The Sun Update Manger usually downloads patches to ⁄var⁄sadm⁄spool as .jar files but cannot always apply the patches from the GUI. In this case you may need to open a terminal window and use:

patchadd [-n] [-B full-path-to-backout-directory -M full-path-patch-directory patch-file-name
where:
-n … do not check the patch signing
-B … backout directory. This can be omitted if you don’t ever want to back out of a patch!!
-M … path to location of patch. ⁄var⁄sadm⁄spool is the default location so can be omitted if that is where the patch file is located.

eg. patchadd -n -B ⁄var⁄sadm⁄backout -M ⁄var⁄sadm⁄spool 128307-04.jar

“man patchadd” is your friend.