OBSOLETE Patch-ID# 150400-15


Download this patch from My Oracle Support

Your use of the firmware, software and any other materials contained in this update is subject to My Oracle Support Terms of Use, which may be viewed at My Oracle Support.
For further information on patching best practices and resources, please see the following links:
Copyright (c) 2012, Oracle and/or its affiliates. All rights reserved.

Keywords: security poll px e1000g forthdebug ipsecah ipsecesp zfs sd mpt ipsecconf etude zone container s9_brand.so brand solaris8 solaris9 install crypto pkcs11 pkcs11_kernel.so.1 in.iked ikeadm platform cpu module pkcs12 race condition kmf keyusage ucrypto_sign
Synopsis: Obsoleted by: 150400-16 SunOS 5.10: Kernel Patch
Date: Aug/15/2014


Install Requirements: After installing this patch on an active boot environment, the system will be in a potentially inconsistent state until a reconfigure reboot is performed. Unless otherwise specified in the Special Install Instructions below, it is normally safe to apply further patches prior to initiating the reboot due to the relatively small footprint of the patch utilities. Normal operations must not be resumed until after the reconfigure reboot is performed.
Use Single User Mode (run level S) when installing this patch on an active boot environment. An alternative may be specified in the Special Install Instructions.

Solaris Release: 10

SunOS Release: 5.10

Unbundled Product:

Unbundled Release:

Xref: This patch available for x86 as patch 150401

Topic: SunOS 5.10: Kernel Patch
	***********************************************************
	NOTE: This patch may contain one or more OEM-specific platform ports.
	      See the appropriate OEM_NOTES file within the patch for
	      information specific to these platforms.
	      DO NOT INSTALL this patch on an OEM system if a corresponding
	      OEM_NOTES file is not present (or is present, but instructs not
	      to install the patch), unless the OEM vendor directs otherwise.
	***********************************************************


Relevant Architectures: sparc sparc.sun4u sparc.sun4v

Bugs fixed with this patch:

Sun CR # Bug #
438041815041583
503540415207695
643001115332295
647945315354492
654504615389882
658882015414382
664888015449671
665566015453777
672542815494128
675284215511003
676538615518895
676959515521496
682976515555874
683065915556414
684654715566297
684654815566298
684819215567469
685320815570951
685522315572296
686896715580758
688078415588762
688672615593115
689918215602062
690410815605702
691292815612419
691390515613053
691648315615053
692038315617994
692143215618846
693102715626496
695765515647156
696579115653447
697518615661139
697671415662359
698066315665585
698110415665972
698194615666664
700559715685991
700573115686082
700621615686528
700929215689118
701481015693591
701833915696163
703023715704632
703060815704883
703284715706409
703387415707174
703401015707265
703426415707492
703813815710534
703840615710775
704281715714128
704432115715215
704469715715549
704554415716085
704600815716439
704652815716833
704822215718032
705061715719515
705177415720191
705225115720514
705585015722845
705649615723155
706545015727578
706573015727739
706894115730133
707060315730854
707913715735442
707959715735699
708074515736453
708270015737491
708785315740174
708905015740941
709004015741367
709006115741380
709846015746589
709888715746994
710470415750574
710530415750994
710537815751047
710687215751898
710769515752435
711334315756032
711417115756464
711712215758461
711978615760160
712100615760769
712679215764044
712692615764146
712733615764451
712830915765104
712837215765165
713006015766446
713091615766902
713097115766940
713144215767303
713175515767561
713317515768532
713360915768821
714291315771021
714388315771768
714833815775014
714978215775996
715419215779246
715525715780200
715549515780385
715564015780493
715647815781192
715723315781929
715876915783297
715977015784231
716106015785248
716125915785440
716290015786729
716299115786808
716318415786977
716381915787467
716588315789239
716899015791822
717039615792971
717090315793416
717168815794086
717188615794263
717265515794791
717285115794950
717296215795037
717334615795327
717362215795535
717475515796390
717549015796962
717613915797481
717640915797710
717650215797792
717659815797871
717768815798684
717891615799935
717965415800486
718085215801366
718090015801413
718273515802661
718355815803392
718411015803852
718500415804591
718501515804599
718509515804687
718836815807421
718992315808754
719058015809288
719137515809921
719261015810974
719288515811225
719321215811509
719323015811520
719464515812735
719472615812816
719530915813348
719572315813680
719625115814090
719686815814664
719864515816229
719877315816323
223006515816587
719912815816639
720012815817594
720100615818472
720190315819341
720199715819443
720206915819541
223083915819674
720220615819700
720243715819978
720310115820749
720346815821207
720359915821382
720380615821644
720408815821985
720434115822290
720435215822306
720458915822598
720495515823088
223148715823090
720510015823255
720567615823992
720626315824758
720637215824910
720638215824925
720640115824954
720657215825188
720674815825402
720688415825650
720719915826104
720760815826749
15833828
15833855
15844219
15857135
15867625
15875298
15882075
15890500
15892217
15892272
15892821
15898382
15903493
15916736
15924838
15925651
15937751
15954351
15963898
15972250
15980058
15985080
15987135
15992306
15994235
15997791
15998183
16002784
16013601
16038166
16039539
16042291
16068162
16073620
16086435
16091474
16099913
16169163
16205576
16218907
16238762
16245585
16249123
16250054
16263826
16268329
16285392
16293053
16293098
16311421
16329143
16340257
16343120
16354357
16361843
16362919
16388305
16395538
16397136
16420072
16423386
16425981
16426940
16493596
16503776
16519289
16532828
16538309
16562469
16584967
16593168
16600745
16608837
16625669
16633265
16635844
16672077
16673262
16683459
16706583
16708230
16709548
16713450
16716278
16717035
16718403
16722973
16735164
16741159
16760866
16771544
16776160
16782143
16804978
16822599
16829802
16839721
16845490
16886354
16894659
16908436
16939761
16942137
16990155
17028207
17031640
17034106
17038558
17062650
17065864
17071025
17075297
17075733
17075773
17075962
17082774
17165615
17214105
17215344
17220973
17241173
17245181
17251055
17255714
17263041
17289900
17295509
17296592
17336846
17337436
17356746
17357498
17361762
17361787
17366564
17371338
17401437
17402549
17444369
17454726
17478373
17495733
17510986
17562488
17585850
17608895
17609380
17611048
17615487
17615534
17615665
17623108
17628036
17661774
17694758
17728421
17733159
17761776
17779420
17798090
17799335
17816539
17867801
17900075
17906811
17938451
17974760
17984854
17986274
18112075
18114351
18137973
18179189
18219077
18222773
18224410
18227245
18232692
18235943
18238081
18307548
18321459
18394101
18412787
18491497
18517749
18521781
18772212
19136370
19207874
627380515267110
654297315388707
654759415391326
654785315391457
659720215419170
672318715492683
672571615494329
685669315573331
688537515592085
688580915592396
688583315592409
688732015593598
688908215594841
688908615594843
688947415595137
689096015596160
689238815597119
689284615597472
689324615597779
689468915598835
689523215599209
689771115600948
689849215601547
690060915603098
690526415606508
690838215608798
692529315621846
695878015647979
696278115651111
696636215653863
698943915672843
704032415712272
704220115713680
705568915722752
708591315739258
710836615752876
717176015794143
717180115794185
717850415799345
718203315802159


Changes incorporated in this version: 15615053 15686528 15764146 16718403 17263041 17444369 17761776 18491497 18521781 19136370 19207874

Patches accumulated and obsoleted by this patch: 127980-01 139510-01 139944-01 146838-01 147697-01 148161-02 148174-01 148231-01 148338-07 148377-01 148557-04 148875-03 149502-01 149616-01 149642-02 149718-01 149729-03 150108-01 150115-04 150125-04 150169-05 150300-01 150527-05 150531-02 150532-01 150627-01 150629-02 150756-04 150760-01 150841-01

Patches which conflict with this patch: 149636-01

Patches required with this patch: 118833-36 118918-24 119254-88 119578-30 120011-14 125503-02 127127-11 127755-01 137137-09 139555-08 141444-09 142909-17 144500-19 147147-26 148888-05 (or greater)

Obsoleted by:

Files included with this patch:

/etc/certs/SolarisCA
/etc/crypto/certs/SolarisCA
/etc/inet/ike/config.sample
/kernel/crypto/sparcv9/sha2
/kernel/drv/sparcv9/bofi
/kernel/drv/sparcv9/crypto
/kernel/drv/sparcv9/devinfo
/kernel/drv/sparcv9/dld
/kernel/drv/sparcv9/e1000g
/kernel/drv/sparcv9/hermon
/kernel/drv/sparcv9/ibd
/kernel/drv/sparcv9/ip
/kernel/drv/sparcv9/ipsecah
/kernel/drv/sparcv9/ipsecesp
/kernel/drv/sparcv9/lofi
/kernel/drv/sparcv9/mcxe
/kernel/drv/sparcv9/mcxnex
/kernel/drv/sparcv9/mm
/kernel/drv/sparcv9/mpt
/kernel/drv/sparcv9/mpt_sas
/kernel/drv/sparcv9/poll
/kernel/drv/sparcv9/scsi_vhci
/kernel/drv/sparcv9/sd
/kernel/drv/sparcv9/spdsock
/kernel/drv/sparcv9/ssd
/kernel/drv/sparcv9/zfs
/kernel/fs/sparcv9/devfs
/kernel/fs/sparcv9/procfs
/kernel/fs/sparcv9/zfs
/kernel/kmdb/sparcv9/genunix
/kernel/kmdb/sparcv9/intr
/kernel/kmdb/sparcv9/ipc
/kernel/kmdb/sparcv9/isp
/kernel/kmdb/sparcv9/mpt
/kernel/kmdb/sparcv9/mpt_sas
/kernel/kmdb/sparcv9/mpxio
/kernel/kmdb/sparcv9/mr_sas
/kernel/kmdb/sparcv9/nfs
/kernel/kmdb/sparcv9/ptm
/kernel/kmdb/sparcv9/sd
/kernel/kmdb/sparcv9/ssd
/kernel/kmdb/sparcv9/usba
/kernel/kmdb/sparcv9/zfs
/kernel/misc/sparcv9/cmlb
/kernel/misc/sparcv9/dls
/kernel/misc/sparcv9/ibtl
/kernel/misc/sparcv9/mac
/kernel/misc/sparcv9/pcicfg
/kernel/misc/sparcv9/scsi
/kernel/misc/sparcv9/sha2
/kernel/sched/sparcv9/SDC
/kernel/sched/sparcv9/TS
/kernel/strmod/sparcv9/ip
/kernel/strmod/sparcv9/ipsecah
/kernel/strmod/sparcv9/ipsecesp
/kernel/sys/sparcv9/inst_sync
/kernel/sys/sparcv9/shmsys
/lib/libaio.so.1
/lib/libmd.so.1
/lib/libzfs.so.1
/lib/libzfs.so.2
/lib/llib-lc.ln
/lib/llib-ldevice.ln
/lib/llib-ldevid.ln
/lib/llib-ldevinfo.ln
/lib/llib-lzfs.ln
/lib/sparcv9/libaio.so.1
/lib/sparcv9/libmd.so.1
/lib/sparcv9/libzfs.so.1
/lib/sparcv9/libzfs.so.2
/lib/sparcv9/llib-lc.ln
/lib/sparcv9/llib-ldevice.ln
/lib/sparcv9/llib-ldevid.ln
/lib/sparcv9/llib-ldevinfo.ln
/lib/sparcv9/llib-lzfs.ln
/platform/SUNW,SPARC-Enterprise/kernel/cpu/sparcv9/FJSV,SPARC64-VI
/platform/SUNW,SPARC-Enterprise/kernel/sparcv9/unix
/platform/SUNW,Sun-Fire-15000/kernel/cpu/sparcv9/SUNW,UltraSPARC-III
/platform/SUNW,Sun-Fire-15000/kernel/cpu/sparcv9/SUNW,UltraSPARC-III+
/platform/SUNW,Sun-Fire-15000/kernel/sparcv9/unix
/platform/SUNW,Sun-Fire/kernel/cpu/sparcv9/SUNW,UltraSPARC-III
/platform/SUNW,Sun-Fire/kernel/cpu/sparcv9/SUNW,UltraSPARC-III+
/platform/SUNW,Sun-Fire/kernel/misc/sparcv9/sbdp
/platform/SUNW,Sun-Fire/kernel/sparcv9/unix
/platform/SUNW,Ultra-Enterprise-10000/kernel/cpu/sparcv9/SUNW,UltraSPARC-II
/platform/SUNW,Ultra-Enterprise-10000/kernel/sparcv9/unix
/platform/sun4u/kernel/brand/sparcv9/s9_brand
/platform/sun4u/kernel/cpu/sparcv9/SUNW,UltraSPARC-II
/platform/sun4u/kernel/cpu/sparcv9/SUNW,UltraSPARC-III
/platform/sun4u/kernel/cpu/sparcv9/SUNW,UltraSPARC-III+
/platform/sun4u/kernel/cpu/sparcv9/SUNW,UltraSPARC-IIIi
/platform/sun4u/kernel/cpu/sparcv9/SUNW,UltraSPARC-IIIi+
/platform/sun4u/kernel/cpu/sparcv9/SUNW,UltraSPARC-IIe
/platform/sun4u/kernel/drv/sparcv9/px
/platform/sun4u/kernel/kmdb/sparcv9/unix
/platform/sun4u/kernel/misc/sparcv9/cpr
/platform/sun4u/kernel/misc/sparcv9/forthdebug
/platform/sun4u/kernel/misc/sparcv9/kmdbmod
/platform/sun4u/kernel/misc/sparcv9/pcie
/platform/sun4u/kernel/sparcv9/genunix
/platform/sun4u/kernel/sparcv9/unix
/platform/sun4v/kernel/brand/sparcv9/s9_brand
/platform/sun4v/kernel/cpu/sparcv9/SPARC-M4
/platform/sun4v/kernel/cpu/sparcv9/SPARC-T3
/platform/sun4v/kernel/cpu/sparcv9/SPARC-T4
/platform/sun4v/kernel/cpu/sparcv9/SPARC-T5
/platform/sun4v/kernel/cpu/sparcv9/SPARC64-X
/platform/sun4v/kernel/cpu/sparcv9/SUNW,UltraSPARC-T1
/platform/sun4v/kernel/cpu/sparcv9/SUNW,UltraSPARC-T2
/platform/sun4v/kernel/cpu/sparcv9/SUNW,UltraSPARC-T2+
/platform/sun4v/kernel/cpu/sparcv9/generic
/platform/sun4v/kernel/cpu/sparcv9/sun4v-cpu
/platform/sun4v/kernel/crypto/sparcv9/rsa
/platform/sun4v/kernel/crypto/sparcv9/sha2
/platform/sun4v/kernel/drv/sparcv9/n2cp
/platform/sun4v/kernel/drv/sparcv9/px
/platform/sun4v/kernel/drv/sparcv9/trapstat
/platform/sun4v/kernel/drv/sparcv9/vdc
/platform/sun4v/kernel/drv/sparcv9/vds
/platform/sun4v/kernel/drv/sparcv9/vpci
/platform/sun4v/kernel/kmdb/sparcv9/unix
/platform/sun4v/kernel/misc/sparcv9/forthdebug
/platform/sun4v/kernel/misc/sparcv9/iovcfg
/platform/sun4v/kernel/misc/sparcv9/kmdbmod
/platform/sun4v/kernel/misc/sparcv9/pcicfg
/platform/sun4v/kernel/misc/sparcv9/pcie
/platform/sun4v/kernel/misc/sparcv9/sha2
/platform/sun4v/kernel/sparcv9/genunix
/platform/sun4v/kernel/sparcv9/unix
/platform/sun4v/lib/libmd_psr.so.1
/platform/sun4v/lib/sparcv9/libmd_psr.so.1
/sbin/init
/sbin/zfs
/sbin/zpool
/usr/bin/digest
/usr/bin/kmfcfg
/usr/bin/mac
/usr/bin/pgstat
/usr/bin/pktool
/usr/include/inet/ip_ire.h
/usr/include/libzfs.h
/usr/include/net/pfkeyv2.h
/usr/include/sys/bitset.h
/usr/include/sys/cap_util.h
/usr/include/sys/cpucaps_impl.h
/usr/include/sys/cpuvar.h
/usr/include/sys/crypto/common.h
/usr/include/sys/ddi_impldefs.h
/usr/include/sys/ddi_implfuncs.h
/usr/include/sys/devpoll.h
/usr/include/sys/dkio.h
/usr/include/sys/fs/zfs.h
/usr/include/sys/fss.h
/usr/include/sys/ftrace.h
/usr/include/sys/ib/clients/ibd/ibd.h
/usr/include/sys/ib/ibtl/ibti_common.h
/usr/include/sys/ib/ibtl/ibtl_ci_types.h
/usr/include/sys/ib/ibtl/ibtl_types.h
/usr/include/sys/instance.h
/usr/include/sys/lgrp.h
/usr/include/sys/mac.h
/usr/include/sys/mdi_impldefs.h
/usr/include/sys/pattr.h
/usr/include/sys/pghw.h
/usr/include/sys/poll_impl.h
/usr/include/sys/proc.h
/usr/include/sys/project.h
/usr/include/sys/scsi/adapters/mptvar.h
/usr/include/sys/scsi/adapters/scsi_vhci.h
/usr/include/sys/scsi/generic/commands.h
/usr/include/sys/scsi/impl/commands.h
/usr/include/sys/scsi/impl/spc3_types.h
/usr/include/sys/scsi/impl/transport.h
/usr/include/sys/scsi/scsi_address.h
/usr/include/sys/scsi/scsi_pkt.h
/usr/include/sys/scsi/targets/sddef.h
/usr/include/sys/strsubr.h
/usr/include/sys/sunddi.h
/usr/include/sys/sunndi.h
/usr/include/sys/sysdc_impl.h
/usr/include/sys/sysevent/dev.h
/usr/include/sys/sysmacros.h
/usr/include/sys/systm.h
/usr/include/sys/thread.h
/usr/include/sys/time.h
/usr/include/sys/types.h
/usr/include/sys/user.h
/usr/include/sys/vmsystm.h
/usr/include/vm/anon.h
/usr/include/vm/page.h
/usr/include/vm/seg.h
/usr/include/vm/seg_spt.h
/usr/kernel/sched/sparcv9/FSS
/usr/kernel/sched/sparcv9/FX
/usr/kernel/sched/sparcv9/RT
/usr/lib/brand/solaris8/files/audit
/usr/lib/brand/solaris8/files/rcS
/usr/lib/brand/solaris8/mods/S37_fix_bsm
/usr/lib/brand/solaris8/mods/S40_setup_preload
/usr/lib/brand/solaris8/s8_boot
/usr/lib/brand/solaris8/s8_install
/usr/lib/brand/solaris8/s8_p2v
/usr/lib/brand/solaris8/s8_ps
/usr/lib/brand/solaris9/files/audit
/usr/lib/brand/solaris9/files/rcS
/usr/lib/brand/solaris9/mods/S37_fix_bsm
/usr/lib/brand/solaris9/mods/S40_setup_preload
/usr/lib/brand/solaris9/newtask
/usr/lib/brand/solaris9/s9_boot
/usr/lib/brand/solaris9/s9_install
/usr/lib/brand/solaris9/s9_newtask
/usr/lib/brand/solaris9/s9_p2v
/usr/lib/brand/solaris9/s9_ps
/usr/lib/efcode/sparcv9/fcdriver.so
/usr/lib/efcode/sparcv9/fcode.so
/usr/lib/efcode/sparcv9/fcpackage.so
/usr/lib/fm/fmd/plugins/zfs-retire.so
/usr/lib/fm/llib-lfmd_log.ln
/usr/lib/fm/llib-ltopo.ln
/usr/lib/fm/sparcv9/llib-lfmd_log.ln
/usr/lib/fm/sparcv9/llib-ltopo.ln
/usr/lib/hotplugd
/usr/lib/inet/certdb
/usr/lib/inet/certlocal
/usr/lib/inet/certrldb
/usr/lib/inet/in.iked
/usr/lib/ldoms/ldmad
/usr/lib/libelfsign.so.1
/usr/lib/libike.so.1
/usr/lib/libipsecutil.so.1
/usr/lib/libkmf.so.1
/usr/lib/libkmfberder.so.1
/usr/lib/libkvm.so.1
/usr/lib/llib-ldiskmgt.ln
/usr/lib/llib-ldtrace.ln
/usr/lib/llib-lexacct.ln
/usr/lib/llib-liov.ln
/usr/lib/llib-lkvm.ln
/usr/lib/llib-lsoftcrypto.ln
/usr/lib/mdb/kvm/sparcv9/dls.so
/usr/lib/mdb/kvm/sparcv9/dtrace.so
/usr/lib/mdb/kvm/sparcv9/genunix.so
/usr/lib/mdb/kvm/sparcv9/intr.so
/usr/lib/mdb/kvm/sparcv9/ipc.so
/usr/lib/mdb/kvm/sparcv9/isp.so
/usr/lib/mdb/kvm/sparcv9/md.so
/usr/lib/mdb/kvm/sparcv9/mdb_ks.so
/usr/lib/mdb/kvm/sparcv9/mpt.so
/usr/lib/mdb/kvm/sparcv9/mpt_sas.so
/usr/lib/mdb/kvm/sparcv9/mpxio.so
/usr/lib/mdb/kvm/sparcv9/mr_sas.so
/usr/lib/mdb/kvm/sparcv9/nca.so
/usr/lib/mdb/kvm/sparcv9/nfs.so
/usr/lib/mdb/kvm/sparcv9/ptm.so
/usr/lib/mdb/kvm/sparcv9/s1394.so
/usr/lib/mdb/kvm/sparcv9/sd.so
/usr/lib/mdb/kvm/sparcv9/ssd.so
/usr/lib/mdb/kvm/sparcv9/usba.so
/usr/lib/mdb/kvm/sparcv9/zfs.so
/usr/lib/mdb/proc/libzpool.so
/usr/lib/mdb/proc/sparcv9/libzpool.so
/usr/lib/rcm/modules/SUNW_network_rcm.so
/usr/lib/rcm/scripts/ORCL,cdrom_rcm.pl
/usr/lib/s8_brand.so.1
/usr/lib/s9_brand.so.1
/usr/lib/security/kmf_nss.so.1
/usr/lib/security/kmf_openssl.so.1
/usr/lib/security/kmf_pkcs11.so.1
/usr/lib/security/pkcs11_kernel.so.1
/usr/lib/security/pkcs11_softtoken.so.1
/usr/lib/security/pkcs11_softtoken_extra.so.1
/usr/lib/security/sparcv9/kmf_nss.so.1
/usr/lib/security/sparcv9/kmf_openssl.so.1
/usr/lib/security/sparcv9/kmf_pkcs11.so.1
/usr/lib/security/sparcv9/pkcs11_kernel.so.1
/usr/lib/security/sparcv9/pkcs11_softtoken.so.1
/usr/lib/security/sparcv9/pkcs11_softtoken_extra.so.1
/usr/lib/sparcv9/libipsecutil.so.1
/usr/lib/sparcv9/libkmf.so.1
/usr/lib/sparcv9/libkmfberder.so.1
/usr/lib/sparcv9/libkvm.so.1
/usr/lib/sparcv9/libzpool.so.1
/usr/lib/sparcv9/llib-ldiskmgt.ln
/usr/lib/sparcv9/llib-ldtrace.ln
/usr/lib/sparcv9/llib-lexacct.ln
/usr/lib/sparcv9/llib-liov.ln
/usr/lib/sparcv9/llib-lkvm.ln
/usr/lib/sparcv9/llib-lsoftcrypto.ln
/usr/lib/sparcv9/s8_brand.so.1
/usr/lib/sparcv9/s9_brand.so.1
/usr/lib/sysevent/modules/swap_mod.so
/usr/perl5/5.8.4/lib/Sun/Solaris/Pg.pm
/usr/platform/sun4u/include/sys/machparam.h
/usr/platform/sun4u/include/sys/vm_machparam.h
/usr/platform/sun4u/include/vm/hat_sfmmu.h
/usr/platform/sun4u/lib/mdb/kvm/sparcv9/wrsm.so
/usr/platform/sun4u/lib/mdb/kvm/sparcv9/wrsmd.so
/usr/platform/sun4v/include/sys/machparam.h
/usr/platform/sun4v/include/sys/machsystm.h
/usr/platform/sun4v/include/sys/vm_machparam.h
/usr/platform/sun4v/include/vm/hat_sfmmu.h
/usr/platform/sun4v/lib/mdb/kvm/sparcv9/ldc.so
/usr/platform/sun4v/lib/mdb/kvm/sparcv9/vdsk.so
/usr/sbin/cryptoadm
/usr/sbin/ikeadm
/usr/sbin/ipsecconf
/usr/sbin/sparcv9/lockstat
/usr/sbin/sparcv9/swap
/usr/sbin/sparcv9/zdb
/var/svc/manifest/network/ipsec/policy.xml
/var/svc/profile/platform_sun4v.xml

Problem Description:

15615053 panic in delfpollinfo
15686528 efdaemon interpreter creates zombies and hangs at exit
15764146 di_init takes much more time on T3-4 than other platforms
16718403 vdc driver I/O timeout needed
17263041 make sure cached QP current state is updated before calling modify QP
17444369 cfgadm configure a configured disk causes EFAULT to I/O in progress
17761776 vdc driver I/O timeout fail-over doesn't work
18491497 FC_SRIOV: no bandwidth parameter from LDOM
18521781 code does not check FSR.fcc3 after MONTMUL and MONTSQR instructions
19136370 patch ldmad for backport of 15747988 to Solaris 10
19207874 KU patches 150400-08 up to 150400-14 use wrong i.manifest
 
(from 150400-14)
 
15354492 vhci_scsi_start() always returns TRAN_BUSY (for non-reserve cmds) on error
15389882 pkcs11_softtoken doesn't properly strip pkcs7 padding
15716833 kernel memory observability: pp_kernel kstat is unreliable and broken
15735699 MPxIO: least desired path instance phase II
15736453 swap, dump zvols could handle fragmentation better
15741380 backup software unable to detect library/tape devices attached to SAS2.0 HBA
16673262 panic in ip@ ip:udp_wput
16706583 MPxIO: 'logical-block' policy does not work for asymmetric targets
16822599 seg zio size computation on SPARC needs work
16939761 SAS disks not enumerated/attached
17357498 M6-32: lgrp load average scalability improvements
17611048 sd.conf entries should override default behavior
17984854 memory corruption in as_ctl() with MC_LOCKAS
18232692 zvol_child_vd needs to ensure the child is readable
18321459 pthread_cond_reltimedwait_np() misbehaves in Solaris9 branded zone
18412787 mptsas_find_path_phy does not find pathinfo with sfunc
18772212 Warning: Additional snapshots for big_modexp_ncp_yf() found.
 
(from 150400-13)
 
15332295 division panic on a disk with reported capacity of less than 80k
15786977 resurrect arcstat_mru_ghost_hits and arcstat_mfu_ghost_hits
15812735 panic in l2arc_cached() on m4k while running strs3 stress test
15821207 ZFS prevents reboots when devices are missing
15882075 arc doesn't promote buffers which have a ghost entry anymore
16268329 32-bit overflow in arc_adapt() causes arc_p instability
16343120 race in arc_adapt() causes arc_p to go negative
17038558 evicting l2arc bufs with outstanding read can cause bad consequences
17251055 IB interfaces could not ping each other when configured with non-default pkey
17733159 command isalist on M3000 does not display "sparcv9+fmuladd" per man isalist(5)
17779420 anon_map_getpages() should NULL out unlocked pages in ppa[]
17900075 write response blocking read response from vds
18224410 DISM assumes all constituent pages are present in spt_ppa[]
18394101 [UPLSA] deadlock occurred when delete-ip and watchdog of mcxnex were executed
 
(from 150400-12)
 
15453777 pwrite() must ignore the O_APPEND/FAPPEND flag
15580758 panic: ip_fast_forward+0xc9(ffffff02e8b9a038, b8012c0, ffffff02d9457ca8, ffffff02d8b15a00)
15756464 ZFS: freeing free segment following move of pool from SPARC to x86
15771021 panic: BAD TRAP: occurred in module "pcie" due to an illegal access to a user address
15795535 bad mutex panic when called from hermon_qp_modify()
15813680 hang on boot when PCIe IOV devices enabled
15821382 uninitialized chanp->ch_qp_mutex variable in ibt_alloc_special_qp
15821985 add support for LDoms DIOV features such as add-io and rm-io
15822290 POSIX namespace pollution in <sys/types.h>: KLGRPSET_WORDS and MAX_INDEX_T
15824954 unexpected IBT_ERROR_CATASTROPHIC_SRQ event causes panic
15892272 panic assertion failed: fmrpool->fmr_pool_size == 0, file: ../../common/io/mcxne
15937751 sys/ib/ibtl/ibti_common.h breaks C++ build
15963898 request driver support of Mellanox CX3 card in Solaris for Merrimack+
15985080 BAD TRAP panic px_ib_intr_redist on T5
16042291 mcxnex VF driver not FMA-hardened
16073620 ConnectX limits number of processes doing O/S bypass to 127
16086435 bad mutex in vdev_dtl_sync() during zpool split
16238762 panic: mpo_cpu_add: Cannot read MD
16285392 hermon_mad_sendto_vf() assertion failure during ulp_4 test
16293053 panic at ibmf_i_handle_recv_completion() in ldm destroy-vf
16388305 change IB MTU from 4KB to 2KB in Solaris HCA
16538309 when PF becomes inaccessible, the VF driver panics during PIO accesses
16584967 mcxnex_eq_init_all() should allocate eq[0] first before the rest
16600745 byteswapping should not happen only for blocks fetched from l2arc
16717035 continuous panic/reboot when CX-3 does not have 2.11.1280 firmware
16722973 panic in mcxnex_write_hcr() while doing HCADR tests
16942137 IB port misidentified as Ethernet port on ConnectX VPI card
16990155 RAC LDOM node panics while running OLTP benchmark
17075962 high-weighted interrupts are being assigned twice to the same CPU
17295509 px_msiq_redist incorrectly restores weights when flag=false and weight > 0
17401437 T4-2 reporting "ino 0xf has no matching MSIQ record"
17661774 contig_mem_arena grows very large in S10 guest domains
18222773 mpt: unknown event 17 received
18235943 iostat -E does not print out the serial number in some cases
18238081 uninitialized vars in sd.c
18307548 Solaris 10 x86 machines with 'set hires_tick=1' fail to boot after fix for 15716439
18517749 Solaris 10 x86 unscalehrtime() is not functional
 
(from 150400-11)
 
15665585 iostat -En doesn't output the serial number for mpt_sas drives
15784231 arc_init() incorrectly calculates availmem in the 32-bit mode if physmem is 16GB
15803392 'zpool status -x' is too pedantic with respect to pool version
15924838 IOV Framework support for Fibre Channel devices
16593168 unable to import zpools after applying kernel patch 147147-26/147148-26
16683459 use-after-free in vdc_setup_devid of vdc.c:9156
16782143 one step forward, two steps back, is bad for devi_quiesce
16829802 quiescing siblings in walk_devs() seems broken, case DDI_WALK_PRUNESIB should be invoked rather than DDI_WALK_CONTINUE [..file os/devcfg.c]
17215344 WARNING: Could not determine class name for classcode 0x107 printed on console
17337436 FC SRIOV: system panic when booting primary off a PF LUN
17615665 Trusted Extensions not working well with Qlogic card
17623108 fix module verification to allow new root CA
17694758 vd_backend_minfo returns incorrect data when DKIOCGMEDIAINFOEXT is not supported
17728421 race between kflt_export and page_claim_contig_pages triggers system panic
17867801 iSCSI boot should gracefully decline chap user and secret length greater than 16
17938451 backport error in ndi_devi_quiesce_begin() needs to be fixed in Solaris 10
18112075 problem with kernel TCP/IP
 
(from 150400-10)
 
15207695 problem with kernel TCP/IP
15605702 STREAMS module does not receive reset when done received before accept() on Solaris 10
15626496 core file due to NULL zpool handle in zfs_open()
15661139 problem with kernel TCP/IP
15720514 scale SFMMU_NUM_LOCK with NCPU
15727578 tcp_deferred_acks_max should be allowed to be less than 2
15730854 SCTP connections are leaked due to missing heartbeats
15740174 "Deadlock: cycle in blocking chain" between dnode_move & dbuf_verify
15816229 mdb command stuck in uiomove()/xcopyout()/copyout_move()
15820749 investigate syncing atime during fsync and possibly getattr requests
15826104 "Deadlock: cycle in blocking chain" during nicdrv testing
15925651 sctp_rotate_faddr() panics
16263826 2nd resilvered disk may erroneously complete soon after 1st disk completes
16423386 dnode_next_offset() doesn't do exhaustive search
16708230 in_sync_sys() should not write to filesystem with e_ddi_enter_instance
16804978 l2arc_cached should handle b_cookie safely
17062650 b_cookie can disappear between l2arc_cached() and l2arc_read()
17241173 SUNWcsr postinstall script uses grep(1) without heeding lines commented out
17245181 problem with kernel TCP/IP
17356746 fix for 16423386 doesn't take care of hitting 64bit limits of DMU
17478373 x4540 kmem_io_4G exhausted under I/O load
17495733 s8_ps.sh should preload s8_npreload.so.1 library
17562488 px DVMA caches failures
17608895 zpool create coredumps
17615487 mount of .zfs/snapshot/snapname fails due to uninitialized name
17906811 elfsign fails to load some private keys
18114351 MPT_MOD_STRING was not updated to reflect "MPT HBA Driver v1.117"
18137973 panic in inst_sync_sys in an immutable kernel zone
18219077 backout the fix of 15817071 and implement a simple fix in procfs
18227245 copyright year needs updating to 2014 for Solaris 10 patch
 
(from 150400-09)
 
17628036 race between pollhead_delete() and strclose->pollhead_clean causes panic
 
(from 150400-08)
 
15414382 in.iked should exit with a non-zero code when checking against an invalid ike.config file
15449671 assertion failure in sd_unit_attach due to kstat_create failing
15566297 faulty PF_KEY replies should not cause in.iked to halt
15566298 PF_KEY diagnostics need to be more specific
15567469 get_ipsa_pair() does not always follow bucket lock entry rules, could potentially deadlock
15570951 ipsecalgs(1m) does not cope when there are no algorithms registered
15612419 ipsecconf -F failed with exit status 1
15716439 times() system call is not scalable
15794263 pmap -L does not scale
15809288 'newtask -p default -c $$' hangs when run within a S9 Branded Zone with cpu-shares
15816639 clock slowness issues with Fair Share Scheduling
15818472 threads favoring cpu0 tend to slow clock tick processing
16354357 clock scalability issues with CPU-capping enabled
16672077 clock tick processing should be optimized for SYSDC scheduling class
17075733 crypto framework should return mechanism not supported instead of bad arguments
17075773 in.iked(1M) outputs a message of CKR_ARGUMENTS_BAD in sun4v platform
17289900 regression in times() for multithreaded
17361787 ikev1 certutils should print out human-readable PKCS#11 errors
17816539 idle CPU's are failing to steal runnable threads from other CPU's
17974760 IKEv1 needs to give more insight into its certificate operations
17986274 IKEv1 cert chain validation with cert payloads needs work
 
(from 150400-07)
 
15041583 thread walker can loop if pointers change under its feet
15556414 self-encapsulated inbound ICMP fails upon reflection
15613053 implement ATA TRIM, SCSI Write Same / UNMAP , Thin Reclamation
15647156 ZFS should support unmap for ssd devices
15735442 support Logical Block Provisioning in Solaris SD driver
15767303 sd_get_lbp_attribute alignment error panic
15786808 deadlock between zfs_ioc_recv and zfs_ioc_rollback
15795037 sd_send_scsi_INQUIRY truncates pages
15795327 some zpool commands would hang when there is a suspended pool
15796962 zpool destroy hangs when performing 'unmap' on SSD
15804599 massive write slowdown on random SCSI write workloads due to SCSI unmap overhead on pool data devices
15819443 regression in pool version 32 with multiple slog devices and large sync writes
16068162 zfs_ioc_vdev_set_state should not POOL_CHECK_SUSPENDED before spa_open_policy()
17082774 Solaris 10 Kernel Patch 148888-01 V880 panic in sfmmu_mlspl_enter() recursive mutex_enter
17510986 panic at cu_pg_reconfig+0x88 on Athena system at suspend/resume test
17609380 double-free of PF_KEY mblk possible in low memory situations
17615534 64KB free page search occupies 100% CPU load with Solaris 10
17798090 recursive mutex_enter panic from dnlc_dir_add_entry()
17799335 ZFS increasing volsize causes panic in VirtualBox VM
 
(from 150400-06)
 
15706409 mpt should handle failing disks more intelligently
15714128 zpool import should not abort with overlapping partitions
15786729 Ozone: failed to cap power on Solaris 10 and 11 if hard cap is enabled before OS handoff
15808754 swap on zvol is slow under memory pressure as compared to raw swap impacting applications instantly
15816323 zpool import with zvols takes longer with each import
15875298 mpt does not recover from "Disconnected command timeout" with failing disks
15892821 ndi_devi_offline fails when SAS PHY is offlined forcibly
16245585 "Disconnected command timeout for Target" SCSI warning
16329143 'divide by zero' panic during 'zfs send'
17366564 problem with kernel (syscall)
 
(from 150400-05)
 
15710775 vdc driver should support DKIOCGMEDIAINFOEXT
15780493 tx_sync_thread's stack is sometimes not large enough
15800486 kstat's mixing of scaled/unscaled hrtime sacrifices monotonicity
15824910 add support to configure vdisk physical block size in vdc.conf
15824925 zvol should support DKIOCGMEDIAINFOEXT
15980058 FWARC/2012/285 VIO protocol changes
15992306 using sizeof(struct dk_minfo_ext) in kernel may corrupt memory of 32-bit user app
16250054 Live Migration failed if klmmod was not loaded
16633265 vdev_check event for a missing vdev causes syseventd:zfs_mod to crash
16635844 z_hold_mtx[] locks need to be on their own cache line
16716278 probe io:::done does not fire for asynchronous I/O
17034106 LGRP_MEM_POLICY_RANDOM on M10 is not random for Solaris 10
17361762 incorrect anon_cache buf_inuse value reported on Solaris 10
 
(from 150400-04)
 
15665972 hypervisor call 0x21 returned an unexpected error 2 due to invalid 2nd sfmmu_info
15704632 unable to remove huge objects
16091474 sd_xbuf scsi_pkt = 0, leaving cmd stuck in ssd driver with no callback assigned
16519289 Solaris e1000g needs to support Intel Clarkville
16713450 SD_MUTEX should not be dropped around call to timeout(9f)
17220973 zone_locked_mem gets negative when DISM memory is locked
 
(from 150400-03)
 
15511003 can't bind to socket from kernel thread because of NET_MAC_AWARE privilege
15518895 swap zvols need safeguards when changing their size
15722845 rebooting zones several times leaves behind lot of dormant ipsecesp kstats
15723155 cannot receive new filesystem stream: invalid backup stream
15740941 increasing volsize of swap zvol causes panic
15746589 ::vdev is not pipable
15746994 resizing swap with no dump device set causes panic
15751898 swap should prohibit using a subrange of a zvol
15756032 memory leaks in swap_mod
15766940 swapping to large extent causes panic
15775996 zone defrouter option is not working properly with link down
15787467 decreasing volsize of swap zvol causes panic
15796390 zio/arc join: buffer frees wrong cache
15823090 head panicked while ZFS evicting cache buffer no longer found in the hash
15825650 data missing from ZFS file system after a panic
16013601 replay of partial block writes can extend EOF to end of block
16038166 transient user data corruption due to anon_map_privatepages() race
16205576 problem with cpc driver
16532828 zvol_swap_004_pos fails on Solaris 10 patch bits
17214105 pgstat -v cap is not fixed if the load is over the maximum listed speed of CPU
17255714 bug needed for separate RTI for forthdebug deliverable related to RTI 383701
 
(from 150400-02)
 
15666664 allow partially mapped segments to share non-leaf page tables on x86
15689118 pgstat(1M) should report absolute maximum capacity of a PG
15720191 panic sfmmu_asm: valid SCD with no 3rd scd TSB
15758461 DISM segments should track page locking using bitmap
15764451 seg_spt should align inner and outer mapping VAs
15791822 RFE: enable hotplug service by default on sun4v platforms
15794950 system hang, threads blocked in DISM code
15812816 hotplug disable operation on a 16 CMU system can take 14-18 minutes
15816587 cputrack prints incorrect %tick
15819674 dynamic removal of root complex and slot with qlc/emlxs card fails due to a reference held by fmd
15819978 DDIO: add-io of a slot back to primary fails: ldma_iov_add: iov_add(500,@1/@0/@1) failed
15821644 kernel panics in pghw_cap_init when there are no hw groups
15823088 processes sharing the same ptables can race in x86 hat_share()
15826749 assertion failed: status == DDI_SUCCESS, file: ../../common/io/busra.c, line: 1342
15833828 I/O domain panic when dynamic removing a VF from this domain in primary
15833855 instance number of hxge/sxge changes after FEM is added back to primary domain
15857135 dynamic removal of root complex and slot can fail due to reference held by hald
15890500 BAD TRAP panic on a T4-1B due to NULL pointer dereference
15892217 panic assertion failed: !IN_VA_HOLE(va), file: ../../i86pc/vm/htable.c
15898382 ldm add-io VF to primary failed with ERROR: hardware or driver specific failure
15903493 prtdiag displays "SUNW,pf-emulation" entries in guest LDOM following VF add
15954351 systems hang in cv_wait() from prbarrier()
15994235 "hotplug poweroff" failed
16099913 ndi_devi_config_one can leak a node reference if NDI_CONFIG is used
16293098 qlc card has issues being added to an I/O domain
16311421 extra message seen with ldm add-io and rm-io VF
16420072 create slot-names properties for PCIe hotpluggable slots
16426940 M5/T5: ldm unbind of an SDIO Domain hangs
16493596 devices added to guest domain with add-io are not immediately visible
16503776 network devices under RCs loaned out to I/O domains have incorrect maxvfs limit
16562469 Oracle with a large SGA on T5/M5 startup&shutdown takes quite a long time
16608837 "ABORT: Unimplemented Fcode" messsage seen when adding pc_1 to a domain on T5-1B
16741159 ldmad core dumps found on ldoms split domain w/IB-QDR
16760866 backport softlso and packet hashing functions to Solaris 10
 
(from 150400-01)
 
15704883 capture ftrace_state during panic
15707492 enabling FTRACE on 32-bit x86 causes panic from within intr_thread()
15730133 pm_start() on an attaching node vulnerable to pm_powerup from framework calls
15741367 ftrace.h definition of caller needs to be local to FTRACE_x macros
15750574 anon_array_lock - high contention
15760160 RFE: add dcmd to mdb to extract ftrace information from crash dumps
15760769 FTRACE probe in i86pc trap() doesn't include addr
15794086 kstat assertion panics after LDOM migration
(removed - see 18219077) 15817071 system panic in pollhead_delete when using devpoll on /proc file system
15823255 LDoms CPU DR of available CPUs causes lpl_topo_verify fail -5 panic
16039539 response of SYN/ACK is delayed when connected from 600 clients per second
16361843 panic[cpu74]/thread=1000a22317a0: Deadlock: cycle in blocking chain
16362919 assertion failed: cu_cpu_info, file: ../../common/os/cap_util.c, line: 1771
16425981 panic with freeb() in sctp_process_recvq()
16771544 integration of IB-SRIOV into Solaris 10 requires rejuvenating KU 148888-04, 148889-04
 
(from 148377-01)
 
        This revision accumulates generic Sustaining patch 148174-01
        into Solaris S10U11 update.
 
(from 148174-01)
 
7085913 system is panicking in pollhead_delete() even with the fix for 7008672 in place
 
(from 150108-01)
 
15781929 ino_ipil_cntr should be reinitialized after spurious MSI
15797792 T4-2 device interrupt to CPU binding is poor using half of CPUs and causing performance issues
15824758 ino_unclaimed_intrs should be reinitialized in px_msiq_intr()
15825402 7202764 breaks 7176502 resulting in panic
 
(from 150300-01)
 
15593115 e1000g driver_alias entries for unsupported device IDs
15780385 "ESB2 receiver disabled" warning message should be only printed in debug binary
15785440 network lost connection when doing NFS stress test with heavy load on HP Z620
15997791 VNICs don't work when you run out of H/W MAC addresses on 82579 chipset
 
(from 150532-01)
 
16908436 forthdebug is a deliverable for Bug 16164869
 
(from 149502-01)
 
6856693 sadb_update_sa() checks for duplicate SADB_UPDATE messages in the wrong place
 
(from 149616-01)
 
7178504 header ordering issue with tunnel encap limit in IPv6 tunnel mode ESP
7182033 fix for CR 7178504 fails for IPv4 over IPv6 tunnels
 
(from 150125-04)
 
17075297 deliver usr/lib/mdb/kvm/sparcv9/zfs.so separate from RTI 383705
 
(from 150125-03)
 
15662359 activate ZPOOL_CONFIG_FRU in ON
15715215 assertion failed: REF_INACTIVE(ref), file: ../../common/fs/zfs/arc.c, line: 2643
15715549 arc_p is inflated
15718032 73% vdb407_nvSeqReadBs128kFs1g_zfsraidz3_9 performance regression x86
15750994 performance pathology when manipulating files with large numbers of empty blocks (arc_trim_refs)
15752435 need steady state arc_size changes compatible with rearc
15764044 rw_exit: not owner, system panic during unlink from running consumer test util
15780200 assertion failure !BUF_L2CACHED(buf), function arc_destroy_buf
15785248 system hang due to physical memory exhaustion seen when major shift in workload
15789239 arc data shrinks continuously after arc grew to reach its steady state
15792971 4GB system with 4 zones hangs while trying to upgrade; kernel runs out of memory
15794791 'zinject -c all' panic, #pf Page fault Bad kernel fault at addr=0x30
15797481 small block workloads can foil steady-state ARC
15797710 ARC: bytes evicted should be tracked in a kstat
15798684 arc_read is trying to drop a lock it does not own, panics system
15799935 dism_stress tests are causing x86 and SPARC to hang
15801366 arc_no_grow forcing unnecessary shrink in arc_size
15801413 arc state eviction list size needs to account for "HOLE" buffers
15802661 l2arc write leaks checksum
15803852 arc_get_data_buf() waiting for shrink, but has lock that arc_reclaim_thread() needs to effect shrink
15804591 userland ::arc no longer works
15804687 frequent 32-bit ztest core dumps due to being out of memory
15810974 panic assertion failed: rc->rc_count >= number, file: ../../common/fs/zfs/refcount.c
15811520 arc_reclaim_thread missing a ptob call on the redzone
15813348 SMB performance test shows severe degradation
15817594 arc_anonymize_ref() invokes bcopy() on invalid structures
15819541 arc_evict_buf() returns wrong value for HOLE buffers
15844219 group with write_attributes ACL permission cannot update timestamp
15867625 arc_hold(buf, cb) not arc_rele'd on L2 error path
15987135 l2arc_evict() l2buf == buf->b_cookie assertion failure
15998183 arc_memory_throttle can stall TXG pipeline when system is paging
16776160 unable to bind the LDoms on zpool volumes after reboot
 
(from 150125-02)
 
15807421 load_nvlist() should handle read errors
15811225 zfs_ioc_pool_get_props can suspend holding spa_props_lock provoking a deadlock
15916736 zpool iostat -T option does not print the timestamp
 
(from 150125-01)
 
15494128 assertion failed: zvol_get_stats(os, nv) == 0, when EIO encountered
15710534 advance rotor before blocking on space_map_load
15771768 memleaks: arc_read/arc_hole_refi, vdev_alloc/metaslab_group_create
15793416 lock contention related to ZFS root lock
15809921 metadata rewrites should coordinate with l2arc
15822306 zfs panic at zfsvfs_teardown
15823992 IMPLY and EQUIV in libzpool need to honor aok
16395538 need to withdraw 149636-01 due to wrong deliverables
 
(from 150115-04)
 
15572296 do plumb/unplumb test with USB flash disk will cause system panic
 
(from 150115-03)
 
15602062 hang in sd while importing a ZFS pool
 
(from 150115-02)
 
15555874 sd setting incorrect buffer length on mode select
15696163 I/O is not retried to another path after one port is masked out
 
(from 150115-01)
 
15588762 format -e to does not update device softstate
 
(from 150629-02)
 
17336846 under error conditions mpt may call mpt_init_chip() recursively and panic
 
(from 150629-01)
 
15775014 mpt_check_scsi_io_error should sync the DMA handle before using it
 
(from 147697-01)
 
6925293 ipsecconf(1M) needs a receive-buffer increase for SPD_DUMP
7040324 ipsecconf -l fails with dump read: message corruption, 39184 len exceeds 8192 boundary
7042201 ipsecconf core dumps around send_pf_pol_message on certain rules
 
(from 148338-07)
 
15707174 s8_boot script has not been prepared to perform a p2v of an s8 32-bit system
 
(from 148338-06)
 
16845490 patch 148338-06 needs to add hard requirement for KU 148888-04
 
(from 148338-05)
 
16249123 /usr/bin/ps with "-L" hangs in Solaris 9 branded zone, when zombie LWP exists
16709548 backport 15788521 to Solaris 10 (s9_brand delivery)
 
(from 148338-04)
 
16002784 Kstat Perl module failed assertion caused by vminfo_t size mismatch in s9 zone
 
(from 148338-03)
 
15825188 Solaris 9 branded zone spews in.mpathd related errors to messages
 
(from 148338-02)
 
        This revision accumulates generic Sustaining patch 148161-02
        into Solaris S10U11 update.
 
(from 148338-01)
 
        This revision accumulates generic Sustaining patch 148161-01
        into Solaris S10U11 update.
 
(from 148161-02)
 
6597202 Solaris Auditing does not work in S8 containers
6958780 Solaris Auditing does not work in S9 containers
7108366 flar/cpio archive files created with absolute paths can cause GZ corruption whileBranded NGZ install
 
(from 148161-01)
 
7055689 emulation function for aio (s9_kaio()) fails to handle AIOWAITN
 
(from 139944-01)
 
        This revision accumulates generic Sustaining patch 139510-01
        into Solaris S10U7 update.
 
(from 139510-01)
 
6723187 /devices directory should be removed upon S8/S9 zone creation
6725716 sys-unconfig hangs when installing Solaris 8 Containers (Etude) from a Flash Archive
 
(from 148557-04)
 
17065864 panic in n2cp_move_req_off_page due to NULL reqp
17454726 panic in n2cp_move_req_off_page due to NULL nr_context
 
(from 148557-03)
 
17071025 panic in n2cp_clean_blockctx
17371338 double free in n2cp_ulcwq_freebuf and null dereference in n2cp_clean_hmacctx
 
(from 148557-02)
 
15521496 cryptoadm enable/disable all mechanisms inconsistently handles random
15686082 fix to 6769595 inadvertently changes behavior of cryptoadm disable provider=<prov> all
15765104 digest fails on files between 2MB and 1GB, gives wrong sha1 sum on files > 1GB on SPARC T3 machines
15766446 n2cp should not practice recursion
16340257 'pkg update' may fail or get hung when n2cp digest operation is enabled
 
(from 148557-01)
 
        This revision accumulates generic Sustaining patch 148231-01
        into Solaris S10U11 update.
 
(from 148231-01)
 
6273805 C_Sign call with NULL_PTR for data buffer returns CKR_FUNCTION_FAILED
 
(from 150627-01)
 
15781192 double free in kernelSlottable.c kernel_slottable_init()
16894659 fix typos in PKCS11 source file comments
 
(from 149729-03)
 
16397136 ikecert certlocal usage for PKCS#8 export is wrong
16886354 IKEv1 should understand certificates signed with SHA-2
17165615 IKEv1 pkcs#11 on-token key and certificate generation broken
 
(from 149729-02)
 
15618846 in.iked does not explicitly flag missing certs
15685991 memory leaks in in.iked
15783297 need a way to turn off OCSP checking in IKEv1
15814090 uninitialized variable in libike certlib_load function
16218907 minor error in fix for 15618846 -- error message loop should use 'j'
 
(from 149729-01)
 
        This revision accumulates generic Sustaining patch 149718-01
        into Solaris S10U11 update.
 
(from 149718-01)
 
6885375 check_rule() checks p2_lifetime_kb against p2_softlife_kb in wrong units
6885809 p2_lifetime_kb value conversions lead to integer overflows for p2_lifetime_secs > 4096
6885833 IPsec utilities should print lifetimes in human-readable format
6887320 check_rule() fails to enforce lower limit for SOFT lifetime in case of small HARD lifetime values
6889082 SOFT kbyte lifetime can be insane
6889086 ikeadm reports kilobyte lifetimes with wrong units
6889474 check_rule() should convert to different philosophy
6890960 ikeadm reports wrong value of system phase 2 soft byte lifetime
6892388 some ACQUIRE-specified lifetimes are still ignored by in.iked
6892846 RESPONDER-LIFETIME notify message handling should scrutinize kilobyte lifetimes as well
6893246 RESPONDER-LIFETIME handler should respond to invalid notification messages
6894689 iked should send kilobyte lifetimes in RESPONDER-LIFETIME messages
6895232 ikeadm get defaults does not work correctly if only p2_lifetime_kb is set
6897711 iked debug output should be less confusing for average sysadmin
6898492 iked should enforce lower maximum values for lifetimes
6900609 p1_lifetime_secs parsing should use the concept of least surprise too
6905264 iked debug claims Phase 2 notification failed as a result of delete
6908382 reflect the IPsec aging change in SOFT expire handling
 
(from 150841-01)
 
17031640 T4 server panics in page_vpsub
 
(from 148875-03)
 
15765165 "pktool list keystore=file" writes past end of buffer
17402549 crypto service should not "SIGBUS" due to a corrupt file
 
(from 148875-02)
 
16839721 pktool gencsr missing "hash" option on Solaris 10
 
(from 148875-01)
 
6989439 KMF does not process complex DistinguishedNames correctly
7171760 metaslot disguises itself as an arbitrary token when it has no "token" information configured
7171801 memory leak in libkmf/get_rdn function
 
(from 146838-01)
 
6962781 pktool can SEGV when listing symmetric keys
6966362 pktool in Solaris 10 needs inittoken command
 
(from 127980-01)
 
6542973 KMF_FindCert is racy
6547594 KMF incorrectly processes pkcs12 files
6547853 KMF is too strict about KeyUsage
 
(from 150531-02)
 
15719515 need C_GetOperationState()/C_SetOperationState() support for SHA-2 family of digests
15766902 sha2 kernel module messes up sha384 and sha512 hmac ops
15797871 impossible to use 'mac' command for sha384_hmac and sha512_hmac mechanisms
 
(from 150531-01)
 
15767561 ucrypto_sign_final() returns CRYPTO_HOST_MEMORY in a 32-bit Java MT digital signature test
 
(from 150756-04)
 
15707265 while transitioning to LINK DOWN ibp may report LINK UP before finally reporting LINK DOWN
15727739 long failover time seen due to retrying connection establishment on timeouts
 
(from 150756-03)
 
17028207 cfgadm -alv command prints some garbage characters
 
(from 150756-02)
 
16625669 panic: RC channel freed as acache entry reference count is zeroed prematurely
 
(from 150756-01)
 
15972250 dladm on inactive interfaces causes panics in ibtl / ibd
16169163 dladm on inactive interfaces may panic via ibd_intr() with NULL id_rcq_hdl
16735164 dladm after HCA hot add sometimes gets hard hang and causes system frozen
 
(from 150760-01)
 
15768821 _aio_forkinit() is called after fork
 
(from 149642-02)
 
18179189 scsi_cache_pkt_destructor shouldn't call ddi_dma_free_handle for NULL pkt_handle
 
(from 149642-01)
 
15814664 panic assertion failed: tran_hba_flags & SCSI_HBA_ADDR_COMPLEX scsi_confsubr.c
 
(from 150169-05)
 
15693591 OK2RM LED for direct attached disk is not turned off after disk removal
15737491 blue LED OK2RM on HDD/SSD is not lit when unconfigured for removal in some cases
15779246 mpt_sas does not generate hot-plug sysevents for hot-remove
 
(from 150169-04)
 
15716085 'zpool import' hang due to mpt_sas driver race condition
 
(from 150169-03)
 
15819341 undecodable sense data returned eventually caused ZFS dtl fault
 
(from 150169-02)
 
15811509 Solaris 10 and 11 systems are panicking in mptsas_start_cmd0
 
(from 150169-01)
 
15751047 Sun Storage 6 Gb SAS PCIe HBA, external hotplug issue
 
(from 150527-05)
 
15768532 node panic reservation conflict while upgrading firmware on ST2540
 
(from 150527-04)
 
15819700 support for MPxIO on EMC VRAID
17296592 regression of 15819700, should remove "DGC LUNZ" in asym_emc failover module
17585850 panic in vhci_mpapi_sync_lu_oid_list
 
(from 150527-03)
 
15617994 scsi_vhci panic in vhci_tpgs_inquiry:: NULL pointer dereference
 
(from 150527-02)
 
15653447 mpathadm does not show the failed storage path info
 
(from 150527-01)
 
15822598 scsi_vhci not handling takeover on NetApp storage correctly


Patch Installation Instructions:
--------------------------------
 
Please refer to the man pages for instructions on using 'patchadd'
and 'patchrm' commands provided with Solaris.
 
The following example installs a patch to a standalone machine:
 
       example# patchadd /var/spool/patch/123456-07
 
The following example removes a patch from a standalone system:
 
       example# patchrm 123456-07
 
For additional examples please see the appropriate man pages. Any
other special or non-generic installation instructions should be
described below as special instructions.


Special Install Instructions:
-----------------------------
 
NOTE 1:  After installing this patch, all zones have to be rebooted.
 
NOTE 2:  With the integration of bug 15689118 (pgstat(1M) should report
         absolute maximum capacity of a PG), pgstat(1M) will report
         fixed capacity reporting for hardware utilization by default
         but leave the ability to use the learned capacities by
         specifying the -l option.
 
         -l
             Use the learned capacity in hardware utilization calcu-
             lations.  The learned  capacity is the maximum observed
             hardware utilization since boot.
 
         For OUTPUT HEADINGS, UTIL and CAP output printed is updated.
         The updated meaning of these headings is as below:
 
         UTIL
 
             Hardware utilization of PG's shared hardware component
             normalized per second.  This can be a large number, so K,
             M, B, and T are used for denoting  thousand, million,
             billion, and trillion, respectively.
 
         CAP
 
             Approximate maximum possible utilization for PG's shared
             hardware component per second.  This value is fixed by
             default at a best guess for the given platform, but can
             be changed to a learned value using the -l option. This
             can be a large number, so K, M, B, and T are used for
             denoting thousand, million, billion, and trillion,
             respectively.
 
NOTE 3:  On removal of this patch, the ps binary is not restored automatically.
         It needs to be manually restored using the following command at
         zone prompt:
 
         # cp /usr/bin/ps.pre_p2v /usr/bin/ps
 
NOTE 4:  This patch requires a reboot to restart the in.iked(1M) daemon.
         Until the daemon is restarted it will continue to run the older
         version of the software.
 
         The in.iked daemon may be restarted manually when convenient by
         assuming a role with the necessary privileges and performing the
         following command:
 
         # svcadm restart svc:/network/ipsec/ike
 
NOTE 5:  If ignore_ocsp keyword is present and uncommented in the
         ike.config(4) file,  in.iked(1M) ignores OCSP information in
         certificate X.509v3 extensions and does not query Certificate
         Authorities via OCSP.
 
NOTE 6:  With the integration of bug 16886354 (IKEv1 should understand
         certificates signed with SHA-2), support has been added for
         SHA-2 signed certificates to ikecert(1M). Now '-t' option of
         ikecert(1M) supports following key types in addition to existing
         key types:
 
             rsa-sha256, rsa-sha384, rsa-sha512 and dsa-sha256.
 
NOTE 7:  New 'hash' option for the 'gencsr' command of 'pktool' is
         available to allow 'sha1' hash as well as default 'md5' one
         be used in certificate signing request generated by pktool.
 
NOTE 8:  The emlxs driver also supports the SR-IOV capability on the Sun
         Storage 16 Gb Fibre Channel PCIe Universal Host Bus Adapter, Emulex
         host bus adapter.  In the SR-IOV enabled mode, it supports the
         physical function and virtual function of the adapter.  Point-to-point
         fabric connections are not supported in SR-IOV enabled mode.
 
NOTE 9:  This patch delivers an additional defined 'action' parameter,
         DDI_CB_PCIV_CLASS_CONFIG, to ddi_cb_register(9F), to be used when
         the 'flags' parameter to ddi_cb_register() is DDI_CB_FLAG_SRIOV.
         DDI_CB_PCIV_CLASS_CONFIG is described as follows:
 
         DDI_CB_PCIV_CLASS_CONFIG
 
           The  PF  driver  is  being  notified  of  its  VF  Class
           Configuration  changes.  fciov_conf_t is being passed as
           cbarg  to  describe  the class  configuration  for Fibre
           Channel  devices.  This  data structure  may change  for
           devices other than Fibre Channel devices. Currently only
           Fibre  Channel  devices  are  supported.  The  cmd field
           fciov_cmd_t   if   the   Class  Configuration  is  being
           CONFIGURED/UNCONFIGURED/UPDATED.   The   fciov_cfg_flags
           indicate   which   of  the  three   Class  configuration
           parameters is  being affected.  The fci_vf_id identifies
           the VF.
 
           cbarg (when action is set to DDI_CB_PCIV_CLASS_CONFIG)
            fciov_conf_t
 
           typedef struct fciov_conf {
            fciov_config_cmd_t  fci_cmd; /* configuration op to be performed */
 
         Three commands are currently defined to configure, update or
         The following  are the flags  that provide  which fields are
         valid for a given command.
 
           typedef enum {
            FCIOV_NODE_WWN = 0x1      /* node WWN info is valid */
            FCIOV_PORT_WWN = 0x2      /* port WWN info is valid */
            FCIOV_BANDWIDTH = 0x4     /* bandwidth info is valid */
           } fciov_cfg_flags_t;
 
         The driver can return one of the following codes back to the caller:
 
         DDI_SUCCESS
 
           The request was accepted and the class configuration has
           been successfully completed.
 
NOTE 10: Manual steps may be required to make the fix for 15741380 work with
         Symantec NetBackup.  Contact Symantec support for further information.

NOTE 11: This kernel patch may cause I/O failure when all active Fibre
         Channel (FC) paths become offline, even though there are standby
         or non-optimized paths available.  This issue may occur when a
         failover is triggered on a storage system or when cables serving
         active paths are disconnected.  Only systems utilizing I/O
         Multipathing connected to Fibre Channel storage devices with
         asymmetric access are impacted by this issue.  To work around
         this issue, do not offline all active paths or initiate failover.

         Please see Service Alert Document 1986424.1:

         https://support.oracle.com/rs?type=doc&id=1986424.1

         for more details.

NOTE 12: Systems with certain ZFSSA software versions uing zpool(1M) cache
         devices (also known as l2arc) with this kernel patch applied may
         panic.  To work around this issue, remove the cache devices from
         all imported ZFS pools using the following command and reboot:

         # zpool remove <poolname> <cache-vdev>

         Please see Service Alert Document 1985381.1:

         https://support.oracle.com/rs?type=doc&id=1985381.1

         for more details.


README -- Last modified date: Wednesday, May 6, 2015