Well if you can connect to the Internet Sun has a patch management program available.
My networks are not on the Internet though, so I have to download the latest patch cluster. I place those files in an NFS share that gets mounted on all my machines. Then I have a script that checks the version of the Kernel jumbo patch against the one in the directory, if it is less then that it sends a status to my Big Brother display. I then have a patch script that copies certain files and installs the cluster, and finally copies the original files back. Sorry got long winded there....LOL.