118844-19 (or higher) is running on the active boot environment. This is required to ensure compatibility with library changes provided in subsequent patches. Patch 118844-20 is provided in the patchset. The first reboot brings the patch level of the running kernel to 118844-20, which satisfies the compatibility requirements. Second reboot: If the active boot environment is running a kernel at a patch level of 118844-19 or above, but below a patch level of 118855-36, the install script needs to be invoked TWICE with a reboot after each invocation. A reboot is necessary after applying patch 118855-36 because the patchadd command is disabled and no further patches can be applied until the system is rebooted. This is a safety device which is necessary due to the complexity of installing the code changes delivered in kernel patch 118855-36 to an active boot environment. Kernel patch 118855-36 is the kernel patch released shortly after Solaris 10 11/06 (Update 3). This patch delivers a significant amount of code change. Some manual steps might be required in order to safely apply this patch. Please carefully review the Special Install Instructions in the 118855-36 patch README. Final reboot: A reboot is required at the end of the patchset installation to ensure all changes are activated. 3. GRUB The patchset installs the GNU GRand Unified Bootloader (GRUB) architecture if the active boot environment is running at a kernel patch level below 118844-21. Caution - please follow the specific instructions relevant to the system in: https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&doctype=ALERT&id=1000670.1 Failure to follow these instructions may result in the system failing to boot. 4. ZONES MUST BE HALTED If the active boot environment is running a kernel at a patch level of 118855-36 or above, all native non-global zones need to be halted before the patchset can be installed (in the output of 'zoneadm list -cv,' halted zones are shown as being in the 'installed' state). 5. PATCHES UTILISING DEFERRED ACTIVATION PATCHING The deferred activation patches included in the patchset are listed below: Patch Details 120012-14: Solaris 10 8/07 (Update 4) kernel patch. 127128-11: Solaris 10 5/08 (Update 5) kernel patch. 137138-09: Solaris 10 10/08 (Update 6) kernel patch. 139556-08: Solaris 10 5/09 (Update 7) kernel patch. 141445-09: Solaris 10 10/09 (Update 8) kernel patch. 142910-17: Solaris 10 9/10 (Update 9) kernel patch 144501-19: Solaris 10 8/11 (Update 10) kernel patch. 147148-26: Solaris 10 1/13 (Update 11) kernel patch. 148889-05: Solaris 10 kernel patch. Please carefully review the Special Install Instructions in the README files of these patches. Deferred activation patching was introduced in the patch utilities prior to the release of Solaris 10 8/07 (Update 4) as a way of ensuring system consistency while patching an active boot environment. Patches that need to be applied in deferred activation patching mode will have the SUNW_PATCH_SAFE_MODE parameter set to true in their pkginfo files. Deferred activation patching utilises loopback mounts (lofs) to mask the patched objects until a reboot is performed. Deferred activation patching is designed to enable subsequent patches to be applied before the reboot is initiated. If any subsequent patch directly or indirectly requires a patch applied in deferred activation patching mode, the patch will also automatically be applied in deferred activation patching mode by the patchadd command. Objects updated using deferred activation patching will be activated upon reboot of the system. After applying patches in deferred activation patch mode, a system will have a large number of files mounted via loop back filesystem. The df and mount commands will show these mounted files. For more information on deferred activation patching see: http://download.oracle.com/docs/cd/E19253-01/817-0547/gfick/ If the target system does not already have some of the above Kernel PatchIDs applied, please refer to the Release Notes of the corresponding Update release on http://docs.oracle.com for relevant 'Installation Issues'. PATCHSET INSTALLATION INSTRUCTIONS: 1. Make sure the patchset has been extracted. See "PATCHSET DESCRIPTION" section for more details. 2. Decide if you want to save backout data so that patches can be removed at a later date. By default, the install script uses the patchadd command's default save mode to save a copy of the objects being patched. This is the recommended option. Patches can only be removed and the original objects restored if the default "save" feature is used when installing this patchset. You can override the "save" feature by using the "-d" flag when executing the install script. Using the "-d" flag means that you will not be able to backout the patches. This would be problematic if ever there was a need to remove a patch, therefore use of the "-d" flag is not the recommended option. 3. Run the installpatchset script. # cd 10_x86_Recommended # ./installpatchset -h usage: installpatchset [-d] [-h] [-R alt-root-path|-B alt-boot-env] [--apply-prereq] -- [-d] - don't save undo packages [-h] - display this usage message [-B alt-boot-env] - specify LU boot environment as target [-R alt-root-path] - specify alternate root as target [--apply-prereq] - apply prerequisite patches only -- - passcode required for script execution # - The "-d" flag is explained in step 2. - The "-B" flag is explained in section "I. Installing this Patchset to a Live Upgrade Boot Environment". - The "-R" flag is explained in section "II. Installing this Patchset to an Alternate Root". - The "--apply-prereq" flag is for use on the active boot environment, prior to installing the patchset to an inactive boot environment. It ensures at least the same revision (or higher) of the patch utilities patches contained in this patchset are applied to the running system. This is a prerequisite for installing the patchset to an inactive boot environment. - The "--" flag is a safety mechanism to ensure the README file has been read. The passcode can be found at the end of the "PATCHSET DESCRIPTION" section. 4. The progress of the install script is displayed on your terminal. The output should look similar to the following (this is from a system on which kernel patch 118855-36 was already applied): # ./installpatchset --s10patchset Setup .......... Recommended OS Patchset Solaris 10 x86 (2013.02.13) The patch set will complete installation in this session. No intermediate reboots are required. Application of patches started : 2013.02.14 10:28:36 Applying 120901-03 ( 1 of 325) ... skipped Applying 121334-04 ( 2 of 325) ... skipped Applying 119255-88 ( 3 of 325) ... success . . . Applying 121082-08 (323 of 325) ... success Applying 149454-02 (324 of 325) ... success Applying 149484-01 (325 of 325) ... success Application of patches finished : 2013.02.14 12:36:32 Following patches were applied : 119255-88 120293-02 136883-03 141587-01 145097-03 138216-01 120349-03 136999-10 141873-01 145121-01 147062-01 120411-33 137001-08 141901-01 145900-08 146956-01 120413-11 137033-01 142050-01 145954-06 146055-07 120415-27 137081-07 142059-01 146033-05 142252-02 120536-17 137094-01 142089-02 147443-01 125556-12 120544-30 137098-02 142235-01 147148-26 140797-01 120720-03 137103-01 142241-01 146233-20 118668-41 120740-08 137116-01 142248-01 146335-01 118669-41 120754-09 138867-02 142341-02 146471-08 118778-14 120831-06 138884-01 142395-01 146490-06 138218-01 121096-03 137138-09 142398-01 146672-10 140861-02 121309-20 137148-07 142429-02 146674-01 121119-19 121429-15 137283-01 142431-01 146682-02 119060-60 121607-04 137322-02 142530-01 146684-01 119116-35 122213-46 137872-02 142544-01 146695-02 119118-52 122260-06 138088-01 142912-01 146835-02 119214-27 122471-03 138097-02 142934-05 146955-03 119247-36 122912-30 138182-01 142910-17 147160-01 124629-12 123004-04 138194-04 143126-02 147228-01 119253-32 124187-07 138246-01 143318-03 147379-01 123612-05 123631-03 138248-01 143503-01 147435-01 119281-25 123006-07 138266-01 143507-06 147674-04 119279-39 123591-12 138362-01 143514-02 147716-04 140900-01 123614-02 138633-01 143610-03 147806-01 119314-43 123896-22 138648-01 144527-02 148007-01 124189-03 123939-02 138650-01 144501-19 148028-03 119316-19 124394-11 138767-01 143644-08 148082-02 120200-15 124458-02 138853-01 143732-01 148113-02 119535-29 124631-42 138855-01 143734-01 148166-02 119539-19 124939-04 138877-01 143740-01 148384-01 119549-14 125216-04 138883-01 143913-01 148404-01 120273-33 125280-05 139100-04 143955-04 148408-01 127756-01 125333-23 141017-01 144048-01 148424-01 126424-03 125720-52 139556-08 144107-01 148566-01 139521-02 125732-08 139616-01 144189-02 148626-01 119758-24 126120-02 139621-01 144326-01 148658-01 119765-07 126207-10 139997-03 144328-02 148769-01 119784-25 126547-04 140102-01 144456-01 148871-01 119811-07 126869-05 140160-03 144461-02 148949-01 120461-20 127128-11 140913-01 144487-05 148955-01 119813-18 127725-02 141033-01 144493-01 148976-01 119901-15 127764-01 141105-04 144557-03 149109-01 119907-18 127873-02 142293-01 144570-01 149150-01 119964-24 128293-01 141445-09 144751-01 149164-01 119967-01 128311-01 141497-01 144910-03 149166-01 120095-30 128333-01 141533-04 144912-02 121082-08 120202-06 128339-01 141549-01 145007-04 149454-02 120285-07 128412-01 141559-01 145020-01 149484-01 120287-03 136715-01 Following patches were skipped : Patches already applied 120901-03 123840-04 120100-08 119987-03 124326-01 121334-04 121454-02 119547-08 120102-01 124398-02 119318-01 123527-01 119649-03 120236-01 124998-01 121297-01 118855-36 122641-06 121976-01 125076-01 113000-07 118919-21 125504-02 120733-01 125726-02 117435-02 119064-01 125548-02 121300-03 125907-01 118344-14 119082-25 120012-14 122655-05 126426-01 118368-04 119131-33 119904-02 122755-01 126441-01 121264-01 119283-01 119956-04 Patches obsoleted by one or more patches already applied 118844-20 124205-05 122661-08 119369-04 Patches not applicable to packages on the system 121182-05 126364-08 139290-02 145081-11 147695-13 121212-02 126366-16 139292-02 145201-12 147993-04 125138-42 137005-09 140456-01 145930-08 148003-01 125139-42 138823-11 143726-01 146680-01 148005-01 125534-17 138825-11 143728-01 147274-01 148136-01 125671-04 138827-11 147218-02 147694-13 148170-02 Installation of patch set complete. PLEASE REBOOT THE SYSTEM. Install log files written : /var/sadm/install_data/s10x_rec_patchset_short_2013.02.14_10.28.36.log /var/sadm/install_data/s10x_rec_patchset_verbose_2013.02.14_10.28.36.log # If the patchset is installed on the active boot environment, the system may require one or more interim reboots before completing installation. If a message similar to the following is seen during installation, reboot the system and reinvoke the install script. "The installation of this patch set has halted after applying patch 118855-36. The machine must now be rebooted before further patches can be applied. Please reboot the machine and rerun this script. For further details, see patch set README file." Once the system is rebooted and the install script is reinvoked, installation of the patchset will continue. 5. If an unexpected error is encountered during the installation of this patchset, the install script will abort. Should this occur, the error must be investigated and the issue resolved before proceeding further. More details about the causes of failure can be found in the log files. The following log files are created during installation of the patchset: /var/sadm/install_data/s10x_rec_patchset_failed_.log This log file contains patchadd output from patches that failed to apply. Review this log file to determine why a patch failed to apply. Note that this log file will only be created if a patch fails to apply. /var/sadm/install_data/s10x_rec_patchset_short_.log This log file contains the same output that the install script displays on the terminal while the patchset is installing. /var/sadm/install_data/s10x_rec_patchset_verbose_.log This log file contains all patchadd output generated during the installation of the patchset. The individual patch log files can also be inspected under /var/sadm/patch//log. If the patchset is installed either with the "-B" Live Upgrade flag, or the "-R" alternate root flag, log files will reside in the inactive boot environment. 6. Reboot the system. If this patchset is installed to an inactive boot environment using either the "-B" Live Upgrade flag or the "-R" alternate root flag, then a reboot will be needed to activate the inactive boot environment. If the "-B" Live Upgrade flag is used, then the luactivate command will need to be run, and either an init(1M) or a shutdown(1M) will be needed to complete activation of the boot environment. A reboot(1M) will not complete activation of a boot environment following an luactivate. If the "-R" alternate root flag is used, it may be necessary to rebuild the boot archive in the alternate root before booting the alternate root. The "-R" flag can be used to patch an alternate root in many different contexts however, and whether the boot archive rebuild step is necessary, not necessary, or even undesirable very much depends on user intent and the circumstances of each individual case. For this reason, the install script does not rebuild the boot archive. The decision and responsibility for rebuilding the boot archive is left to the user. Rebuilding the boot archive in an alternate root can be accomplished by running the following command: /boot/solaris/bin/create_ramdisk -R If this patchset is installed to the active boot environment, a reboot is needed to activate certain objects which have been patched, and to resolve potentially inconsistent states resulting from newly patched code interacting with old code running in memory. Normal operations should not be resumed until the reboot is performed. Depending on the starting patch level of the target system, interim reboots may also be required. The install script will stop installation of the patchset when a reboot is required, and notify the user that a reboot is needed. The install script should be reinvoked following an interim reboot.