After a year of development, SUSE has released the SUSE Linux Enterprise 15 SP6 distribution. Products such as SUSE Linux Enterprise Server, SUSE Linux Enterprise Desktop, SUSE Linux Enterprise High Performance Computing, and SUSE Linux Enterprise High Availability Extension are based on the SUSE Linux Enterprise platform. The distribution can be downloaded and used for free, but access to updates and patches is limited to a 60-day trial period. The release is available in builds for architectures aarch64, ppc64le, s390x, and x86_64.
SUSE Linux Enterprise 15 SP6 supports full binary compatibility of packages with the community-driven distribution openSUSE Leap 15.6, which was released last week. This high level of compatibility is achieved by using a unified set of binary packages in openSUSE and SUSE Linux Enterprise, rather than rebuilding src packages. Users are expected to initially create and test a working solution using openSUSE, and then transition smoothly to the commercial version of SUSE Linux with full support, SLA, certification, long-term updates, and enhanced large-scale deployment tools.
Key Changes:
- The desktop environment has been updated to GNOME 45 (the previous release featured GNOME 41). The graphics stack has been upgraded to Mesa 23.3.4.
- The Linux kernel has been updated to version 6.4 (the previous release used kernel 5.14). The system environment includes updated glibc 2.38 and systemd 254. By default, cgroup v2 is enabled in systemd.
- Packages updated include dracut 059, PulseAudio 17.0, PipeWire 1.0.4, DPDK 22.1, OpenSSL 3.1.4, firewalld 2.0.1, GnuTLS 3.8.0, OpenVPN 2.6, MariaDB 10.11.6, PostgreSQL 16, Redis 7.2, PHP 8.2, Node.js 20, BIND 9.18, OpenSSH 9.6p1.
- Components used for virtualization and container isolation have been updated: Podman 4.8.3, Xen 4.18, KVM 8.1.3, QEMU 8.2, libvirt 10, virt-manager 4.1, Open vSwitch 3.1, OVN 23.03, Docker 24.0, containerd 1.7.10, Skopeo 1.12, open-vm-tools 12.3.5.
- An experimental iaa driver (IAA Compression Accelerator) has been added to accelerate data compression and decompression operations using the capabilities of Intel Analytics Accelerator (IAA) cryptographic accelerators.
- By default, the use of Docker Hub and openSUSE Registry container repositories is disabled; to pull containers from these repositories, they should be specified in the file /etc/containers/registries.conf.
- A sysctl-logger package has been added that uses BPF to monitor changes in sysctl values.
- The rpm-imaevmsign package has been added with a plugin for the RPM package manager, enabling the use of IMA (Integrity Measurement Architecture) and EVM (Extended Verification Module) technologies. IMA is used to verify the integrity of operating system components based on digital signatures and hashes. EVM protects file extended attributes (xattrs) from attacks aimed at compromising their integrity.
- In X.org and Xwayland servers, by default, the acceptance of connections from clients with different hardware architectures is disabled.
- Implemented in NFSv4 support for IPv6 on the client side (NFSv4 server does not support IPv6).
- In OpenSSH, the use of RSA host keys less than 2048 bits is prohibited.
- In the installer, the reuse of existing LVM partitions is disabled by default.
- The YaST Partitioner in the installer now supports disk encryption using the LUKS2 (Linux Unified Key Setup) format.
- Support for NVIDIA Virtual GPU (vGPU) 16.2 has been added.
- The numad, openmpi2, and openmpi3 packages have been removed. The dpt_i2o driver for Adaptec RAID controllers based on I2O has been removed due to security issues.
Source: opennet.ru
