Patch-ID# 123921-12

6808162 SunMC 3.6.1 and 4.0 use of libxml2.so.2 has security vulnerability as per CRs 6778313 and 6755235
6816167 es-imagetool and agent-update.bin fail on Solaris 10 systems for patch-only images
6834332 one alarm with { makes the entire module tree under the category Local Apps disappear
6873546 CR for changing libxml2 symlinks to point to the newly created libxml2 binary while patching
 
(from 123921-11)
 
6728235 SunMC should use the latest Tomcat shipped with Solaris
6773434 SunMC .dat files are getting corrupted in mirrored environment
6779007 disk aliases are truncated with SunMC 3.6.1 & 4.0
6792050 Tomcat/SunMC: Weak Ciphers on Nessus alert still exist
6807407 123923-09 tries to start the db on an agent-only system and fails
6825277 revert fix for CR 6690127
 
(from 123921-10)
 
(removed) 6690127 SunMC agent dies with a Bus Error due to a "corrupt" /var/opt/SUNWsymon/log/agentStatus.log file
 
(from 123921-09)
 
6409390 intermittent SunMC agent config file corruption
6690167 SunMC 3.6.1 patch post-patch needs fix
6736628 SunMC3.6.1: missing CLI outputs in batchmode after patch 123923-07 install
6773557 SunMC 4.0's SUNWessrv and SUNWesdb deliver same dirs with distinct permissions
 
(from 123921-08)
 
6707572 SunMC Server runs out of sockets/connections
 
(from 123921-07)
 
6664713 es-cli creates double entries when creating XML file SunMC 3.6.1 and 4.0
6683294 es-imagetool does not create correct version numbers in upgrade-policy*.xml file
6683794 SunMC patch is missing Linux binary
6685532 SunMC 3.6.1 core patches should install before es-setup
 
(from 123921-06)
 
6481226 SunMC 3.6.1 agent-update over https port
6603073 SunMC backup (es-backup) fails when es-config is launched twice
6618534 SunMC Server fd leak issue
6554289 SunMC 3.6.1: after applying infodoc 72802 instructions, not possible to login as root
6633822 multiip gets populated with "tunnel" and cannot be corrected with esmultiip -d
6551025 es-imagetool does not create correct version numbers and does not include some wgs config-reader pkg
 
(from 123921-05)
 
6626879 SunMC 3.6.1, SunMC 3.6, SunMC 3.5.1 patch update request
 
(from 123921-04)
 
6573320 need utility to migrate SunMC 3.6.1 database data to SunMC 4.0
6562797 SunMC Database vulnerable
6489273 https port of server.xml incorrectly updated by setup
6544321 stopping Platform-Proxies with "/opt/SUNWsymon/sbin/es-stop" under Solaris 10 fails
6548318 AGENT_HOSTNAME_MULTI_IP tag ignored when running setup in autoresponse mode
6548323 es-setup multiip configuration picks up commented host entries from /etc/hosts
 
(from 123921-03)
 
6432813 Process Monitoring Module can't monitor 64-bit processes (e.g. Oracle)
6527266 es-cli (clientAPI) not disconnecting from its session or Java server not disconnecting
6488717 running under SPS, "agent-update.bin" command with "-f" option does not install agent
6513940 secure all Oracle database accounts with strong passwords
 
(from 123921-02)
 
4839604 data retention should be configurable
4878723 product should not require one to issue uname -S to install off certain NIC
6487180 wrong file permission on /var/opt/SUNWsymon/cli/process-file
6360282 SunMC 3.6 not starting metadata and grouping service
6479032 public ANS mib in util/cfg are out of date
 
(from 123921-01)
 
6431368 es-stop results, 2 of 3 times, in SunMC event service in maintenance state
6423044 using SunMC 3.6 Java API to retrieve alarms leads to hung server
6422389 non-default instance rows not allowing threshold to be set
6423691 agent-update loading high-end config-readers across all nodes
6410846 agent-update installing x86 config reader add-on on SPARC hosts

--------------------------------
 
Please refer to the man pages for instructions on using 'patchadd'
and 'patchrm' commands provided with Solaris.
 
The following example installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/123456-07
 
The following example removes a patch from a standalone system:
 
       example# patchrm 123456-07
 
For additional examples please see the appropriate man pages. Any
other special or non-generic installation instructions should be
described below as special instructions.

-----------------------------
 
NOTE 1:  The user can use es-config -x option to configure the age limit.
         (interactive mode)
 
         The user can use es-config -x -y <filename> option also.
         (from file)
 
         The format of the file should be like below (case-sensitive).
 
         hourly_data_age_limit=<value>
         daily_data_age_limit=<value>
         weekly_data_age_limit=<value>
         monthly_data_age_limit=<value>
 
         The units are as follows
 
         hourly data ---  days
         daily data  ---  weeks
         weekly data ---  months
         monthly data---  months
 
         All the four entries should be present in the input file. In case of
         any invalid file the program will ask user whether he needs to switch
         into interactive mode.
 
NOTE 2:  Important: Changing age limit will affect performance of PRM.
         Moreover the disk space available should be taken into account
         when giving the limits.
 
NOTE 3:  Stop all the server processes before applying patch using :
 
         $ /opt/SUNWsymon/sbin/es-stop -S
 
NOTE 4:  To make use of https feature of agent-update.bin we need to give -c
         option.
 
         Now the usage is:
 
         $ agent-update.bin -s <server> -r <http port> -p <image name> [-f <seed file>] [-c] [-h]
 
         So if we put the -c switch the agent-update.bin binary will think
         that the port you provided is https. So if we give an http port
         and put -c option, agent-update.bin will fail.  Moreover -c is an
         optional switch, without -c switch agent-update.bin will go for http.
 
NOTE 5:  To get the complete fix for BugId 6728235, that is to support Tomcat 5.5, please
         also install the following patch:
 
         114016-03 (or greater)  SunOS 5.9: tomcat security patch
 
         Installing this patch alone (without 114016-03 or above) will make sunmc webserver nonfunctional.
         Then we need to set java home to jdk1.5 (becuase tomcat 5.5 is supports only jdk1.5) in /var/opt/SUNWsymon/cfg/java.home
         eg:- JAVA_HOME=/usr/jdk/jdk1.5.0_14/
 
***************************************************************************
DO NOT TRANSLATE OR LOCALIZE
***************************************************************************
 
%% The following software may be included in this product: DBI
 
Use of any of this software is governed by the terms of the license below:
 
Preamble
 
The intent of this document is to state the conditions under which a Package may
be copied, such that the Copyright Holder maintains some semblance of artistic
control over the development of the package, while giving the users of the
package the right to use and distribute the Package in a more-or-less customary
fashion, plus the right to make reasonable modifications.
 
Definitions
 
    "Package" refers to the collection of files distributed by the Copyright
Holder, and derivatives of that collection of files created through textual
modification.
 
    "Standard Version" refers to such a Package if it has not been modified, or
has been modified in accordance with the wishes of the Copyright Holder as
specified below.
 
    "Copyright Holder" is whoever is named in the copyright or copyrights for
the package.
 
    "You" is you, if you're thinking about copying or distributing this Package.
 
    "Reasonable copying fee" is whatever you can justify on the basis of media
cost, duplication charges, time of people involved, and so on. (You will not be
required to justify it to the Copyright Holder, but only to the computing
community at large as a market that must bear the fee.)
 
    "Freely Available" means that no fee is charged for the item itself, though
there may be fees involved in handling the item. It also means that recipients
of the item may redistribute it under the same conditions they received it.
 
   1. You may make and give away verbatim copies of the source form of the
Standard Version of this Package without restriction, provided that you
duplicate all of the original copyright notices and associated disclaimers.
 
   2. You may apply bug fixes, portability fixes and other modifications derived
from the Public Domain or from the Copyright Holder. A Package modified in such
a way shall still be considered the Standard Version.
 
   3. You may otherwise modify your copy of this Package in any way, provided
that you insert a prominent notice in each changed file stating how and when you
changed that file, and provided that you do at least ONE of the following:
 
         1. place your modifications in the Public Domain or otherwise make them
Freely Available, such as by posting said modifications to Usenet or an
equivalent medium, or placing the modifications on a major archive site such as
uunet.uu.net, or by allowing the Copyright Holder to include your modifications
in the Standard Version of the Package.
         2. use the modified Package only within your corporation or organization.
         3. rename any non-standard executables so the names do not conflict
with standard executables, which must also be provided, and provide a separate
manual page for each non-standard executable that clearly documents how it
differs from the Standard Version.
         4. make other distribution arrangements with the Copyright Holder.
 
   4. You may distribute the programs of this Package in object code or
executable form, provided that you do at least ONE of the following:
 
         1. distribute a Standard Version of the executables and library files,
together with instructions (in the manual page or equivalent) on where to get
the Standard Version.
         2. accompany the distribution with the machine-readable source of the
Package with your modifications.
         3. give non-standard executables non-standard names, and clearly
document the differences in manual pages (or equivalent), together with
instructions on where to get the Standard Version.
         4. make other distribution arrangements with the Copyright Holder.
 
   5. You may charge a reasonable copying fee for any distribution of this
Package. You may charge any fee you choose for support of this Package. You may
not charge a fee for this Package itself. However, you may distribute this
Package in aggregate with other (possibly commercial) programs as part of a
larger (possibly commercial) software distribution provided that you do not
advertise this Package as a product of your own. You may embed this Package's
interpreter within an executable of yours (by linking); this shall be construed
as a mere form of aggregation, provided that the complete Standard Version of
the interpreter is so embedded.
 
   6. The scripts and library files supplied as input to or produced as output
from the programs of this Package do not automatically fall under the copyright
of this Package, but belong to whomever generated them, and may be sold
commercially, and may be aggregated with this Package. If such scripts or
library files are aggregated with this Package via the so-called "undump" or
"unexec" methods of producing a binary executable image, then distribution of
such an image shall neither be construed as a distribution of this Package nor
shall it fall under the restrictions of Paragraphs 3 and 4, provided that you do
not represent such an executable image as a Standard Version of this Package.
 
   7. C subroutines (or comparably compiled subroutines in other languages)
supplied by you and linked into this Package in order to emulate subroutines and
variables of the language defined by this Package shall not be considered part
of this Package, but are the equivalent of input as in Paragraph 6, provided
these subroutines do not change the language in any way that would cause it to
fail the regression tests for the language.
 
   8. Aggregation of this Package with a commercial distribution is always
permitted provided that the use of this Package is embedded; that is, when no
overt attempt is made to make this Package's interfaces visible to the end user
of the commercial distribution. Such use shall not be construed as a
distribution of this Package.
 
   9. The name of the Copyright Holder may not be used to endorse or promote
products derived from this software without specific prior written permission.
 
  10. THIS PACKAGE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR IMPLIED
WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
 
The End
 
Additional License(s)
The copyright info states as follows:
 
The DBI module is Copyright (c) 1994-2004 Tim Bunce. Ireland. All
rights reserved.
 
You may distribute under the terms of either the GNU General Public
License or the Artistic License, as specified in the Perl README file.
***************************************************************************
%% The following software may be included in this product:  DBD-Oracle
 
Use of any of this software is governed by the terms of the license below:
 
Preamble
 
The intent of this document is to state the conditions under which a Package may
be copied, such that the Copyright Holder maintains some semblance of artistic
control over the development of the package, while giving the users of the
package the right to use and distribute the Package in a more-or-less customary
fashion, plus the right to make reasonable modifications.
 
Definitions
 
    "Package" refers to the collection of files distributed by the Copyright
Holder, and derivatives of that collection of files created through textual
modification.
 
    "Standard Version" refers to such a Package if it has not been modified, or
has been modified in accordance with the wishes of the Copyright Holder as
specified below.
 
    "Copyright Holder" is whoever is named in the copyright or copyrights for
the package.
 
    "You" is you, if you're thinking about copying or distributing this Package.
 
    "Reasonable copying fee" is whatever you can justify on the basis of media
cost, duplication charges, time of people involved, and so on. (You will not be
required to justify it to the Copyright Holder, but only to the computing
community at large as a market that must bear the fee.)
 
    "Freely Available" means that no fee is charged for the item itself, though
there may be fees involved in handling the item. It also means that recipients
of the item may redistribute it under the same conditions they received it.
 
   1. You may make and give away verbatim copies of the source form of the
Standard Version of this Package without restriction, provided that you
duplicate all of the original copyright notices and associated disclaimers.
 
   2. You may apply bug fixes, portability fixes and other modifications derived
from the Public Domain or from the Copyright Holder. A Package modified in such
a way shall still be considered the Standard Version.
 
   3. You may otherwise modify your copy of this Package in any way, provided
that you insert a prominent notice in each changed file stating how and when you
changed that file, and provided that you do at least ONE of the following:
 
         1. place your modifications in the Public Domain or otherwise make them
Freely Available, such as by posting said modifications to Usenet or an
equivalent medium, or placing the modifications on a major archive site such as
uunet.uu.net, or by allowing the Copyright Holder to include your modifications
in the Standard Version of the Package.
         2. use the modified Package only within your corporation or organization.
         3. rename any non-standard executables so the names do not conflict
with standard executables, which must also be provided, and provide a separate
manual page for each non-standard executable that clearly documents how it
differs from the Standard Version.
         4. make other distribution arrangements with the Copyright Holder.
 
   4. You may distribute the programs of this Package in object code or
executable form, provided that you do at least ONE of the following:
 
         1. distribute a Standard Version of the executables and library files,
together with instructions (in the manual page or equivalent) on where to get
the Standard Version.
         2. accompany the distribution with the machine-readable source of the
Package with your modifications.
         3. give non-standard executables non-standard names, and clearly
document the differences in manual pages (or equivalent), together with
instructions on where to get the Standard Version.
         4. make other distribution arrangements with the Copyright Holder.
 
   5. You may charge a reasonable copying fee for any distribution of this
Package. You may charge any fee you choose for support of this Package. You may
not charge a fee for this Package itself. However, you may distribute this
Package in aggregate with other (possibly commercial) programs as part of a
larger (possibly commercial) software distribution provided that you do not
advertise this Package as a product of your own. You may embed this Package's
interpreter within an executable of yours (by linking); this shall be construed
as a mere form of aggregation, provided that the complete Standard Version of
the interpreter is so embedded.
 
   6. The scripts and library files supplied as input to or produced as output
from the programs of this Package do not automatically fall under the copyright
of this Package, but belong to whomever generated them, and may be sold
commercially, and may be aggregated with this Package. If such scripts or
library files are aggregated with this Package via the so-called "undump" or
"unexec" methods of producing a binary executable image, then distribution of
such an image shall neither be construed as a distribution of this Package nor
shall it fall under the restrictions of Paragraphs 3 and 4, provided that you do
not represent such an executable image as a Standard Version of this Package.
 
   7. C subroutines (or comparably compiled subroutines in other languages)
supplied by you and linked into this Package in order to emulate subroutines and
variables of the language defined by this Package shall not be considered part
of this Package, but are the equivalent of input as in Paragraph 6, provided
these subroutines do not change the language in any way that would cause it to
fail the regression tests for the language.
 
   8. Aggregation of this Package with a commercial distribution is always
permitted provided that the use of this Package is embedded; that is, when no
overt attempt is made to make this Package's interfaces visible to the end user
of the commercial distribution. Such use shall not be construed as a
distribution of this Package.
 
   9. The name of the Copyright Holder may not be used to endorse or promote
products derived from this software without specific prior written permission.
 
  10. THIS PACKAGE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR IMPLIED
WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
 
The End
 
Additional License(s)
The copyright info states:
 
Copyright (c) 1994,1995,1996,1997,1998,1999  Tim Bunce, England.
 
   You may distribute under the terms of either the GNU General Public
   License or the Artistic License, as specified in the Perl README file,
   with the exception that it cannot be placed on a CD-ROM or similar
   media for commercial distribution without the prior approval of the author.
***************************************************************************
%% The following software may be included in this product: ora2pg
 
Use of any of this software is governed by the terms of the license below:
 
Preamble
 
The intent of this document is to state the conditions under which a Package may
be copied, such that the Copyright Holder maintains some semblance of artistic
control over the development of the package, while giving the users of the
package the right to use and distribute the Package in a more-or-less customary
fashion, plus the right to make reasonable modifications.
 
Definitions
 
    "Package" refers to the collection of files distributed by the Copyright
Holder, and derivatives of that collection of files created through textual
modification.
 
    "Standard Version" refers to such a Package if it has not been modified, or
has been modified in accordance with the wishes of the Copyright Holder as
specified below.
 
    "Copyright Holder" is whoever is named in the copyright or copyrights for
the package.
 
    "You" is you, if you're thinking about copying or distributing this Package.
 
    "Reasonable copying fee" is whatever you can justify on the basis of media
cost, duplication charges, time of people involved, and so on. (You will not be
required to justify it to the Copyright Holder, but only to the computing
community at large as a market that must bear the fee.)
 
    "Freely Available" means that no fee is charged for the item itself, though
there may be fees involved in handling the item. It also means that recipients
of the item may redistribute it under the same conditions they received it.
 
   1. You may make and give away verbatim copies of the source form of the
Standard Version of this Package without restriction, provided that you
duplicate all of the original copyright notices and associated disclaimers.
 
   2. You may apply bug fixes, portability fixes and other modifications derived
from the Public Domain or from the Copyright Holder. A Package modified in such
a way shall still be considered the Standard Version.
 
   3. You may otherwise modify your copy of this Package in any way, provided
that you insert a prominent notice in each changed file stating how and when you
changed that file, and provided that you do at least ONE of the following:
 
         1. place your modifications in the Public Domain or otherwise make them
Freely Available, such as by posting said modifications to Usenet or an
equivalent medium, or placing the modifications on a major archive site such as
uunet.uu.net, or by allowing the Copyright Holder to include your modifications
in the Standard Version of the Package.
         2. use the modified Package only within your corporation or organization.
         3. rename any non-standard executables so the names do not conflict
with standard executables, which must also be provided, and provide a separate
manual page for each non-standard executable that clearly documents how it
differs from the Standard Version.
         4. make other distribution arrangements with the Copyright Holder.
 
   4. You may distribute the programs of this Package in object code or
executable form, provided that you do at least ONE of the following:
 
         1. distribute a Standard Version of the executables and library files,
together with instructions (in the manual page or equivalent) on where to get
the Standard Version.
         2. accompany the distribution with the machine-readable source of the
Package with your modifications.
         3. give non-standard executables non-standard names, and clearly
document the differences in manual pages (or equivalent), together with
instructions on where to get the Standard Version.
         4. make other distribution arrangements with the Copyright Holder.
 
   5. You may charge a reasonable copying fee for any distribution of this
Package. You may charge any fee you choose for support of this Package. You may
not charge a fee for this Package itself. However, you may distribute this
Package in aggregate with other (possibly commercial) programs as part of a
larger (possibly commercial) software distribution provided that you do not
advertise this Package as a product of your own. You may embed this Package's
interpreter within an executable of yours (by linking); this shall be construed
as a mere form of aggregation, provided that the complete Standard Version of
the interpreter is so embedded.
 
   6. The scripts and library files supplied as input to or produced as output
from the programs of this Package do not automatically fall under the copyright
of this Package, but belong to whomever generated them, and may be sold
commercially, and may be aggregated with this Package. If such scripts or
library files are aggregated with this Package via the so-called "undump" or
"unexec" methods of producing a binary executable image, then distribution of
such an image shall neither be construed as a distribution of this Package nor
shall it fall under the restrictions of Paragraphs 3 and 4, provided that you do
not represent such an executable image as a Standard Version of this Package.
 
   7. C subroutines (or comparably compiled subroutines in other languages)
supplied by you and linked into this Package in order to emulate subroutines and
variables of the language defined by this Package shall not be considered part
of this Package, but are the equivalent of input as in Paragraph 6, provided
these subroutines do not change the language in any way that would cause it to
fail the regression tests for the language.
 
   8. Aggregation of this Package with a commercial distribution is always
permitted provided that the use of this Package is embedded; that is, when no
overt attempt is made to make this Package's interfaces visible to the end user
of the commercial distribution. Such use shall not be construed as a
distribution of this Package.
 
   9. The name of the Copyright Holder may not be used to endorse or promote
products derived from this software without specific prior written permission.
 
  10. THIS PACKAGE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR IMPLIED
WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.
 
The End
 
Additional License(s)
The copyright info states:
 
Copyright (c) 2001-2004 Gilles Darold - All rights reserved.
 
This program is free software; you can redistribute it and/or modify
it under the same terms as Perl itself.
***************************************************************************