Managing Solaris Patches (Tasks)
Patch management involves listing or installing Solaris patches from a system running the Solaris release. Patch management might also involve removing (called backing out) unwanted or faulty patches.
This is a list of the step-by-step instructions in this chapter.
This is a list of the overview information in this chapter.
For information on adding patches to diskless client systems, see "Patching Diskless Client OS Services".
What Is a Patch?
A patch is a collection of files and directories that replace or update existing files and directories that are preventing proper execution of the software. The existing software is derived from a specified package format, which conforms to the Application Binary Interface. For details about packages, see Chapter 22, Managing Software (Overview).
Tools for Managing Solaris Patches
Patches Tool - Use this Solaris Management Console tool to manage patches.
Before installing patches, you might want to know more about patches that have previously been installed. The following table describes commands that provide useful information about patches that are already installed on a system.
Table 24-1 Commands for Solaris Patch Management
patchadd -p, showrev -p
Shows all patches that have applied to a system.
pkgparam pkgid PATCHLIST
Shows all patches that have been applied to the package identified by pkgid, the name of the package. For example, SUNWadmap.
patchadd -S Solaris-OS -p
Shows all the /usr patches installed on an OS server.
Solaris Patch Distribution
All Sun customers can access security patches and other recommended patches through the SunSolve program. The following table describes the various ways to access Solaris patches.
Table 24-2 Customer Patch Access Information
SunSpectrum contract customer
You have access to the SunSolve database of patches and patch information. These are available from the SunSolve web page or by using anonymous ftp, as described in "Accessing Solaris Patches".
These patches are updated nightly. You also receive a patch CD-ROM every 6 to 8 weeks.
Not a SunSpectrum contract customer
Accessing Solaris Patches
You can access Solaris patches from a web page or by using anonymous ftp. If you have purchased a Sun service contract, you will also be able to get patches directly from the SunSolve web page or from the patch CD-ROM that is regularly distributed.
To access patches from a web page, you need a system that is:
Connected to the Internet
Capable of running web browsing software such as Netscape
To access patches by anonymous ftp, you need a machine that is:
Connected to the Internet
Capable of running the ftp program
You can either install a patch cluster of recommended patches or individual patches that are freely available. Patch reports are available also.
You can also access publicly available patches by using this URL:
Solaris Patch Numbering
Patches are identified by unique alphanumeric strings, with the patch base code first, a hyphen, and a number that represents the patch revision number. For example, patch 108528-10 is a SunOS 5.8 kernel update patch.