On Solaris 10 package management was generally a pain, but there was a "sparse root" kind of zone that shares /usr with the global zone, so these get the updates automatically.
For OpenSolaris derived products with ipkg, the documentation says that "pkg update" in the global zone will update not only the global zone but all non-global zones as well.
http://solaris.reys.net/zones-in-solaris-10-part-three-spars...
For OpenSolaris derived products with ipkg, the documentation says that "pkg update" in the global zone will update not only the global zone but all non-global zones as well.
https://docs.oracle.com/cd/E26502_01/html/E28984/gmhaa.html