Applying a Patch to a Solaris System With Zones Installed
You can use the patchadd system utility described in the patchadd(1M) man page to
perform the following tasks:
- Apply a patch to the global zone only 
- Apply a patch to the global zone and all non-global zones 
- Apply a patch to specified non-global zone only 
How to Apply a Patch to the Global Zone Only
You must be the global administrator in the global zone to perform
this procedure.
- Become superuser, or assume the Primary Administrator role.To create the role and assign the role to a user, see
Using the Solaris Management Tools With RBAC (Task Map) in System Administration Guide: Basic Administration. 
- Execute the patchadd command with the -Goption, followed by the patch ID.global# patchadd -G patch_id 
How to Apply a Patch to the Global Zone and All Non-Global Zones
You must be the global administrator in the global zone to perform
this procedure.
- Become superuser, or assume the Primary Administrator role.To create the role and assign the role to a user, see
Using the Solaris Management Tools With RBAC (Task Map) in System Administration Guide: Basic Administration. 
- Execute the patchadd command followed by the patch ID.global# patchadd patch_id 
How to Apply a Patch to a Specified Non-Global Zone Only
To apply a patch to a specified non-global zone only, the SUNW_PKG_ALLZONES
package parameter for all packages in the patch set must be set to
false.
You must be the zone administrator in the non-global zone to perform this
procedure.
- Log in to the non-global zone as the zone administrator. 
- While in the non-global zone, my-zone in this procedure, execute the patchadd
command followed by the patch ID.my-zone# patchadd patch_id