From: Steinar.Haug@delab.sintef.no (Steinar Haug)
Subject: Re: List of SUN Bug fixes
Organization: SINTEF DELAB, Trondheim, Norway.
	<1993Jan11.165042.17543@uklirb.informatik.uni-kl.de>
Date: Mon, 11 Jan 1993 21:08:05 GMT

lott@bogner.informatik.uni-kl.de (Christopher Lott AGSE) writes:
> Fine, beyond the headache of getting the patches, which I'm told
> are available via anon ftp, I would like to know whether there is
> any canonical way to get a list of all the patches that should be
> applied to a given system.  No, we don't have support, that's why
> I'm asking the nice people who read this group :-)  I have found
> a number of patches that clearly apply to us, but wonder how many
> we are missing.

No, unfortunately, there is no such thing as a canonical list of patches
that should be applied to a given system. I have included below an earlier
posting I made about this; which includes a list of patches for 4.1.2.

> On the same subject, is it worth upgrading from 4.1.1 to 4.1.2?
> (Is this a FAQ?  Sorry if so.)  Is or will there ever be 4.1.3 for
> sparcs such as the IPX?  Or is our only recourse to jump to 5.0
> and Solaris (and a whole new set of bugs)?

Well, if you're thinking about upgrading, you should go to 4.1.3 instead of
4.1.2; 4.1.3 has been available for a while now. I have been busily upgrading
all our Suns here to 4.1.3, and figure on running 4.1.3 for quite a while
until I feel Solaris 2.x is "stable enough". Here is the list of the patches
I applied to 4.1.3. Note that after applying these, I have been warned that
100557-03 may not be a good idea.

100075-09 rpc.lockd jumbo patch
100103-11 script to change file permissions to a more secure mode
100170-09 jumbo patch to fix various ld problems
100173-09 NFS Jumbo Patch
100257-04 jumbo patch for ld.so, ldd, and ldconfig
100296-04 netgroup exports to world
100305-10 lpd can be used to delete any file on the system
100338-05 system crashes with assertion failed panic
100359-06 streams jumbo patch
100377-05 Sendmail.mx doesn't recognize wildcard, 
100383-05 rdist security enhancement
100465-02 DNS res_send() fails if first nameserver in resolv.conf returns ECONNREFUSED
100468-03 rcp/rsh should use setsockopt to detect failed connection rsh uses old-style selects instead of 4.0 selects.
100482-04 ypserv and ypxfrd fix, plus DNS fix
100507-04 tmpfs jumbo patch
100513-02 Jumbo tty patch
100557-03 ftp Jumbo patch                   
100567-04 mfree panic due to mbuf being freed twice, icmp redirects can be used to make a host drop connections
100584-03 system freezes using loopback interface,BSD4.2 keepalive
100623-03 UFS jumbo patch
100630-01 environment variables can be used to exploit login/su
100645-01 swapon with very large swap files hangs, systems temporarily hang while a large process exits
100804-01 TCP "reset"s can cause an mbuf leak, resulting in mbuf map full

Regards,

Steinar Haug, system/networks administrator
SINTEF DELAB, University of Trondheim, NORWAY
Email: Steinar.Haug@delab.sintef.no, 
	sthaug@idt.unit.no, steinar@tosca.er.sintef.no
----------------------------------------------------------------------
In-reply-to: wee@darkside.osrhe.uoknor.edu's message of 5 Dec 92 18:28:10 GMT
Newsgroups: comp.sys.sun.admin
Subject: Re: patching gripes
Distribution: 

wee@darkside.osrhe.uoknor.edu (Operator) writes:
> Does anyone have a complete list of patches that need or should be applied
> to a stock 4.1.2 OS ? (with OW3, SNM 1.2)

Unfortunately, there is no such thing! What patches need to be applied depend
on your situation. Yes, there are a number of patches which *probably* should
be applied by everybody. But there are always some patches that some people
will need and some people won't. For instance: There is a TMPFS jumbo patch
(100507-04). Now if you don't run TMPFS, there is probably no need for you to
install this patch. Likewise, there is a jumbo patch for the Galaxy series of
machines (MP-630/670/670 with the Ross modules): 100542-06. If you don't have
this particular type of processor, that patch is uninteresting to you. Same 
with 100575-02. !00570-03 is only of interest if you have machines with Intel
(ie) Ethernet controller.

That being said, here is a reasonable starting point for common 4.1.2 patches:
(I'm sure ither people will supply you with additions to this list.)

100075-09   4.1;4.1.1;4.1.2;4.1.3: rpc.lockd jumbo patch
100103-11   SunOS 4.1, 4.1.1, 4.1.2, 4.1.3: script to change file permissions
100170-09   SunOS 4.1;4.1.1;4.1.2;4.1.3: jumbo patch to fix various ld problems
100173-09   SunOS 4.1.1/4.1.2/4.1.3 : NFS Jumbo Patch
100178-07   SunOS 4.0.3;4.1;4.1.1;4.1.2;4.1.3: inetd "broken server detection"
100224-04   SunOS 4.1.1,4.1.2: program "mail" "rmail" problem in delivering mai
100296-04   SunOS 4.1.1, 4.1.2, 4.1.3: netgroup exports to world
100303-02   SunOS 4.1;4.1.1;4.1.2: system freezes using loopback interface
100305-10   SunOS 4.1;4.1.1;4.1.2;4.1.3: lpd can be used to delete any file on 
100332-08   Fortran 1.4: Fixes several bugs including the back end components
100338-05   SunOS 4.1.1;4.1.2;4.1.3: system crashes with assertion failed panic
100359-06   SunOS 4.1.1;4.1.2;4.1.3: streams jumbo patch
100376-04   SunOS 4.1;4.1.1;4.1.2 SPARC:Integer divisionmultiplication bug
100383-05   SunOS 4.0.3;4.1;4.1.1;4.1.2;4.1.3: rdist security enhancement
100444-28   OW 3.0: Openwindows V3.0 Server Patch 3000-52
100451-30   OLIT3.0 CTE Jumbo Patch
100452-20   OW 3.0: XView3.0 CTE Jumbo Patch
100462-11   OpenWindows V3.0: File Manager CTE Jumbo Patch
100468-03   SunOS 4.1.1;4.1.2;4.1.3: rcprsh should use setsockopt to detect fai
100482-04   SunOS 4.1;4.1.1;4.1.2;4.1.3: ypserv and ypxfrd fix, plus DNS fix
100498-02   SNM1.2 Jumbo patch: Browser core dumps when accessing menus
100507-04   SunOS 4.1.1, 4.1.2, 4.1.3: tmpfs jumbo patch
100513-01   SunOS 4.1.x: Jumbo tty patch
100523-02   OW 3.0 Calendar Manager CTE Jumbo Patch
100524-06   OW 3.0: Classing Engine (libce) Patch
100532-02   SunOS 4.1.2: international libc replacement
100533-10   XGL 2.0: jumbo libxgl patch built with SC1.0 cc compiler
100536-02   SunOS 4.1.2: NFS can cause panic: assertion failed crashes
100542-06   SunOS 4.1.2: IPI - Galaxy jumbo patch
100557-03   SunOS 4.1.2, 4.1.3: ftp Jumbo patch
100567-04   SunOS 4.1,4.1.x: mfree panic due to mbuf being freed twice, icmp
100570-03   SunOS 4.1.1;4.1.2;4.1.3: ie0 ethernet jumbo patch
100573-03   OpenWindows 3.0: ld patch 100170-06 causes undefined symbols when u
100575-02   SunOS 4.1.2: MP machines do not perform as well as 44XX equivalent
100577-02   SunOS 4.1.2: atomic swap instruction is failing on sun4c & sun4
100584-02   SunOS 4.1.1;4.1.2;4.1.3: system freezes using loopback interface
100623-02   SunOS 4.1.2;4.1.3: UFS jumbo patch
100626-03   OW 3.0: Tooltalk: jumbo patch. Rev 3.
100631-01   SunOS 4.x: environment variables can be used to exploit login

> I'm going slightly mad trying to track down all the patches through ftp 
> sites.  Does Sun supply *all* patches via CDROM or QIC tape?

You have to ask your Sun contact for these patches. Some of them you may be
able to find via anonymous FTP - try archie. You cannot ask Sun 'Give me *all*
patches' but you can ask them to give you *specific* patches. For instance the
ones I have listed here.

> Does anyone know the naming scheme for Sun's patches?  For example:
> Patch 100482-03   - date: 15-Sept-92
> Patch 100633-01	  - date: 22-May-92
> Why is it the higher Patch # (100633-01) is older than patch #100482-03?

Because 100482-01 came out before 100633-01. 100482 was lated updated, such
that the newest version (-04!) is newer than 100633-01.

> Does it matter which patch I install and in what order?

Read the documentation for *all* the patches you want to install, before you
actually install them. If there are conflicts with other patches, or specific
sequences you need to follow, the instructions will tell you.

> Why oh why do we have to install all of these by hand?  It's an
> administration nightmare.

I quite agree. HP has a better system. I also think Solaris 2.x has a better
system (but haven't really checked this out yet).

> Where can I get info/notification on new patches (does Sun send out
> a letter?)  Everything so far about Sun makes me feel like I'm in
> the dark. (I wanna be in the *IN* crowd! ;)

Read Usenet News! That is by far the most important, in my opinion. Yes, you
can get some info from your Sun representative. You can get STBs and buglists.
But feedback from other Sun users on the net is far more valuable.

Regards,

Steinar Haug, system/networks administrator
SINTEF DELAB, University of Trondheim, NORWAY
Email: Steinar.Haug@delab.sintef.no, 
	sthaug@idt.unit.no, steinar@tosca.er.sintef.no
Newsgroups: comp.sys.sun.admin