Patch-ID# 124628-16
Download this patch from My Oracle Support
|
Your use of the firmware, software and any other materials contained
in this update is subject to My Oracle Support Terms of Use, which
may be viewed at My Oracle Support.
|
|
For further information on patching best practices and resources, please
see the following links:
|
|
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.
|
Keywords: security secure by default sbd manifest miniroot zones upgrade nfsv4 single host zfs boot itu
Synopsis: SunOS 5.10: CD-ROM Install Boot Image Patch
Date: Oct/25/2012
Install Requirements: NA
Solaris Release: 10
SunOS Release: 5.10
Unbundled Product:
Unbundled Release:
Xref: This patch available for x86 as patch 124629
Topic: SunOS 5.10: CD-ROM Install Boot Image Patch
Relevant Architectures: sparc
Bugs fixed with this patch:
Changes incorporated in this version: 6997857 7199049
Patches accumulated and obsoleted by this patch: 126677-02
Patches which conflict with this patch:
Patches required with this patch: 119081-25 (or greater)
Obsoleted by:
Files included with this patch:
/sbin/getbootargs
/sbin/install-du
/sbin/sysid-finish
/usr/sbin/install.d/mergescripts/merge_service_profile
/usr/sbin/install.d/patchUpdate (deleted)
/usr/sbin/sysidprofile
/usr/snadm/lib/libadmutil.so.2
Problem Description:
6997857 120199-17/120200-17 apply to SUNWCmreq, but required patch 124628/124629 doesn't
7199049 getbootargs limited to 128 characters
(from 124628-15)
7097854 remove the workaround for dcfs bug 6855379 introduced in Auto-reg project
(from 124628-14)
6932602 console becomes garbled after 'Apply driver updates' selection during interactive install
(from 124628-13)
6967992 Auto-reg service gets online even if 'auto_reg=disable' is in autoreg_config
(from 124628-12)
6965891 empty autoreg_config is created when 'auto_reg=disable' is specified
6966405 Autoregistration configuration file is not encrypted
(from 124628-11)
6952414 need to implement password encryption on the proxy field of Autoregistration
6960042 GUI install should have password encryption for Autoregistration
(from 124628-10)
6952365 /tmp/autoreg_file needs rename as /var/run/autoreg_file otherwise it's vulnerability issue
6952367 convert sprintf calls introduced in AutoReg project to snprintf to avoid array overrun
6952415 need a way to disable AutoReg in hands-off install
6952572 AutoReg Install
6953886 Auto Registration info provided by luupgrade contains wrong link
6955595 luupgrade is checking autoreg credential file as /etc/autoreg/cred instead of /etc/autoreg/creds
(from 124628-09)
6883935 install-du script needs to change due to ITU sparc support
(from 124628-08)
6521412 PSARC 2006/525: new boot sparc
(from 124628-07)
6715945 T-patch 124629-07 deletes /etc/svc/repository.db in miniroot
(from 124628-06)
6644873 loss of network client information at install time (ITU)
(from 124628-05)
6517432 sysidtool should be used in exclusive IP non-global zones
(from 124628-04)
6561505 sysid nfs4 displays garbage on console on upgrade with Asian locales
(from 124628-03)
6560182 /usr/sbin/sys-unconfig failed with unconfig_nfs4
(from 124628-02)
5110062 NFSv4 domain prompting should be done by sysidtool framework
6439322 sysidnfs4 too strict on domain names
6445230 /etc/inet/hosts and /etc/inet/ipnodes need to be the same file
(from 124628-01)
6272742 Install gate should not depend on build system's manifests to build miniroot repository
6438773 Install needs way of (de)selecting Secure-by-Default
6450040 support Zones upgrade of Lockhart 3.x in S10U3
6467841 remove obsoleted Install Check packages for Ashanti upgrade in S10U3
6472014 need to handle Zones upgrade from S10/S10U1/S10U2 to S10U3 for Appserver from 8.0 to 8.2
6473406 need to handle Zones upgrade for Java System Message Queue and Web Console packages
6476699 patches 119082-26 through rev29 fail to install
6480302 remove SUNWzfsg for Zones upgrade in S10U3
6481557 patch T118833-29 will not install in miniroot
(from 126677-02)
This revision addresses a packaging issue.
(from 126677-01)
5110062 NFSv4 domain prompting should be done by sysidtool framework
6439322 sysidnfs4 too strict on domain names
6445230 /etc/inet/hosts and /etc/inet/ipnodes need to be the same file
Patch Installation Instructions:
--------------------------------
Please refer to the man pages for instructions on using 'patchadd'
and 'patchrm' commands provided with Solaris.
The following example installs a patch to a standalone machine:
example# patchadd /var/spool/patch/123456-07
The following example removes a patch from a standalone system:
example# patchrm 123456-07
For additional examples please see the appropriate man pages. Any
other special or non-generic installation instructions should be
described below as special instructions.
Special Install Instructions:
-----------------------------
Not all patches listed in this section as needed for the completion
of a fix or feature, may be available at the same time as this patch.
This allows the remaining fixes/features to be made available sooner.
NOTE 1: To get the fixes contained in this patch, this patch must be
applied to the Miniroot which is located in the Boot directory
on Net Install servers and Boot servers.
The Miniroot needs to be patched on the Net Install server
and on all Boot servers that have already been created from
the Net Install server.
Please also note that a patched Net Install server will create
patched Boot servers. In other words, if you patch a Net Install
server, and subsequently make a Boot server from it by using the
'setup_install_server' command, the newly-created Boot server
will incorporate the patch applied to the Net Install server.
Use 'patchadd -C' for this patch, rather than the generic
invocation.
Please read the following document for a complete guide to miniroot
patching on Solaris 10:
http://www.oracle.com/technetwork/systems/articles/patchmini-jsp-137348.html
Please also reference the ZFS Flash Support document:
http://opensolaris.org/os/community/zfs/boot/flash/
NOTE 2: To get the complete NFSv4 feature (PSARC/2005/487), please also
install the following patches:
119252-18 (or greater) System Administration Applications Patch
120199-09 (or greater) sysidtool Patch
124630-09 (or greater) System Administration Applications, Network,
and Core Libraries Patch
NOTE 3: To get the complete Single Host File feature (PSARC/2006/530
and PSARC/2006/299), please also install the following patches:
124630-09 (or greater) System Administration Applications, Network,
and Core Libraries Patch
119534-12 (or greater) Flash Archive Patch
119252-18 (or greater) System Administration Applications Patch
120199-09 (or greater) sysidtool Patch
120011-14 (or greater) Kernel Patch
NOTE 4: To get the complete fix for BugId 6561505 (sysid nfs4 displays
garbage on the console if you do upgrade with Asian locales),
please also install the following patch
119252-20 (or greater) System Administration Applications Patch
NOTE 5: To get the complete fix for BugId 6517432 (sysidtool should be
used in exclusive IP non-global zones), please also install the
following patches:
120199-11 (or greater) sysidtool Patch
119252-21 (or greater) System Administration Applications Patch
NOTE 6: To get the complete fix for BugId 6644873 (loss of network client
information at install time (ITU)), please also install the
following patch:
124630-17 (or greater) System Administration Applications, Network,
and Core Libraries Patch
NOTE 7: To get the complete ZFS Boot and New Boot Sparc feature
PSARC/2006/370 and PSARC/2006/525, please also install the following
patches:
119254-59 (or greater) Install and Patch Utilities Patch
119252-26 (or greater) System Administration Applications Patch
119313-23 (or greater) WBEM Patch
120450-02 (or greater) Get netmask Utility Patch
121430-27 (or greater) Live Upgrade Patch
121428-11 (or greater) Live Upgrade Zones Support Patch
124630-18 (or greater) System Administration Applications, Network,
and Core Libraries Patch
NOTE 8: To get the complete Auto Registration fix for the following BugId's:
6952572 AutoReg Install
6952365 /tmp/autoreg_file needs rename as /var/run/autoreg_file
otherwise it's vulnerability issue
6952367 convert sprintf calls introduced in AutoReg project to
snprintf to avoid array overrun
6953886 Auto Registration info provided by luupgrade contains wrong
link
6955595 luupgrade is checking autoreg credential file as
/etc/autoreg/cred instead of /etc/autoreg/creds
please also install the following patches:
119252-29 (or greater) System Administration Applications Patch
120199-16 (or greater) sysidtool Patch
121430-50 (or greater) Live Upgrade Patch
124630-42 (or greater) System Administration Applications, Network,
and Core Libraries Patch
NOTE 9: To get the complete fix for BugId 6952415 (need a way to disable
AutoReg in hands-off install), please also install the following patch:
119252-29 (or greater) System Administration Applications Patch
NOTE 10: To get the complete fix for BugId 6952414 (need to implement password
encryption on the proxy field of Autoregistration), please also install
the following patches:
121430-51 (or greater) Live Upgrade Patch
124630-43 (or greater) System Administration Applications, Network,
and Core Libraries Patch
NOTE 11: To get the complete fix for BugId 6967992 (Auto-reg service gets
online even if 'auto_reg=disable' is in autoreg_config), please
also install the following patch:
121430-53 (or greater) Live Upgrade Patch
NOTE 12: To get the complete Secure-by-Default feature (PSARC/2004/368 and
PSARC/2005/373), please also install the following patches:
118833-26 (or greater)* kernel patch
119252-14 (or greater) System Administration Applications patch
119313-08 (or greater) WBEM patch
120199-07 (or greater) sysidtool patch
120272-06 (or greater) SMA patch
121308-08 (or greater) Solaris Management Console patch
122539-06 (or greater)* volmgt and bsmconv patch
122856-03 (or greater)* sendmail patch
124393-01 (or greater) dtlogin smf patch
124630-01 (or greater) System Administration Applications, Network,
and Core Libraries Patch
* Substitute patch 118833-36 for the indicated set of patches.
Due to some of them being unreleased and/or accumulated into
unreleased 118833 revisions, 118833-36 is the only available
patch that contains all of them.
README -- Last modified date: Saturday, November 10, 2012